CoSafe: Evaluating Large Language Model Safety in Multi-Turn Dialogue Coreference

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Yu, Erxin, Li, Jing, Liao, Ming, Wang, Siqi, Gao, Zuchen, Mi, Fei, Hong, Lanqing
Formato: Preprint
Publicado: 2024
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866909231219736576
author Yu, Erxin
Li, Jing
Liao, Ming
Wang, Siqi
Gao, Zuchen
Mi, Fei
Hong, Lanqing
author_facet Yu, Erxin
Li, Jing
Liao, Ming
Wang, Siqi
Gao, Zuchen
Mi, Fei
Hong, Lanqing
contents As large language models (LLMs) constantly evolve, ensuring their safety remains a critical research problem. Previous red-teaming approaches for LLM safety have primarily focused on single prompt attacks or goal hijacking. To the best of our knowledge, we are the first to study LLM safety in multi-turn dialogue coreference. We created a dataset of 1,400 questions across 14 categories, each featuring multi-turn coreference safety attacks. We then conducted detailed evaluations on five widely used open-source LLMs. The results indicated that under multi-turn coreference safety attacks, the highest attack success rate was 56% with the LLaMA2-Chat-7b model, while the lowest was 13.9% with the Mistral-7B-Instruct model. These findings highlight the safety vulnerabilities in LLMs during dialogue coreference interactions.
format Preprint
id arxiv_https___arxiv_org_abs_2406_17626
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle CoSafe: Evaluating Large Language Model Safety in Multi-Turn Dialogue Coreference
Yu, Erxin
Li, Jing
Liao, Ming
Wang, Siqi
Gao, Zuchen
Mi, Fei
Hong, Lanqing
Computation and Language
Artificial Intelligence
As large language models (LLMs) constantly evolve, ensuring their safety remains a critical research problem. Previous red-teaming approaches for LLM safety have primarily focused on single prompt attacks or goal hijacking. To the best of our knowledge, we are the first to study LLM safety in multi-turn dialogue coreference. We created a dataset of 1,400 questions across 14 categories, each featuring multi-turn coreference safety attacks. We then conducted detailed evaluations on five widely used open-source LLMs. The results indicated that under multi-turn coreference safety attacks, the highest attack success rate was 56% with the LLaMA2-Chat-7b model, while the lowest was 13.9% with the Mistral-7B-Instruct model. These findings highlight the safety vulnerabilities in LLMs during dialogue coreference interactions.
title CoSafe: Evaluating Large Language Model Safety in Multi-Turn Dialogue Coreference
topic Computation and Language
Artificial Intelligence
url https://arxiv.org/abs/2406.17626