Towards Assurance of LLM Adversarial Robustness using Ontology-Driven Argumentation
Not on the map. Why?
Abstract (arXiv)
Despite the impressive adaptability of large language models (LLMs), challenges remain in ensuring their security, transparency, and interpretability. Given their susceptibility to adversarial attacks, LLMs need to be defended with an evolving combination of adversarial training and guardrails. However, managing the implicit and heterogeneous knowledge for continuously assuring robustness is difficult. We introduce a novel approach for assurance of the adversarial robustness of LLMs based on formal argumentation. Using ontologies for formalization, we structure state-of-the-art attacks and defenses, facilitating the creation of a human-readable assurance case, and a machine-readable representation. We demonstrate its application with examples in English language and code translation tasks, and provide implications for theory and practice, by targeting engineers, data scientists, users, and auditors.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 22 of its 34 references that are in the map. First posted on arXiv 10 Oct 2024.
Builds on
22 of 34 references.
References · 22
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2023Is Your Code Generated by ChatGPT Really Correct? Rigorous Evaluation of Large Language Models for Code Generationcited by 1,332
- 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 533
- 2022Language Models are Multilingual Chain-of-Thought Reasonerscited by 518
- 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 434
- 2023Detecting Language Model Attacks with Perplexitycited by 411
- 2024Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attackcited by 364
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 226
- 2018Adversarial Robustness Toolbox v1.0.0cited by 214
- 2023Large Language Models for Software Engineering: Survey and Open Problemscited by 178
10 more
- 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLMcited by 173
- 2017Interactive Learning from Policy-Dependent Human Feedbackcited by 155
- 2022Toward Transparent AI: A Survey on Interpreting the Inner Structures of Deep Neural Networkscited by 126
- 2024Coercing LLMs to do and reveal (almost) anythingcited by 88
- 2023The Foundation Model Transparency Indexcited by 63
- 2021Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networkscited by 37
- 2021A Survey on AI Assurancecited by 16
- 2020Explanation Ontology: A Model of Explanations for User-Centered AIcited by 13
- 2022Assessing Confidence with Assurance 2.0cited by 3
- 2023Current and Future Challenges in Knowledge Representation and Reasoningcited by 1
Built on by
Citing papers per year: 2024: 1.
1 paper.