defense 2026

Reasoning Structure Matters for Safety Alignment of Reasoning Models

Yeonjun In , Wonjoong Kim , Sangwu Park , Chanyoung Park

0 citations

α

Published on arXiv

2604.18946

Prompt Injection

OWASP LLM Top 10 — LLM01

Key Finding

Achieves strong safety alignment across diverse attack scenarios with minimal impact on reasoning, QA, summarization, and multilingual capabilities using only 1K training examples

AltTrain

Novel technique introduced


Large reasoning models (LRMs) achieve strong performance on complex reasoning tasks but often generate harmful responses to malicious user queries. This paper investigates the underlying cause of these safety risks and shows that the issue lies in the reasoning structure itself. Based on this insight, we claim that effective safety alignment can be achieved by altering the reasoning structure. We propose AltTrain, a simple yet effective post training method that explicitly alters the reasoning structure of LRMs. AltTrain is both practical and generalizable, requiring no complex reinforcement learning (RL) training or reward design, only supervised finetuning (SFT) with a lightweight 1K training examples. Experiments across LRM backbones and model sizes demonstrate strong safety alignment, along with robust generalization across reasoning, QA, summarization, and multilingual setting.


Key Contributions

  • Identifies that safety risks in large reasoning models stem from their reasoning structure prioritizing task-solving over safety
  • Proposes AltTrain: a 3-step reasoning structure (problem understanding → harmfulness assessment → conditional reasoning) that enables safe reasoning
  • Achieves strong safety alignment using only 1K training examples via supervised fine-tuning, requiring ~60 minutes on a single A6000 for 8B models

🛡️ Threat Analysis


Details

Domains
nlp
Model Types
llmtransformer
Threat Tags
inference_time
Datasets
AltTrain-1K
Applications
reasoning modelsmath and coding assistantsgeneral llm safety