揭示大模型过量拒绝的根源并提出针对性缓解框架
Understanding and Mitigating Overrefusal in LLMs from an Unveiling Perspective of Safety Decision Boundary
- 通过分析安全决策边界,定位过量拒绝的敏感区域
- 构建RASS框架,自动生成边界附近高风险提示词
- 支持多语言评估,提升模型安全与可用性平衡
大语言模型在诸多任务中表现卓越,却常对合理请求过度拒绝,即过量拒绝现象。这通常源于安全对齐过于保守,使模型难以区分良性与有害内容的细微差异。本文通过探测和利用模型的安全决策边界,系统分析并缓解该问题。研究发现,过量拒绝主要源于边界区域的对齐偏差。基于此,提出RASS——一种自动化提示生成与选择框架,通过表征空间中的引导向量识别并筛选靠近安全边界的提示词,实现精准干预。该方法不仅提供更清晰可解释的安全决策视角,还可无缝扩展至多语言场景。我们对多种大模型的安全边界进行了分析,并构建了MORBench评测集,用于跨语言环境下模型安全性和帮助性的稳健评估。代码与数据集已公开于https://github.com/Master-PLC/RASS。
原文摘要 · Abstract (English)
Large language models (LLMs) have demonstrated remarkable capabilities across a wide range of tasks, yet they often refuse to answer legitimate queries--a phenomenon known as overrefusal. Overrefusal typically stems from over-conservative safety alignment, causing models to treat many reasonable prompts as potentially risky. To systematically understand this issue, we probe and leverage the models' safety decision boundaries to analyze and mitigate overrefusal. Our findings reveal that overrefusal is closely tied to misalignment at these boundary regions, where models struggle to distinguish subtle differences between benign and harmful content. Building on these insights, we present RASS, an automated framework for prompt generation and selection that strategically targets overrefusal prompts near the safety boundary. By harnessing steering vectors in the representation space, RASS efficiently identifies and curates boundary-aligned prompts, enabling more effective and targeted mitigation of overrefusal. This approach not only provides a more precise and interpretable view of model safety decisions but also seamlessly extends to multilingual scenarios. We have explored the safety decision boundaries of various LLMs and construct the MORBench evaluation set to facilitate robust assessment of model safety and helpfulness across multiple languages. Code and datasets are available at https://github.com/Master-PLC/RASS.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。