SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding (ACL 2024)

Xu et al., University of Washington / Penn State / AI2. Safety-disclaimer tokens remain in the top of the sorted token distribution even under attack; the defence amplifies them and attenuates attacker-goal tokens. Author-reported as incurring 'negligible' computation overhead, and applied only to the first m decode steps rather than every step. Their own ATGR metric (avg token generation time with/without defence) is the reported efficiency number; no absolute ms or throughput figure appears in the abstract.

paper

2024-02-14

2026-10-04