LLM 的对抗攻击:Lilian Weng 解析威胁模型与五类攻击方法
Lilian Weng 在 Lil'Log 撰文梳理针对大语言模型的对抗攻击,假定攻击只发生在推理阶段、模型权重固定,并区分白盒与黑盒两种设定。文章介绍了 Token 操纵、基于梯度的攻击、越狱提示词、人工红队与模型红队五类方法,其中 Token 操纵类攻击可在黑盒条件下进行,如 TextFooler、BERT-Attack 等。
. [2] Ribeiro et al. “Semantically equivalent adversarial rules for debugging NLP models”. ACL 2018. [3] Guo et al. “Gradient-based adversarial attacks against text transformers”. arXiv preprint arXiv:2104.13733 (2021). [4] Ebrahimi et al. “HotFlip: White-Box Adversarial Examples for Text Classification”. ACL 2018. [5] Wallace et al. “Universal Adversarial Triggers for Attacking and Analyzing NLP.” EMNLP-IJCNLP 2019. | code [6] Mehrabi et al. “Robust Conversational Agents against Imperceptible T
匹配字段正文