arXiv:2505.11835cs.CLcs.AI2025-05EMNLP被引 1

提出多语言协同防御机制,提升大模型跨语言安全防护能力。

Multilingual Collaborative Defense for Large Language Models

  • 通过软化安全提示自动优化多语言防护策略。
  • 在多语言测试中显著降低越狱攻击成功率,误拒率低。
  • 适合关注大模型跨语言安全的开发者与研究者。

大型语言模型(LLMs)的鲁棒性与安全性已成为重要研究方向。一个显著漏洞是:攻击者可将有害请求翻译成罕见或低资源语言,绕过模型防护,实现“越狱”。尽管问题日益突出,但针对多语言场景的防护研究仍不足。本文分析不同语言间攻击特征的相关性,提出多语言协同防御(MCD)方法,通过自动优化连续的软化安全提示,实现多语言防护。MCD具有三大优势:有效提升多语言防护性能;在保持强泛化能力的同时降低误拒率;缓解因训练数据不平衡导致的语言安全错位。为验证效果,我们人工构建了常见越狱基准(如MaliciousInstruct、AdvBench)的多语言版本,并引入低资源(零样本)语言数据测试迁移能力。结果表明,MCD在抵御多语言越狱攻击方面优于现有方法,且具备良好语言迁移性。代码已开源。

原文摘要 · Abstract (English)

The robustness and security of large language models (LLMs) has become a prominent research area. One notable vulnerability is the ability to bypass LLM safeguards by translating harmful queries into rare or underrepresented languages, a simple yet effective method of "jailbreaking" these models. Despite the growing concern, there has been limited research addressing the safeguarding of LLMs in multilingual scenarios, highlighting an urgent need to enhance multilingual safety. In this work, we investigate the correlation between various attack features across different languages and propose Multilingual Collaborative Defense (MCD), a novel learning method that optimizes a continuous, soft safety prompt automatically to facilitate multilingual safeguarding of LLMs. The MCD approach offers three advantages: First, it effectively improves safeguarding performance across multiple languages. Second, MCD maintains strong generalization capabilities while minimizing false refusal rates. Third, MCD mitigates the language safety misalignment caused by imbalances in LLM training corpora. To evaluate the effectiveness of MCD, we manually construct multilingual versions of commonly used jailbreak benchmarks, such as MaliciousInstruct and AdvBench, to assess various safeguarding methods. Additionally, we introduce these datasets in underrepresented (zero-shot) languages to verify the language transferability of MCD. The results demonstrate that MCD outperforms existing approaches in safeguarding against multilingual jailbreak attempts while also exhibiting strong language transfer capabilities. Our code is available at https://github.com/HLiang-Lee/MCD.

大模型安全多语言防御越狱攻击提示优化

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。