arXiv:2605.14750cs.CRcs.AI2026-05TPAMI被引 1

通过精准编辑神经元,实现模型安全对齐,不降性能

EVA: Editing for Versatile Alignment against Jailbreaks

论文配图:EVA: Editing for Versatile Alignment against Jailbreaks
图 1 · 摘自论文原文
  • 识别并手术式编辑易受攻击的神经元,不重训练
  • 在大语言和视觉语言模型上均有效抑制越狱攻击
  • 适合需要快速部署安全更新的场景

大型语言模型(LLMs)和视觉语言模型(VLMs)虽表现优异,但仍易受越狱攻击,即攻击者利用文本或视觉触发词绕过安全防护。现有防御多依赖安全微调或外部过滤器,但常伴随显著计算开销,并引发安全与可用性之间的权衡,损害模型在正常任务上的表现。为此,我们提出EVA(Editing for Versatile Alignment against Jailbreaks),首个将直接模型编辑用于安全对齐的框架。EVA将安全对齐重构为精准的知识修正任务,不重训大规模参数,而是定位并精准编辑导致模型易受有害指令影响的特定神经元,同时保持模型大部分结构不变。通过局部化更新,EVA有效消除有害行为,且不影响模型的通用推理能力。大量实验表明,EVA在各类LLMs与VLMs上均优于基线方法,提供了一种精确、高效的后部署安全对齐方案。

原文摘要 · Abstract (English)

Large Language Models (LLMs) and Vision Language Models (VLMs) have demonstrated impressive capabilities but remain vulnerable to jailbreaking attacks, where adversaries exploit textual or visual triggers to bypass safety guardrails. Recent defenses typically rely on safety fine-tuning or external filters to reduce the model's likelihood of producing harmful content. While effective to some extent, these methods often incur significant computational overheads and suffer from the safety utility trade-off, degrading the model's performance on benign tasks. To address these challenges, we propose EVA (Editing for Versatile Alignment against Jailbreaks), a novel framework that pioneers the application of direct model editing for safety alignment. EVA reframes safety alignment as a precise knowledge correction task. Instead of retraining massive parameters, EVA identifies and surgically edits specific neurons responsible for the model's susceptibility to harmful instructions, while leaving the vast majority of the model unchanged. By localizing the updates, EVA effectively neutralizes harmful behaviors without compromising the model's general reasoning capabilities. Extensive experiments demonstrate that EVA outperforms baselines in mitigating jailbreaks across both LLMs and VLMs, offering a precise and efficient solution for post-deployment safety alignment.

模型编辑安全对齐越狱防御

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。