Supervised fine-tuning can substantially improve the downstream utility of large language models (LLMs) but may compromise their safety. Existing safety-preserving methods constrain downstream updates using safety-related parameters or subspaces, but mainly focus on safety preservation rather than joint safety and util...
Wei-Wei Qi, Chong-Yu Wang, Tian-Hang Zheng et al.· 0 citations
ElasticBack is presented, an effective conditional single-skill backdoor that plants a rule R in the skill document and a benign-looking trigger T in the user query, so the malicious payload fires only when both co-occur, and motivates stronger defenses for the skill supply chain.
Hao Sui, Si-Meng Qin, Jie Liao et al.· 0 citations
ColluSkill is proposed, a collusive multi-skill-chain attack framework that decomposes a complete malicious intent into interdependent sub-payloads embedded in independently packaged skills and employs LLM-based chain planning and scanner-feedback refinement to preserve chain-level attack semantics.
Pu-Yu Zeng, Simeng Qin, Jingzhi Li et al.· 1 citation
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.