Microsoft researchers have identified a new type of “jailbreak” attack called the “Skeleton Key” that can bypass the safeguards of generative AI systems, allowing them to output dangerous and sensitive information.&nbsp; 
According to a recent Microsoft Security blog post, this attack operates by simply prompting an AI model to enhance its encoded security features. 
<div class="wp-block-image"> 
 <figure class="aligncenter">
 <img decoding="async" src="https://lh7-us.googleusercontent.com/docsz/AD_4nXdzduW7Cp89LG1KOL_FiF7EYUL0FZTShy3Udn5RUKiuSdZ1ws0SE-cZEVvgQ5DAvtGVvvUTRIJKu-zfBcbD0jbFSnziusJ0Gz0X6UoizZaoqB7qiKAnRMujPY3MckF3Xo9ZgpCdFOCbXllrjO-qtrfTEXLr?key=m_5G16UQIl-rSuHZQfz4Nw" alt="Microsoft (Skeleton Key jailbreak technique harms AI systems)&nbsp;">
 <figcaption class="wp-element-caption">
 Image Source: Microsoft (Skeleton Key <a href="https://www.microsoft.com/en-us/security/blog/2024/06/04/ai-jailbreaks-what-they-are-and-how-they-can-be-mitigated/" target="_blank" rel="noreferrer noopener">jailbreak</a> technique harms AI systems)&nbsp;
 </figcaption>
 </figure>
</div> 
In one scenario described by the researchers, an AI model was asked to provide a recipe for a Molotov cocktail, a simple incendiary device known for World War II. Initially, the model refused, citing safety guidelines. However, when the user claimed to be an expert in a laboratory setting, the model altered its behavior and produced a feasible recipe for the device. 
The blog stated, “In bypassing safeguards, Skeleton Key allows the user to cause the model to produce ordinarily forbidden behaviors, which could range from production of harmful content to overriding its usual decision-making rules.” 
While this specific threat might seem less concerning given that similar information is accessible via search engines, the real danger lies in the potential exposure of personally identifiable and financial data.&nbsp; 
<div class="wp-block-image"> 
 <figure class="aligncenter">
 <img decoding="async" src="https://lh7-us.googleusercontent.com/docsz/AD_4nXeOrTBfndJgGLsmzPlg8uB5luthQOK-j614YGhMwrkrCHIOr6dG-7RlcczxlSMeJm5Z0xTA1NeHz_X8nYjSRRxPBfnrbGg4PvDoWawXI5WiT26ghY6qyMWWCUtchmqa2wV3WczG677_qSGOPKlHP99ODDYS?key=m_5G16UQIl-rSuHZQfz4Nw" alt="Microsoft (Text example for a Skeleton Key jailbreak)">
 <figcaption class="wp-element-caption">
 Image Source: Microsoft (Text example for a Skeleton Key jailbreak)
 </figcaption>
 </figure>
</div> 
Microsoft <a href="https://www.microsoft.com/en-us/security/blog/2024/06/26/mitigating-skeleton-key-a-new-type-of-generative-ai-jailbreak-technique/" target="_blank" rel="noreferrer noopener nofollow">warns</a> that the Skeleton Key attack can affect many popular generative AI models, including GPT-3.5, GPT-4, Claude 3, Gemini Pro, and Meta Llama-3 70B. 
Large language models like Google’s Gemini, Microsoft’s CoPilot, and OpenAI’s ChatGPT are trained on massive datasets that may include social media networks and information repositories like Wikipedia.&nbsp; 
The risk that personally identifiable information (PII) such as names, phone numbers, addresses, and account numbers could be embedded in these models is significant, depending on the data selection during training.&nbsp; 
Organizations using AI models, especially those adapting enterprise models for commercial use, face heightened risks. For example, a bank integrating a chatbot with customer data might find its security measures compromised by a Skeleton Key attack, potentially exposing sensitive information. 
To mitigate these risks, Microsoft recommends several defensive measures, including hard-coded input/output filtering and secure monitoring systems to prevent advanced prompt engineering from breaching safety thresholds. These steps are crucial for maintaining the integrity and security of AI systems in an increasingly AI-driven world. 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 Also Read: <a href="https://www.cryptotimes.io/2024/06/28/cir-sues-openai-microsoft-over-copyrighted-content-use/" target="_blank" rel="noreferrer noopener">CIR Sues OpenAI, Microsoft Over Copyrighted Content Use</a> 
</blockquote>

Microsoft Uncovers AI ‘Skeleton Key’ Threat to Data Security

The Crypto Times

2024年6月29日公開の他の記事

U.S. Treasury Issues Crypto Tax Regime For 2025, Non-Custodians Need To Wait

Bitcoin Rebounds at $60,400

Can Ethereum and Chainlink Keep Up with BlockDAG’s $54.5M Presale Success?

Nigerian official advocates blockchain, AI against illicit financial flows

Huge Gains Within 4 Days: Will KAI Cat Coin Be The Next Shiba?

Fed may cut rates this year amid inflation concerns tied to Trump

ニュースレターを購読して暗号資産の最新情報を毎日入手！