arXivDaily arXiv每日学术速递 周一至周五更新
​通知:联邦节假日调休:哥伦布日 / 原住民日(Columbus Day / Indigenous Peoples' Day),今日(13日)无更新。
arXiv 2406.15481cs.AIcs.CL

语码转换红队测试:面向安全性与多语言理解的LLM评估

Code-Switching Red-Teaming: LLM Evaluation for Safety and Multilingual Understanding

KAIST(韩国科学技术院);Sogang University(西江大学);NAVER AI Lab(NAVER AI实验室)

Haneul Yoo, Yongjin Yang, Hwaran Lee

AI总结:

本文提出CSRT框架,通过合成最多混合10种语言的语码转换红队查询评估LLM安全性与多语言理解,实验显示其攻击效果较英文标准攻击提升46.7%。

摘要:

随着大型语言模型(LLM)快速发展,对其安全性的担忧日益突出。本文发现,红队测试查询中的语码转换能够有效诱发LLM的不良行为,而语码转换在自然语言中十分常见。我们提出一个简单而有效的框架CSRT,用于合成语码转换红队查询,并全面考察LLM的安全性与多语言理解能力。通过对十个当前最先进LLM开展大量实验,并使用最多结合10种语言的语码转换查询,我们证明CSRT显著优于现有的多语言红队技术:相比标准英文攻击,其攻击数量提高46.7%,并且在常规安全领域中同样有效。我们还考察了这些LLM生成和理解语码转换文本的多语言能力。此外,我们通过利用单语数据生成语码转换攻击提示,验证了CSRT的可扩展性。最后,我们进行了详细的消融研究以探究语码转换,并提出在现有多语言LLM中,语言资源可得性与安全对齐之间存在意料之外的相关性。

英文摘要:

As large language models (LLMs) have advanced rapidly, concerns regarding their safety have become prominent. In this paper, we discover that code-switching in red-teaming queries can effectively elicit undesirable behaviors of LLMs, which are common practices in natural language. We introduce a simple yet effective framework, CSRT, to synthesize codeswitching red-teaming queries and investigate the safety and multilingual understanding of LLMs comprehensively. Through extensive experiments with ten state-of-the-art LLMs and code-switching queries combining up to 10 languages, we demonstrate that the CSRT significantly outperforms existing multilingual red-teaming techniques, achieving 46.7% more attacks than standard attacks in English and being effective in conventional safety domains. We also examine the multilingual ability of those LLMs to generate and understand codeswitching texts. Additionally, we validate the extensibility of the CSRT by generating codeswitching attack prompts with monolingual data. We finally conduct detailed ablation studies exploring code-switching and propound unintended correlation between resource availability of languages and safety alignment in existing multilingual LLMs.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑