利用大模型对组合任务的盲点,分解恶意代码为无害子任务生成病毒。
MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation
- 将恶意意图转为看似无害的代码片段,通过模块化分解绕过安全检测
- 在三个数据集上正确率比越狱方法高365.79%,比地下服务高78.07%
- 可复现并优化16个真实病毒样本,适合安全研究与对抗测试
大语言模型(LLMs)降低了软件开发门槛,但也被用于生成恶意程序。尽管厂商通过对齐机制防止直接生成恶意代码,但这些机制通常孤立评估单个提示,忽视了关键漏洞:恶意操作可被系统性拆解为看似无害的子任务。本文提出恶意代码生成编译器(MGC),利用此漏洞,通过模块化分解和规避对齐机制生成代码。MGC采用专用的恶意描述中间表示(MDIR),连接高层恶意意图与无害代码片段。大量实验表明,该方法在多种任务和类别中均能可靠生成功能性恶意代码,在三个基准数据集上正确率比越狱方法高出365.79%,比地下服务高78.07%。案例研究显示,MGC可复现并增强16个真实恶意样本。本工作为安全研究揭示了针对对齐AI系统的组合攻击风险。
原文摘要 · Abstract (English)
Large language models (LLMs) have democratized software development, reducing the expertise barrier for programming complex applications. This accessibility extends to malicious software development, raising significant security concerns. While LLM providers have implemented alignment mechanisms to prevent direct generation of overtly malicious code, these safeguards predominantly evaluate individual prompts in isolation, overlooking a critical vulnerability: malicious operations can be systematically decomposed into benign-appearing sub-tasks. In this paper, we introduce the Malware Generation Compiler (MGC), a novel framework that leverages this vulnerability through modular decomposition and alignment-evasive generation. MGC employs a specialized Malware Description Intermediate Representation (MDIR) to bridge high-level malicious intents and benign-appearing code snippets. Extensive evaluation demonstrates that our attack reliably generates functional malware across diverse task specifications and categories, outperforming jailbreaking methods by +365.79% and underground services by +78.07% in correctness on three benchmark datasets. Case studies further show that MGC can reproduce and even enhance 16 real-world malware samples. This work provides critical insights for security researchers by exposing the risks of compositional attacks against aligned AI systems. Demonstrations are available at https://sites.google.com/view/malware-generation-compiler.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。