TERM jailbreak defense modulates residuals from attention entropy
Compared with seven defenses on seven attacks, it reports stronger robustness and low over-refusal at modest inference cost.
8 stories, newest first · one card per story
Compared with seven defenses on seven attacks, it reports stronger robustness and low over-refusal at modest inference cost.
The benchmark has 1,728 scenarios and 198 image attacks; a Meta-Auditor reached 98.5% recall at 2.9% false positives.
Jev input filtering and selective output review cut harmful LLM responses from 73.2% to 2.4% while limiting benign refusals.
Ten arms trained on about 53k dual-labeled prompts show HarmBench-copyright scores spanning 0-100 while detection stays unchanged.
Manacá-1B-Instruct-2 gained safety from iterated safety finetuning after three failed DPO runs, beating four Portuguese baselines.
PatchBench checks whether LLM jailbreak repairs fix nearby harmful prompts without over-refusing similar benign ones.
Matched tests find DPO controls LLM safety best, while representation probes monitor cheaply and can repair fine-tuning damage.
A self-distillation safety framework tunes narrow-boundary refusals in Qwen3-8B, raising target-domain refusal to 84.75% while cutting over-refusal from 15.20% to 5.20%.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views