activity
20242026
most citedMachine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents

2 citations · 5 across the 16 of their papers we have counts for

collaborators
Showing 2024Show all

6 papers · 1 filter

cs.CR2024

Adversarial Hubness in Multi-Modal Retrieval

Tingwei Zhang, Fnu Suya, Rishi Jha +2

Hubness is a phenomenon in high-dimensional vector spaces where a point from the natural distribution is unusually close to many other points. This is a well-known problem in infor…

cs.LG2024★ 2 cited

Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Research

A. Feder Cooper, Christopher A. Choquette-Choo, Miranda Bogen +34

"Machine unlearning" is a popular proposed solution for mitigating the existence of content in an AI model that is problematic for legal or moral reasons, including privacy, copyri…

cs.CL2024

Adversarial Decoding: Generating Readable Documents for Adversarial Objectives

Collin Zhang, Tingwei Zhang, Vitaly Shmatikov

We design, implement, and evaluate adversarial decoding, a new, generic text generation technique that produces readable documents for different adversarial objectives. Prior metho…

cs.CR2024★ 1 cited

Self-interpreting Adversarial Images

Tingwei Zhang, Collin Zhang, John X. Morris +2

We introduce a new type of indirect, cross-modal injection attacks against visual language models that enable creation of self-interpreting images. These images contain hidden "met…

cs.CR2024★ 2 cited

Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents

Avital Shafran, Roei Schuster, Vitaly Shmatikov

Retrieval-augmented generation (RAG) systems respond to queries by retrieving relevant documents from a knowledge database and applying an LLM to the retrieved documents. We demons…

cs.CL2024

Extracting Prompts by Inverting LLM Outputs

Collin Zhang, John X. Morris, Vitaly Shmatikov

We consider the problem of language model inversion: given outputs of a language model, we seek to extract the prompt that generated these outputs. We develop a new black-box metho…