1. Query-Efficient Black-Box Red Teaming via Bayesian Optimization
- Author
-
Lee, Deokjae, Lee, JunYeong, Ha, Jung-Woo, Kim, Jin-Hwa, Lee, Sang-Woo, Lee, Hwaran, and Song, Hyun Oh
- Subjects
FOS: Computer and information sciences ,Computer Science - Machine Learning ,Artificial Intelligence (cs.AI) ,Computer Science - Computation and Language ,Computer Science - Cryptography and Security ,Computer Science - Artificial Intelligence ,Computation and Language (cs.CL) ,Cryptography and Security (cs.CR) ,Machine Learning (cs.LG) - Abstract
The deployment of large-scale generative models is often restricted by their potential risk of causing harm to users in unpredictable ways. We focus on the problem of black-box red teaming, where a red team generates test cases and interacts with the victim model to discover a diverse set of failures with limited query access. Existing red teaming methods construct test cases based on human supervision or language model (LM) and query all test cases in a brute-force manner without incorporating any information from past evaluations, resulting in a prohibitively large number of queries. To this end, we propose Bayesian red teaming (BRT), novel query-efficient black-box red teaming methods based on Bayesian optimization, which iteratively identify diverse positive test cases leading to model failures by utilizing the pre-defined user input pool and the past evaluations. Experimental results on various user input pools demonstrate that our method consistently finds a significantly larger number of diverse positive test cases under the limited query budget than the baseline methods. The source code is available at https://github.com/snu-mllab/Bayesian-Red-Teaming., ACL 2023 Long Paper - Main Conference
- Published
- 2023