Large language models (LLMs) have made significant progress in the field of natural language processing. Through training, they can understand natural language texts and demonstrate impressive abilities in language processing and generation. However, due to the presence of “competing objectives” and “mismatched generalization” in LLMs, they are susceptible to jailbreak attacks. This type of attack can bypass the safety alignment mechanism of the model, causing LLMs to generate inappropriate or harmful content. To address this issue, this paper proposes a semantic-based jailbreak attack detection method. We have designed a hybrid neural network architecture called Secure Guard to improve the detection effectiveness and accuracy of jailbreak attacks. Compared with existing defense methods, this model identifies harmful content by analyzing input semantic information, solving the low coverage and false alarm problems associated with jailbreak attacks. Experimental results have shown that Secure Guard achieves state-of-the-art performance on multiple test sets.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Secure Guard: A Semantic-Based Jailbreak Prompt Detection Framework for Protecting Large Language Models

  • Sixin Fang,
  • Ke Cheng,
  • Jixin Zhang,
  • Zheng Qin,
  • Mingwu Zhang

摘要

Large language models (LLMs) have made significant progress in the field of natural language processing. Through training, they can understand natural language texts and demonstrate impressive abilities in language processing and generation. However, due to the presence of “competing objectives” and “mismatched generalization” in LLMs, they are susceptible to jailbreak attacks. This type of attack can bypass the safety alignment mechanism of the model, causing LLMs to generate inappropriate or harmful content. To address this issue, this paper proposes a semantic-based jailbreak attack detection method. We have designed a hybrid neural network architecture called Secure Guard to improve the detection effectiveness and accuracy of jailbreak attacks. Compared with existing defense methods, this model identifies harmful content by analyzing input semantic information, solving the low coverage and false alarm problems associated with jailbreak attacks. Experimental results have shown that Secure Guard achieves state-of-the-art performance on multiple test sets.