[2407.15549] Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs

arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website. Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them. Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs. arXiv Operational Status Get status notifications via email or slack

[2407.15549] Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs Skip to main content arXiv is now an independent nonprofit! Learn more × Search arXiv Press Enter to search · Advanced search --> Computer Science > Machine Learning arXiv:2407.15549 (cs) [Submitted on 22 Jul 2024 ( v1 ), last revised 29 Jul 2025 (this version, v3)] Title: Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs Authors: Abhay Sheshadri , Aidan Ewart , Phillip Guo , Aengus Lynch , Cindy Wu , Vivek Hebbar , Henry Sleight , Asa Cooper S

related reading

• [2401.05566] Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingarxiv.org
• [2604.16812] Introspection Adapters: Training LLMs to Report Their Learned Behaviorsarxiv.org
• A small number of samples can poison LLMs of any size \ Anthropicanthropic.com
• Introspection Adapters: Training LLMs to Report Their Learned Behaviorsarxiv.org
• [2604.22082] Removing Sandbagging in LLMs by Training with Weak Supervisionarxiv.org
• Adversarial Attacks on LLMs | Lil'Loglilianweng.github.io
• Probe-Based Data Attribution: Surfacing and Mitigating Undesirable Behaviors in LLM Post-Traininggoodfire.ai
• Nicholas Carlininicholas.carlini.com
• Latent Adversarial Training — LessWronglesswrong.com
• Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilitiesarxiv.org
• [2502.17424] Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMsarxiv.org
• [2312.06942] AI Control: Improving Safety Despite Intentional Subversionarxiv.org