Share your thoughts, 1 month free Claude Pro on usSee more
WorkDL logo mark

Mitigating Over-Refusal in Aligned Large Language Models via Inference-Time Activation Energy

About

Safety alignment of large language models currently faces a central challenge: existing alignment techniques often prioritize mitigating responses to harmful prompts at the expense of overcautious behavior, leading models to incorrectly refuse benign requests. A key goal of safe alignment is therefore to improve safety while simultaneously minimizing false refusals. In this work, we introduce Energy Landscape Steering (ELS), a novel, fine-tuning free framework designed to resolve this challenge through dynamic, inference-time intervention. We train a lightweight external Energy-Based Model (EBM) to assign high energy to undesirable states (false refusal or jailbreak) and low energy to desirable states (helpful response or safe reject). During inference, the EBM maps the LLM's internal activations to an energy landscape, and we use the gradient of the energy function to steer the hidden states toward low-energy regions in real time. This dynamically guides the model toward desirable behavior without modifying its parameters. By decoupling behavioral control from the model's core knowledge, ELS provides a flexible and computationally efficient solution. Extensive experiments across diverse models demonstrate its effectiveness, raising compliance on the ORB-H benchmark from 57.3 percent to 82.6 percent while maintaining baseline safety performance. Our work establishes a promising paradigm for building LLMs that simultaneously achieve high safety and low false refusal rates.

Eric Hanchen Jiang, Weixuan Ou, Run Liu, Shengyuan Pang, Guancheng Wan, Ranjie Duan, Wei Dong, Kai-Wei Chang, XiaoFeng Wang, Ying Nian Wu, Xinfeng Li• 2025

Related benchmarks

TaskDatasetResultRank
General CapabilityMMLU
MMLU Accuracy76.1
73
False Refusal EvaluationORB-H
CR97.2
35
Safety PerformanceJBB
Refusal Score (CR)43
35
Benign ComplianceXSTest
Comply Score97.6
7
Harmful RefusalWJB
ASR20.7
7
Harmful RefusalWG (test)
ASR21.9
7
Harmful Prompt RefusalHarmBench
ASR28.9
7
Harmful RefusalDAN
ASR37.2
7
Showing 8 of 8 rows

Other info

Follow for update