This paper proposes TRACE, which simulates harmful SFT trajectories to produce progressively corrupted model states, and optimizes a safety patch simultaneously across these states, and improves the safety rate by up to 77 percentage points over the best baselines, while maintaining comparable utility to the undefended...
As Retrieval-Augmented Generation (RAG) brings Large Language Models (LLMs) into contact with proprietary and user-specific knowledge bases in sensitive domains, protecting the privacy of both queries and knowledge content becomes a critical requirement. The RAG pipeline, however, exposes sensitive information at two d...
Yuxuan Cai, Chao-Xiang He, Hong-Sheng Hu et al.· IEEE Transactions on Informa...· 0 citations
RidgeFT is proposed, a lightweight analytic update framework that does not rely on exemplar replay and achieves the best overall macro-F1 across domains, backbones, and incremental protocols, while also improving both old-class retention and new-class adaptation.
This work presents DeepInvert, a semi-supervised embedding inversion attack that recovers original tokens from obfuscated representations with higher accuracy than prior methods, and reveals a task-dependent tension: obfuscation schemes preserving enough signal for utility also retain sufficient structure for inversion...
Zhicong Huang, Cheng Hong, Tao Wei· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
