提出联合优化边缘云大模型安全与性能的检测框架
Joint Optimization of Prompt Security and System Performance in Edge-Cloud LLM Systems
- 用向量库构建轻量级攻击检测器,实时识别恶意提示
- 在真实系统中实现安全提升,延迟降低32%,资源消耗减少28%
- 适合关注大模型安全与低延迟部署的研究者与工程师
大型语言模型(LLMs)显著提升了人类生活便利性,提示工程也提高了模型效率。然而近年来,基于提示工程的攻击日益增多,导致隐私泄露、延迟增加和系统资源浪费。尽管已有基于强化学习从人类反馈(RLHF)的安全微调方法,但现有安全机制难以应对多变的提示攻击,亟需对提示进行安全检测。本文在边缘-云大模型(EC-LLM)系统中,联合考虑提示安全、服务延迟与系统资源优化,在多种提示攻击场景下开展研究。提出一种基于向量数据库的轻量级攻击检测器,将提示检测、延迟与资源优化问题建模为多阶段动态贝叶斯博弈。通过预测恶意任务数量并逐阶段进行贝叶斯信念更新,求解均衡策略。所提方案在真实部署的EC-LLM系统上评估,结果表明:相比现有最优算法,本方法在保障安全性的同时,显著降低了良性用户的平均服务延迟(32%),减少了系统资源消耗(28%)。
原文摘要 · Abstract (English)
Large language models (LLMs) have significantly facilitated human life, and prompt engineering has improved the efficiency of these models. However, recent years have witnessed a rise in prompt engineering-empowered attacks, leading to issues such as privacy leaks, increased latency, and system resource wastage. Though safety fine-tuning based methods with Reinforcement Learning from Human Feedback (RLHF) are proposed to align the LLMs, existing security mechanisms fail to cope with fickle prompt attacks, highlighting the necessity of performing security detection on prompts. In this paper, we jointly consider prompt security, service latency, and system resource optimization in Edge-Cloud LLM (EC-LLM) systems under various prompt attacks. To enhance prompt security, a vector-database-enabled lightweight attack detector is proposed. We formalize the problem of joint prompt detection, latency, and resource optimization into a multi-stage dynamic Bayesian game model. The equilibrium strategy is determined by predicting the number of malicious tasks and updating beliefs at each stage through Bayesian updates. The proposed scheme is evaluated on a real implemented EC-LLM system, and the results demonstrate that our approach offers enhanced security, reduces the service latency for benign users, and decreases system resource consumption compared to state-of-the-art algorithms.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。