about
Mitigating Exaggerated Safety in Large Language Models (arxiv.org)
1 point by PaulHoule on May 18, 2024 | hide | past | pdf | discuss on HN

In plain words: Giving a chatbot examples, follow-up questions, or extra context in the prompt can stop it from refusing harmless requests. In tests, 26.1% of safe prompts were wrongly blocked; combining these prompt styles cut such wrong refusals by 92.9%.

Abstract

As the popularity of Large Language Models (LLMs) grow, combining model safety with utility becomes increasingly important. The challenge is making sure that LLMs can recognize and decline dangerous prompts without sacrificing their ability to be helpful. The problem of "exaggerated safety" demonstrates how difficult this can be. To reduce excessive safety behaviours -- which was discovered to be 26.1% of safe prompts being misclassified as dangerous and refused -- we use a combination of XSTest dataset prompts as well as interactive, contextual, and few-shot prompting to examine the decision bounds of LLMs such as Llama2, Gemma Command R+, and Phi-3. We find that few-shot prompting works best for Llama2, interactive prompting works best Gemma, and contextual prompting works best for Command R+ and Phi-3. Using a combination of these prompting strategies, we are able to mitigate exaggerated safety behaviors by an overall 92.9% across all LLMs. Our work presents a multiple prompting strategies to jailbreak LLMs' decision-making processes, allowing them to navigate the tight line between refusing unsafe prompts and remaining helpful.

Ruchira Ray, Ruchi Bhalani
arXiv:2405.05418 · cs.CL · submitted May 8, 2024 · updated Aug 29, 2024
abstract · pdf · html · 17 pages, 8 figures, 2 tables

add comment on HN