arXiv:2601.03537cs.AIcs.CL2026-01被引 2

让AI自己学安全规则推理,自动提升抗越狱攻击能力。

STAR-S: Improving Safety Alignment through Self-Taught Reasoning on Safety Rules

  • 通过自教循环让模型自主生成安全推理过程
  • 在多个越狱攻击测试中显著优于基线方法
  • 适合关注大模型安全对齐的研究者与开发者

防御越狱攻击对大语言模型的安全部署至关重要。现有研究尝试通过训练模型在回应前推理安全规则来提升安全性,但如何设计有效安全推理形式仍难以明确。为此,我们提出STAR-S(基于安全规则的自教推理),将安全规则推理学习融入自教循环。核心机制是引导模型基于安全规则进行推理与反思,并通过微调增强其推理能力,重复此过程形成协同增益。模型对安全规则的理解提升后,能生成更优的推理数据用于后续训练。实验表明,STAR-S能有效抵御越狱攻击,性能超越现有基线。代码已开源:https://github.com/pikepokenew/STAR_S.git。

原文摘要 · Abstract (English)

Defending against jailbreak attacks is crucial for the safe deployment of Large Language Models (LLMs). Recent research has attempted to improve safety by training models to reason over safety rules before responding. However, a key issue lies in determining what form of safety reasoning effectively defends against jailbreak attacks, which is difficult to explicitly design or directly obtain. To address this, we propose \textbf{STAR-S} (\textbf{S}elf-\textbf{TA}ught \textbf{R}easoning based on \textbf{S}afety rules), a framework that integrates the learning of safety rule reasoning into a self-taught loop. The core of STAR-S involves eliciting reasoning and reflection guided by safety rules, then leveraging fine-tuning to enhance safety reasoning. Repeating this process creates a synergistic cycle. Improvements in the model's reasoning and interpretation of safety rules allow it to produce better reasoning data under safety rule prompts, which is then utilized for further training. Experiments show that STAR-S effectively defends against jailbreak attacks, outperforming baselines. Code is available at: https://github.com/pikepokenew/STAR_S.git.

安全对齐越狱攻击自教推理

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。