IF-Guide: Influence Function-Guided Detoxification of LLMs

Juhan Bae (Anthropic) · Zachary Coalson (Oregon State University) · Nicholas Carlini (Google DeepMind) · Sanghyun Hong (Oregon State University)
computational efficiencyexplicit toxicityfine-tuningharmful tokenshuman-preference dataimplicit toxicityinfluence functionslearning objectivemodel toxicitypre-trainingproactive approachreactive approachestoken-level attributionstoxic behaviorstoxic training documents

We study how training data contributes to the emergence of toxic behaviors in large language models. Most prior work on reducing model toxicity adopts *reactive* approaches, such as fine-tuning pre-trained (and potentially toxic) models to align them with human values. In contrast, we propose a *proactive* approach—IF-Guide—that leverages influence functions to identify and suppress harmful tokens in the training data. To this end, we first show that standard influence functions are ineffective at discovering harmful training records. We then present a novel adaptation that measures token-level attributions from training data to model toxicity, along with techniques for selecting toxic training documents and a learning objective that can be integrated into both pre-training and fine-tuning. Moreover, IF-Guide does not rely on human-preference data, which is typically required by existing alignment methods. In our evaluation, we demonstrate that IF-Guide substantially reduces both explicit and implicit toxicity—by up to 10$\times$ compared to uncensored models, and up to 3$\times$ compared to baseline alignment methods such as DPO and RAD—across both pre-training and fine-tuning scenarios. IF-Guide is computationally efficient: a billion-parameter model is *not necessary* for computing influence scores; a million-parameter model—with 7.5$\times$ fewer parameters—can effectively serve as a proxy for identifying harmful data.