Preemptive Answer "Attacks" on Chain-of-Thought Reasoning

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Xu, Rongwu, Qi, Zehan, Xu, Wei
Format: Preprint
Veröffentlicht: 2024
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866914817853358080
author Xu, Rongwu
Qi, Zehan
Xu, Wei
author_facet Xu, Rongwu
Qi, Zehan
Xu, Wei
contents Large language models (LLMs) showcase impressive reasoning capabilities when coupled with Chain-of-Thought (CoT) prompting. However, the robustness of this approach warrants further investigation. In this paper, we introduce a novel scenario termed preemptive answers, where the LLM obtains an answer before engaging in reasoning. This situation can arise inadvertently or induced by malicious users by prompt injection attacks. Experiments reveal that preemptive answers significantly impair the model's reasoning capability across various CoT methods and a broad spectrum of datasets. To bolster the robustness of reasoning, we propose two measures aimed at mitigating this issue to some extent.
format Preprint
id arxiv_https___arxiv_org_abs_2405_20902
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Preemptive Answer "Attacks" on Chain-of-Thought Reasoning
Xu, Rongwu
Qi, Zehan
Xu, Wei
Computation and Language
Artificial Intelligence
Cryptography and Security
Large language models (LLMs) showcase impressive reasoning capabilities when coupled with Chain-of-Thought (CoT) prompting. However, the robustness of this approach warrants further investigation. In this paper, we introduce a novel scenario termed preemptive answers, where the LLM obtains an answer before engaging in reasoning. This situation can arise inadvertently or induced by malicious users by prompt injection attacks. Experiments reveal that preemptive answers significantly impair the model's reasoning capability across various CoT methods and a broad spectrum of datasets. To bolster the robustness of reasoning, we propose two measures aimed at mitigating this issue to some extent.
title Preemptive Answer "Attacks" on Chain-of-Thought Reasoning
topic Computation and Language
Artificial Intelligence
Cryptography and Security
url https://arxiv.org/abs/2405.20902