Lecture image placeholder

Premium content

Access to this content requires a subscription. You must be a premium user to view this content.

Monthly subscription - $9.99Pay per view - $4.99Access through your institutionLogin with Underline account
Need help?
Contact us
Lecture placeholder background
VIDEO DOI: https://doi.org/10.48448/9mbp-y247

poster

ACL 2024

August 12, 2024

Bangkok, Thailand

Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritization

keywords:

goal prioritization

jailbreak

llms

defense

While significant attention has been dedicated to exploiting weaknesses in LLMs through jailbreaking attacks, there remains a paucity of effort in defending against these attacks. We point out a pivotal factor contributing to the success of jailbreaks: the intrinsic conflict between the goals of being helpful and ensuring safety. Accordingly, we propose to integrate goal prioritization at both training and inference stages to counteract. Implementing goal prioritization during inference substantially diminishes the Attack Success Rate (ASR) of jailbreaking from 66.4\% to 3.6\% for ChatGPT. And integrating goal prioritization into model training reduces the ASR from 71.0\% to 6.6\% for Llama2-13B. Remarkably, even in scenarios where no jailbreaking samples are included during training, our approach slashes the ASR by half. Additionally, our findings reveal that while stronger LLMs face greater safety risks, they also possess a greater capacity to be steered towards defending against such attacks, both because of their stronger ability in instruction following. Our work thus contributes to the comprehension of jailbreaking attacks and defenses, and sheds light on the relationship between LLMs' capability and safety. Our code is available at https://github.com/thu-coai/JailbreakDefense_GoalPriority.

Downloads

SlidesTranscript English (automatic)

Next from ACL 2024

Why Don’t Prompt-Based Fairness Metrics Correlate?
poster

Why Don’t Prompt-Based Fairness Metrics Correlate?

ACL 2024

+1Ioana BaldiniAbdelrahman Zayed
Abdelrahman Zayed and 3 other authors

12 August 2024

Stay up to date with the latest Underline news!

Select topic of interest (you can select more than one)

PRESENTATIONS

  • All Lectures
  • For Librarians
  • Resource Center
  • Free Trial
Underline Science, Inc.
1216 Broadway, 2nd Floor, New York, NY 10001, USA

© 2023 Underline - All rights reserved