DiscoverLessWrong (Curated & Popular)“Current safety training techniques do not fully transfer to the agent setting” by Simon Lermen, Govind Pimpale
“Current safety training techniques do not fully transfer to the agent setting” by Simon Lermen, Govind Pimpale

“Current safety training techniques do not fully transfer to the agent setting” by Simon Lermen, Govind Pimpale

Update: 2024-11-09
Share

Description

TL;DR: I'm presenting three recent papers which all share a similar finding, i.e. the safety training techniques for chat models don’t transfer well from chat models to the agents built from them. In other words, models won’t tell you how to do something harmful, but they are often willing to directly execute harmful actions. However, all papers find that different attack methods like jailbreaks, prompt-engineering, or refusal-vector ablation do transfer.

Here are the three papers:

  1. AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents
  2. Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents
  3. Applying Refusal-Vector Ablation to Llama 3.1 70B Agents
What are language model agents

Language model agents are a combination of a language model and a scaffolding software. Regular language models are typically limited to being chat bots, i.e. they receive messages and reply to them. However, scaffolding gives these models access to tools which they can [...]

---

Outline:

(00:55 ) What are language model agents

(01:36 ) Overview

(03:31 ) AgentHarm Benchmark

(05:27 ) Refusal-Trained LLMs Are Easily Jailbroken as Browser Agents

(06:47 ) Applying Refusal-Vector Ablation to Llama 3.1 70B Agents

(08:23 ) Discussion

---

First published:
November 3rd, 2024

Source:
https://www.lesswrong.com/posts/ZoFxTqWRBkyanonyb/current-safety-training-techniques-do-not-fully-transfer-to

---

Narrated by TYPE III AUDIO.

---

Images from the article:

undefinedApple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

Comments 
In Channel
loading
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

“Current safety training techniques do not fully transfer to the agent setting” by Simon Lermen, Govind Pimpale

“Current safety training techniques do not fully transfer to the agent setting” by Simon Lermen, Govind Pimpale