defense 2026

Pruning Unsafe Tickets: A Resource-Efficient Framework for Safer and More Robust LLMs

Wai Man Si , Mingjie Li , Michael Backes , Yang Zhang

0 citations

α

Published on arXiv

2604.15780

Prompt Injection

OWASP LLM Top 10 — LLM01

Key Finding

Reduces unsafe responses to 1% on Mistral-7B-Instruct-v0.2 and 2% on LLaVA-v1.6-Mistral-7B with minimal utility loss, completed in 455 seconds

Unsafe Ticket Pruning

Novel technique introduced


Machine learning models are increasingly deployed in real-world applications, but even aligned models such as Mistral and LLaVA still exhibit unsafe behaviors inherited from pre-training. Current alignment methods like SFT and RLHF primarily encourage models to generate preferred responses, but do not explicitly remove the unsafe subnetworks that trigger harmful outputs. In this work, we introduce a resource-efficient pruning framework that directly identifies and removes parameters associated with unsafe behaviors while preserving model utility. Our method employs a gradient-free attribution mechanism, requiring only modest GPU resources, and generalizes across architectures and quantized variants. Empirical evaluations on ML models show substantial reductions in unsafe generations and improved robustness against jailbreak attacks, with minimal utility loss. From the perspective of the Lottery Ticket Hypothesis, our results suggest that ML models contain "unsafe tickets" responsible for harmful behaviors, and pruning reveals "safety tickets" that maintain performance while aligning outputs. This provides a lightweight, post-hoc alignment strategy suitable for deployment in resource-constrained settings.


Key Contributions

  • Gradient-free attribution mechanism to identify and prune parameters responsible for unsafe LLM behaviors
  • Connects pruning-based safety alignment with Lottery Ticket Hypothesis via 'unsafe tickets' and 'safety tickets'
  • Resource-efficient post-hoc alignment requiring only 455 seconds on modest GPU resources

🛡️ Threat Analysis


Details

Domains
nlpmultimodal
Model Types
llmvlmtransformer
Threat Tags
inference_time
Applications
llm safety alignmentvlm safety alignment