为不同危害类别定制安全阈值,让模型更精准地拒绝有害请求。
Cat-DPO: Category-Adaptive Safety Alignment

- 按类别分别设置安全边界,动态调整训练强度
- 在六种基线中提升整体有用性和无害性,减少类别间差异
- 适合需要精细控制安全性的大模型应用
将大语言模型与人类偏好对齐需平衡有用回应与可靠拒绝有害请求。现有基于偏好的安全对齐方法将安全压缩为单一标量,统一应用于所有偏好对齐对,导致模型平均看似安全,但在少数危害类别上仍存在风险。本文将安全对齐建模为每类约束优化问题,提出Cat-DPO算法:为每类危害设定独立的自适应安全边际。当某类仍有不安全输出时边际收紧,模型赶上后则放松,使训练信号追踪各类别当前难度而非依赖全局统一率。在两个LLM骨干网络和六种偏好学习基线上,Cat-DPO均提升综合有用性与无害性,压缩每类安全性能方差及最优最差类别差距,可作为直接偏好对齐的安全性即插即用增强方案。
原文摘要 · Abstract (English)
Aligning large language models with human preferences must balance two competing goals: responding helpfully to legitimate requests and reliably refusing harmful ones. Most preference-based safety alignment methods collapse safety into a single scalar that is applied uniformly to every preference pair. The result is a model that looks safe on average but stays relatively unsafe on a minority of harm categories. We cast safety alignment as a per-category constrained optimization problem and derive Cat-DPO, a direct-preference-optimization algorithm with a separate adaptive safety margin for each harm category. The margin tightens when the model still produces unsafe responses on a category and relaxes once the model catches up, so the training signal tracks each category's current difficulty rather than averaging under one global rate. Across two LLM backbones and six preference-learning baselines, Cat-DPO improves aggregate helpfulness and harmlessness and compresses per-category safety variance and the best-to-worst gap, offering a drop-in per-category refinement of direct preference safety alignment.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。