{"id":"https://openalex.org/W7161718213","doi":"https://doi.org/10.48550/arxiv.2605.17413","title":"Ablating Safety: Mechanisms for Removing Alignment in Language Models for Security Applications","display_name":"Ablating Safety: Mechanisms for Removing Alignment in Language Models for Security Applications","publication_year":2026,"publication_date":"2026-05-17","ids":{"openalex":"https://openalex.org/W7161718213","doi":"https://doi.org/10.48550/arxiv.2605.17413"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.17413","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17413","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.17413","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136468006","display_name":"Isaac David","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"David, Isaac","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136497128","display_name":"Arthur Gervais","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gervais, Arthur","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.2287999987602234,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.2287999987602234,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.1923999935388565,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.06449999660253525,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5601999759674072},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.44690001010894775},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.4050000011920929},{"id":"https://openalex.org/keywords/projection","display_name":"Projection (relational algebra)","score":0.3944999873638153},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.38119998574256897},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.3693999946117401},{"id":"https://openalex.org/keywords/spillover-effect","display_name":"Spillover effect","score":0.3598000109195709},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.32030001282691956}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6816999912261963},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5601999759674072},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.46219998598098755},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.44690001010894775},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.4050000011920929},{"id":"https://openalex.org/C57493831","wikidata":"https://www.wikidata.org/wiki/Q3134666","display_name":"Projection (relational algebra)","level":2,"score":0.3944999873638153},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.38119998574256897},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.3693999946117401},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3675000071525574},{"id":"https://openalex.org/C55527203","wikidata":"https://www.wikidata.org/wiki/Q334194","display_name":"Spillover effect","level":2,"score":0.3598000109195709},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.32030001282691956},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.2842000126838684},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2840000092983246},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.27869999408721924},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.2671999931335449},{"id":"https://openalex.org/C17923572","wikidata":"https://www.wikidata.org/wiki/Q7250160","display_name":"Propensity score matching","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.25760000944137573},{"id":"https://openalex.org/C64543145","wikidata":"https://www.wikidata.org/wiki/Q162942","display_name":"Intersection (aeronautics)","level":2,"score":0.2574999928474426},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.2572999894618988},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.17413","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17413","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.17413","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17413","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.6831725239753723,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Safety-aligned":[0],"language":[1],"models":[2],"often":[3],"refuse":[4],"cybersecurity":[5],"requests":[6],"whose":[7],"wording":[8],"resembles":[9],"misuse,":[10],"even":[11],"when":[12],"the":[13,147],"task":[14,61],"is":[15],"authorized":[16,45,84],"and":[17,57,74,88,113,116,163,190],"defensive.":[18],"This":[19],"makes":[20],"security":[21,46,69,125,155],"evaluation":[22],"ambiguous:":[23],"a":[24,40,80,96,103,182],"failed":[25],"answer":[26],"may":[27],"reflect":[28],"missing":[29],"capability":[30],"or":[31,60],"refusal-policy":[32],"intervention.":[33],"Ablating":[34],"Safety":[35],"studies":[36],"alignment":[37,179],"removal":[38,180],"as":[39,181,186,194],"controlled":[41],"transformation-evaluation":[42],"protocol":[43],"for":[44],"tasks,":[47],"comparing":[48],"authorized-context":[49],"prompting,":[50],"reversible":[51],"refusal-direction":[52],"activation":[53],"projection,":[54],"representation-control":[55],"projections,":[56],"LoRA-based":[58],"de-alignment":[59],"adaptation.":[62],"We":[63],"evaluate":[64],"refusal,":[65],"attempt":[66],"rate,":[67],"validated":[68],"success,":[70],"general-capability":[71],"retention,":[72],"instability,":[73],"out-of-scope":[75],"unsafe":[76,134,164],"compliance":[77,135,165,192],"on":[78],"Security-AR,":[79],"60-prompt":[81],"suite":[82],"of":[83],"security,":[85],"benign":[86],"general,":[87],"non-operational":[89],"spillover":[90,149,172],"probes.":[91],"The":[92],"reported":[93],"runs":[94],"include":[95],"four-model":[97],"projection":[98,122,142],"pilot":[99],"with":[100,108,159,169],"416":[101],"completions,":[102,111],"three-model":[104],"Qwen2.5":[105],"LoRA":[106,152],"extension":[107],"1,980":[109],"held-out":[110],"representation":[112],"robustness":[114],"sweeps,":[115],"executable":[117],"secure-repair":[118],"validators.":[119],"Single-vector":[120],"refusal":[121],"raises":[123,153,171],"mean":[124,154],"score":[126,156,161],"only":[127],"from":[128,136],"0.46":[129],"to":[130,138,157,173],"0.50":[131],"while":[132,145,167],"increasing":[133],"0.10":[137],"0.47;":[139],"rank-4":[140],"refusal-subspace":[141],"reaches":[143],"0.51":[144],"matching":[146],"aligned":[148],"rate.":[150],"Task-only":[151],"0.87":[158],"general":[160],"0.83":[162],"0.13,":[166],"refusal-suppression":[168],"retention":[170],"0.27.":[174],"These":[175],"results":[176],"support":[177],"evaluating":[178],"utility-risk":[183],"frontier,":[184],"not":[185],"an":[187],"uncensoring":[188],"recipe,":[189],"treating":[191],"alone":[193],"neither":[195],"competence":[196],"nor":[197],"safe":[198],"deployment.":[199]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-20T00:00:00"}