Light Alignment Improves LLM Safety via Model Self-Reflection with a Single Neuron
About
The safety of large language models (LLMs) has increasingly emerged as a fundamental aspect of their development. Existing safety alignment for LLMs is predominantly achieved through post-training methods, which are computationally expensive and often fail to generalize well across different models. A small number of lightweight alignment approaches either rely heavily on prior-computed safety injections or depend excessively on the model's own capabilities, resulting in limited generalization and degraded efficiency and usability during generation. In this work, we propose a safety-aware decoding method that requires only low-cost training of an expert model and employs a single neuron as a gating mechanism. By effectively balancing the model's intrinsic capabilities with external guidance, our approach simultaneously preserves utility and enhances output safety. It demonstrates clear advantages in training overhead and generalization across model scales, offering a new perspective on lightweight alignment for the safe and practical deployment of large language models. Code: https://github.com/Beijing-AISI/NGSD.
Related benchmarks
| Task | Dataset | Result | Rank | |
|---|---|---|---|---|
| Jailbreak Attack | Prefilling Attack 20 tokens | ASR1.21 | 45 | |
| Jailbreak Attack | Prefilling Attack 40 tokens | ASR (%)1.52 | 45 | |
| Jailbreak Attack | Prefilling Attack 10 tokens | ASR8.18 | 45 | |
| Mathematical Reasoning | GSM8K | Accuracy93.3 | 29 | |
| Jailbreak Attack | GCG | ASR4 | 27 | |
| Jailbreak Attack | AutoDAN | ASR0.02 | 27 | |
| Jailbreak Attack | PAIR | ASR8 | 27 | |
| Adversarial Robustness | GCG | -- | 21 | |
| Safety Evaluation | FalseReject | USRBenign Rate65 | 18 | |
| Adversarial Robustness | AutoDAN | ASR0.00e+0 | 18 |