Saved in:
Bibliographic Details
Main Authors: Kim, Su-Hyeon, Jin, Hyundong, Lee, Yejin, Han, Yo-Sub
Format: Preprint
Published: 2026
Subjects:
Online Access:https://arxiv.org/abs/2601.03662
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866917187869999104
author Kim, Su-Hyeon
Jin, Hyundong
Lee, Yejin
Han, Yo-Sub
author_facet Kim, Su-Hyeon
Jin, Hyundong
Lee, Yejin
Han, Yo-Sub
contents Large Reasoning Models (LRMs) achieve remarkable success through explicit thinking steps, yet the thinking steps introduce a novel risk by potentially amplifying unsafe behaviors. Despite this vulnerability, conventional defense mechanisms remain ineffective as they overlook the unique reasoning dynamics of LRMs. In this work, we find that the emergence of safe-reminding phrases within thinking steps plays a pivotal role in ensuring LRM safety. Motivated by this finding, we propose SafeRemind, a decoding-time defense method that dynamically injects safe-reminding phrases into thinking steps. By leveraging entropy triggers to intervene at decision-locking points, SafeRemind redirects potentially harmful trajectories toward safer outcomes without requiring any parameter updates. Extensive evaluations across five LRMs and six benchmarks demonstrate that SafeRemind substantially enhances safety, achieving improvements of up to 45.5%p while preserving core reasoning utility.
format Preprint
id arxiv_https___arxiv_org_abs_2601_03662
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle How Does the Thinking Step Influence Model Safety? An Entropy-based Safety Reminder for LRMs
Kim, Su-Hyeon
Jin, Hyundong
Lee, Yejin
Han, Yo-Sub
Artificial Intelligence
Large Reasoning Models (LRMs) achieve remarkable success through explicit thinking steps, yet the thinking steps introduce a novel risk by potentially amplifying unsafe behaviors. Despite this vulnerability, conventional defense mechanisms remain ineffective as they overlook the unique reasoning dynamics of LRMs. In this work, we find that the emergence of safe-reminding phrases within thinking steps plays a pivotal role in ensuring LRM safety. Motivated by this finding, we propose SafeRemind, a decoding-time defense method that dynamically injects safe-reminding phrases into thinking steps. By leveraging entropy triggers to intervene at decision-locking points, SafeRemind redirects potentially harmful trajectories toward safer outcomes without requiring any parameter updates. Extensive evaluations across five LRMs and six benchmarks demonstrate that SafeRemind substantially enhances safety, achieving improvements of up to 45.5%p while preserving core reasoning utility.
title How Does the Thinking Step Influence Model Safety? An Entropy-based Safety Reminder for LRMs
topic Artificial Intelligence
url https://arxiv.org/abs/2601.03662