arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2505.03439cs.AIcs.CRcs.LG
收藏

语言模型的隐写潜力

The Steganographic Potentials of Language Models

Artem Karpov, Tinuade Adeleke, Seong Hah Cho, Natalia Perez-Campanero

AI总结:

本文研究通过强化学习微调的大型语言模型在隐写术方面的能力,发现当前模型具备初步隐写能力,而明确的算法指导能显著提升其信息隐藏性能。

摘要:

大型语言模型(LLMs)在纯文本中隐藏信息(隐写术)的潜力对检测和阻止未对齐的AI智能体构成挑战,并削弱LLMs推理的忠实性。我们探索了通过强化学习(RL)微调的LLMs的隐写能力,以:(1)开发隐蔽编码方案,(2)在被提示时进行隐写,(3)在隐藏推理可能发生但未被提示的现实场景中利用隐写术。在这些场景中,我们检测LLMs隐藏其推理的意图以及它们的隐写性能。我们在微调实验以及行为非微调评估中的发现表明,虽然当前模型在安全性和容量方面表现出初步的隐写能力,但明确的算法指导显著增强了它们的信息隐藏能力。

英文摘要:

The potential for large language models (LLMs) to hide messages within plain text (steganography) poses a challenge to detection and thwarting of unaligned AI agents, and undermines faithfulness of LLMs reasoning. We explore the steganographic capabilities of LLMs fine-tuned via reinforcement learning (RL) to: (1) develop covert encoding schemes, (2) engage in steganography when prompted, and (3) utilize steganography in realistic scenarios where hidden reasoning is likely, but not prompted. In these scenarios, we detect the intention of LLMs to hide their reasoning as well as their steganography performance. Our findings in the fine-tuning experiments as well as in behavioral non fine-tuning evaluations reveal that while current models exhibit rudimentary steganographic abilities in terms of security and capacity, explicit algorithmic guidance markedly enhances their capacity for information concealment.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑