paper-with-me

홈 › Papers

Temporal Context Awareness: A Defense Framework Against Multi-turn Manipulation Attacks on Large Language Models

2025-03-18 · Prashant Kulkarni, Assaf Namer

Large Language Models (LLMs) are increasingly vulnerable to sophisticated multi-turn manipulation attacks, where adversaries strategically build context through seemingly benign conversational turns to circumvent safety measures and elicit harmful or unauthorized responses. These attacks exploit the temporal nature of dialogue to evade single-turn detection methods, representing a critical security vulnerability with significant implications for real-world deployments. This paper introduces the Temporal Context Awareness (TCA) framework, a novel defense mechanism designed to address this challenge by continuously analyzing semantic drift, cross-turn intention consistency and evolving conversational patterns. The TCA framework integrates dynamic context embedding analysis, cross-turn consistency verification, and progressive risk scoring to detect and mitigate manipulation attempts effectively. Preliminary evaluations on simulated adversarial scenarios demonstrate the framework's potential to identify subtle manipulation patterns often missed by traditional detection techniques, offering a much-needed layer of security for conversational AI systems. In addition to outlining the design of TCA , we analyze diverse attack vectors and their progression across multi-turn conversation, providing valuable insights into adversarial tactics and their impact on LLM vulnerabilities. Our findings underscore the pressing need for robust, context-aware defenses in conversational AI systems and highlight TCA framework as a promising direction for securing LLMs while preserving their utility in legitimate applications. We make our implementation available to support further research in this emerging area of AI security.

📄 PDF Abstract BibTeX arXiv:2503.15560

Code (1)

prashantkul/multi-turn-attack-defenses 공식 구현

Similar Papers 제목 키워드 기반

Defending Against Backdoor Attacks in Natural Language Generation

2021-06-03 · Xiaofei Sun, Xiaoya Li, Yuxian Meng, Xiang Ao 외

The frustratingly fragile nature of neural network models make current natural language generation (NLG) systems prone to backdoor attacks and generate malicious sequences that could be sexist or offensive. Unfortunately…

Backdoor AttackDialogue GenerationMachine TranslationText Generation+1

Model Agnostic Defense against Adversarial Patch Attacks on Object Detection in Unmanned Aerial Vehicles

2024-05-29 · Saurabh Pathak, Samridha Shrestha, Abdelrahman AlMahmoud

Object detection forms a key component in Unmanned Aerial Vehicles (UAVs) for completing high-level tasks that depend on the awareness of objects on the ground from an aerial perspective. In that scenario, adversarial pa…

Objectobject-detectionObject Detection

Align in Depth: Defending Jailbreak Attacks via Progressive Answer Detoxification

2025-03-14 · Yingjie Zhang, Tong Liu, Zhe Zhao, Guozhu Meng 외

Large Language Models (LLMs) are vulnerable to jailbreak attacks, which use crafted prompts to elicit toxic responses. These attacks exploit LLMs' difficulty in dynamically detecting harmful intents during the generation…

Safety Alignment

Few-shot Multi-domain Knowledge Rearming for Context-aware Defence against Advanced Persistent Threats

2023-06-13 · Gaolei Li, YuanYuan Zhao, Wenqi Wei, Yuchen Liu

Advanced persistent threats (APTs) have novel features such as multi-stage penetration, highly-tailored intention, and evasive tactics. APTs defense requires fusing multi-dimensional Cyber threat intelligence data to ide…

Meta-LearningScheduling

Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

2023-12-21 · Jingwei Yi, Yueqi Xie, Bin Zhu, Emre Kiciman 외

The integration of large language models with external content has enabled applications such as Microsoft Copilot but also introduced vulnerabilities to indirect prompt injection attacks. In these attacks, malicious inst…

Benchmarking