A key observation is that reference models serve only to reveal how an example behaves under models not trained on it, and that querying the target model on nearby samples yields the same information, and that querying the target model on nearby samples yields the same information.
Francesco Rita, Jie Zhang, Florian Tramèr· 0 citations
This paper studies the role played by the adversarial data's input modality, and identifies a systematic asymmetry: multimodal LLMs are more likely to follow adversarial instruction when they appear as text than when the same instruction is delivered through a non-textual channel.
Jie Zhang, Andrei Baroian, J. V. van Rijn et al.· 0 citations
This paper presents Untrusted Content Masking (UCM), a simple and effective approach that restores the trust boundary in web environments by leveraging a key structural insight: a webpage's Document Object Model encodes sufficient information to distinguish trusted from untrusted regions without reading their content.
Kristina Nikoli'c, Egor Zverev, Javier Rando et al.· arXiv.org· 2 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.