about
Can you protect your prompt from being stolen? (arxiv.org)
2 points by m0g1cian on Jun 12, 2024 | hide | past | pdf | discuss on HN

In plain words: Built a test suite that tries to steal the instructions behind AI apps, using 14 kinds of trick queries plus combined attacks and defense templates, with and without protections. Every model leaked its prompt when undefended, though OpenAI's held up best once defenses were added.

Abstract · Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications

With the proliferation of LLM-integrated applications such as GPT-s, millions are deployed, offering valuable services through proprietary instruction prompts. These systems, however, are prone to prompt extraction attacks through meticulously designed queries. To help mitigate this problem, we introduce the Raccoon benchmark which comprehensively evaluates a model's susceptibility to prompt extraction attacks. Our novel evaluation method assesses models under both defenseless and defended scenarios, employing a dual approach to evaluate the effectiveness of existing defenses and the resilience of the models. The benchmark encompasses 14 categories of prompt extraction attacks, with additional compounded attacks that closely mimic the strategies of potential attackers, alongside a diverse collection of defense templates. This array is, to our knowledge, the most extensive compilation of prompt theft attacks and defense mechanisms to date. Our findings highlight universal susceptibility to prompt theft in the absence of defenses, with OpenAI models demonstrating notable resilience when protected. This paper aims to establish a more systematic benchmark for assessing LLM robustness against prompt extraction attacks, offering insights into their causes and potential countermeasures. Resources of Raccoon are publicly available at https://github.com/M0gician/RaccoonBench.

Junlin Wang, Tianyi Yang, Roy Xie, Bhuwan Dhingra
arXiv:2406.06737 · cs.CR, cs.CL · submitted Jun 10, 2024 · updated Oct 26, 2024
abstract · pdf · html · ACL 2024 Findings

add comment on HN