arXiv:2505.13028cs.CRcs.AI2025-05被引 3

测试13款大模型安全工具,发现两款开源方案效果最佳。

Evaluating the efficacy of LLM Safety Solutions : The Palit Benchmark Dataset

  • 构建恶意提示数据集,评估13款安全工具防御能力。
  • 基线模型误报率高,仅2款工具综合表现最优。
  • 适合关注大模型安全、想选防护方案的开发者和企业。

大型语言模型正被广泛应用于医疗、金融等关键领域,用户可通过聊天机器人提交查询,系统可能从内部数据库检索敏感信息并生成回复。这引发了一类攻击:用户提交恶意请求,导致模型泄露内部数据或引发第三方法律责任。尽管已有安全工具出现,但其有效性和可用性缺乏正式评估。本研究通过对比分析13种安全解决方案(9个闭源,4个开源),最终对7个工具进行了评估。我们构建了恶意提示基准数据集,并以ChatGPT-3.5-Turbo为基线进行测试。结果显示,基线模型存在过多误报,无法直接用于该任务。Lakera Guard和ProtectAI LLM Guard表现最佳,展现了可用性与性能间的权衡。研究建议加强闭源厂商透明度、提升上下文感知检测能力、推动开源协作、增强用户安全意识,并采用更具代表性的评估指标。

原文摘要 · Abstract (English)

Large Language Models (LLMs) are increasingly integrated into critical systems in industries like healthcare and finance. Users can often submit queries to LLM-enabled chatbots, some of which can enrich responses with information retrieved from internal databases storing sensitive data. This gives rise to a range of attacks in which a user submits a malicious query and the LLM-system outputs a response that creates harm to the owner, such as leaking internal data or creating legal liability by harming a third-party. While security tools are being developed to counter these threats, there is little formal evaluation of their effectiveness and usability. This study addresses this gap by conducting a thorough comparative analysis of LLM security tools. We identified 13 solutions (9 closed-source, 4 open-source), but only 7 were evaluated due to a lack of participation by proprietary model owners.To evaluate, we built a benchmark dataset of malicious prompts, and evaluate these tools performance against a baseline LLM model (ChatGPT-3.5-Turbo). Our results show that the baseline model has too many false positives to be used for this task. Lakera Guard and ProtectAI LLM Guard emerged as the best overall tools showcasing the tradeoff between usability and performance. The study concluded with recommendations for greater transparency among closed source providers, improved context-aware detections, enhanced open-source engagement, increased user awareness, and the adoption of more representative performance metrics.

大模型安全漏洞检测评测基准LLM防护

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。