Insights and Current Gaps in Open-Source LLM Vulnerability Scanners: A Comparative Analysis

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Brokman, Jonathan, Hofman, Omer, Rachmil, Oren, Singh, Inderjeet, Pahuja, Vikas, Priya, Rathina Sabapathy Aishvariya, Giloni, Amit, Vainshtein, Roman, Kojima, Hisashi
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866916483112632320
author Brokman, Jonathan
Hofman, Omer
Rachmil, Oren
Singh, Inderjeet
Pahuja, Vikas
Priya, Rathina Sabapathy Aishvariya
Giloni, Amit
Vainshtein, Roman
Kojima, Hisashi
author_facet Brokman, Jonathan
Hofman, Omer
Rachmil, Oren
Singh, Inderjeet
Pahuja, Vikas
Priya, Rathina Sabapathy Aishvariya
Giloni, Amit
Vainshtein, Roman
Kojima, Hisashi
contents This report presents a comparative analysis of open-source vulnerability scanners for conversational large language models (LLMs). As LLMs become integral to various applications, they also present potential attack surfaces, exposed to security risks such as information leakage and jailbreak attacks. Our study evaluates prominent scanners - Garak, Giskard, PyRIT, and CyberSecEval - that adapt red-teaming practices to expose these vulnerabilities. We detail the distinctive features and practical use of these scanners, outline unifying principles of their design and perform quantitative evaluations to compare them. These evaluations uncover significant reliability issues in detecting successful attacks, highlighting a fundamental gap for future development. Additionally, we contribute a preliminary labelled dataset, which serves as an initial step to bridge this gap. Based on the above, we provide strategic recommendations to assist organizations choose the most suitable scanner for their red-teaming needs, accounting for customizability, test suite comprehensiveness, and industry-specific use cases.
format Preprint
id arxiv_https___arxiv_org_abs_2410_16527
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Insights and Current Gaps in Open-Source LLM Vulnerability Scanners: A Comparative Analysis
Brokman, Jonathan
Hofman, Omer
Rachmil, Oren
Singh, Inderjeet
Pahuja, Vikas
Priya, Rathina Sabapathy Aishvariya
Giloni, Amit
Vainshtein, Roman
Kojima, Hisashi
Cryptography and Security
Machine Learning
This report presents a comparative analysis of open-source vulnerability scanners for conversational large language models (LLMs). As LLMs become integral to various applications, they also present potential attack surfaces, exposed to security risks such as information leakage and jailbreak attacks. Our study evaluates prominent scanners - Garak, Giskard, PyRIT, and CyberSecEval - that adapt red-teaming practices to expose these vulnerabilities. We detail the distinctive features and practical use of these scanners, outline unifying principles of their design and perform quantitative evaluations to compare them. These evaluations uncover significant reliability issues in detecting successful attacks, highlighting a fundamental gap for future development. Additionally, we contribute a preliminary labelled dataset, which serves as an initial step to bridge this gap. Based on the above, we provide strategic recommendations to assist organizations choose the most suitable scanner for their red-teaming needs, accounting for customizability, test suite comprehensiveness, and industry-specific use cases.
title Insights and Current Gaps in Open-Source LLM Vulnerability Scanners: A Comparative Analysis
topic Cryptography and Security
Machine Learning
url https://arxiv.org/abs/2410.16527