Built independently by an author, for readers. Read the story and support ChapterPal

keyword

unsafe categories

Unsafe categories refer to standardized classifications of harmful, illegal, or unethical content used to evaluate, moderate, and improve the safety of artificial intelligence systems. In the context of natural language processing and content moderation, these categories delineate specific types of unacceptable model outputs, commonly encompassing areas such as hate speech, harassment, self-harm, sexually explicit material, violence, illegal acts, and privacy violations. Researchers and developers utilize these predefined taxonomies to assess model vulnerabilities against adversarial prompts, measure toxicity across diverse risk domains, and implement safety interventions to ensure generated content aligns with ethical and legal standards.

1 item

Detoxifying Large Language Models via Knowledge Editing

Detoxifying Large Language Models via Knowledge Editing

Mengru Wang, Ningyu Zhang, Ziwen Xu, Zekun Xi, Shumin Deng, Yunzhi Yao, Qishen Zhang, Linyi Yang, Jindong Wang, Huajun Chen

OrganizationsAnt GroupMicrosoftMinistry of EducationNational University of SingaporeNUS-NCS Joint LabSoutheast UniversityWestlake UniversityZhejiang University

Why you should read this

Presents the SafeEdit benchmark and a single-instance knowledge editing method, DINM, to directly modify toxic model parameters rather than merely suppressing their activations, effectively detoxifying large language models without degrading their general performance.

This paper investigates using knowledge editing techniques to detoxify Large Language Models (LLMs). We construct a benchmark, SafeEdit, which covers nine unsafe categories with various powerful attack prompts and equips comprehensive metrics for systematic evaluation. We conduct experiments with several knowledge editing approaches, indicating that knowledge editing has the potential to detoxify LLMs with a limited impact on general performance efficiently. Then, we propose a simple yet effective baseline, dubbed Detoxifying with Intraoperative Neural Monitoring (DINM), to diminish the toxicity of LLMs within a few tuning steps via only one instance. We further provide an in-depth analysis of the internal mechanism for various detoxifying approaches, demonstrating that previous methods like SFT and DPO may merely suppress the activations of toxic parameters, while DINM mitigates the toxicity of the toxic parameters to a certain extent, making permanent adjustments. We hope that these insights could shed light on future work of developing detoxifying approaches and the underlying knowledge mechanisms of LLMs¹.

Added

2026-10-02