arXiv:2510.22628cs.CRcs.AI2025-10

Sentra-Guard实时检测并防御多语言大模型攻击,准确率超99.9%。

Sentra-Guard: A Real-Time Multilingual Defense Against Adversarial LLM Prompts

  • 融合语义检索与微调分类器,动态计算提示风险分值。
  • 在100+语言下实现99.96%检测率,误报率仅0.004%。
  • 支持人工反馈闭环,适合高安全需求的商业与开源场景。

本文提出一种名为Sentra-Guard的实时模块化防御系统,用于检测和缓解针对大语言模型(LLMs)的越狱和提示注入攻击。该框架采用混合架构,结合基于FAISS索引的SBERT嵌入表示以捕捉提示语义,并集成微调的Transformer分类器来区分良性与恶意输入。系统可识别直接及混淆攻击向量。核心创新在于分类器-检索器融合模块,动态计算上下文感知的风险评分,评估提示的恶意可能性。系统通过语言无关预处理层实现多语言鲁棒性,自动将非英文提示翻译为英文进行语义评估,支持超过100种语言。引入人机协同(HITL)反馈环,由人类专家审核自动化决策,实现持续学习与快速适应。系统维护一个双标签知识库,包含良性与恶意提示,提升检测可靠性并降低误报。评估结果显示,检测率达99.96%(AUC=1.00,F1=1.00),攻击成功率(ASR)仅为0.004%,显著优于主流基线如LlamaGuard-2(1.3%)和OpenAI Moderation(3.7%)。相比黑箱方法,Sentra-Guard具备透明性、可微调性及对多种LLM后端的兼容性,模块化设计支持大规模部署,确立了对抗性大模型防御的新基准。

原文摘要 · Abstract (English)

This paper presents a real-time modular defense system named Sentra-Guard. The system detects and mitigates jailbreak and prompt injection attacks targeting large language models (LLMs). The framework uses a hybrid architecture with FAISS-indexed SBERT embedding representations that capture the semantic meaning of prompts, combined with fine-tuned transformer classifiers, which are machine learning models specialized for distinguishing between benign and adversarial language inputs. It identifies adversarial prompts in both direct and obfuscated attack vectors. A core innovation is the classifier-retriever fusion module, which dynamically computes context-aware risk scores that estimate how likely a prompt is to be adversarial based on its content and context. The framework ensures multilingual resilience with a language-agnostic preprocessing layer. This component automatically translates non-English prompts into English for semantic evaluation, enabling consistent detection across over 100 languages. The system includes a HITL feedback loop, where decisions made by the automated system are reviewed by human experts for continual learning and rapid adaptation under adversarial pressure. Sentra-Guard maintains an evolving dual-labeled knowledge base of benign and malicious prompts, enhancing detection reliability and reducing false positives. Evaluation results show a 99.96% detection rate (AUC = 1.00, F1 = 1.00) and an attack success rate (ASR) of only 0.004%. This outperforms leading baselines such as LlamaGuard-2 (1.3%) and OpenAI Moderation (3.7%). Unlike black-box approaches, Sentra-Guard is transparent, fine-tunable, and compatible with diverse LLM backends. Its modular design supports scalable deployment in both commercial and open-source environments. The system establishes a new state-of-the-art in adversarial LLM defense.

大模型安全对抗防御多语言实时检测

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。