Browse AI risks

3 entries

1. 24.03.05 · Risk Sub-Category

   Malicious Uses

   Adversarial AI (General)

   "Adversarial AI refers to a class of attacks that exploit vulnerabilities in machine-learning (ML) models. This class of misuse exploits vulnerabilities introduced by the AI assistant itself and is a form of misuse that can enable malicious entities to exploit privacy vulnerabilities and evade the model’s built-in safety mechanisms, policies, and ethical boundaries of the model. Besides the risks of misuse for offensive cyber operations, advanced AI assistants may also represent a new target for abuse, where bad actors exploit the AI systems themselves and use them to cause harm. While our und

   From The Ethics of Advanced AI Assistants (Gabriel2024)

   Domain 2 2.2 Other Intentional Post-deployment

2. 24.03.06 · Risk Sub-Category

   Malicious Uses

   Adversarial AI: Circumvention of Technical Security Measures

   "The technical measures to mitigate misuse risks of advanced AI assistants themselves represent a new target for attack. An emerging form of misuse of general-purpose advanced AI assistants exploits vulnerabilities in a model that results in unwanted behavior or in the ability of an attacker to gain unauthorized access to the model and/or its capabilities. While these attacks currently require some level of prompt engineering knowledge and are often patched by developers, bad actors may develop their own adversarial AI agents that are explicitly trained to discover new vulnerabilities that all

   From The Ethics of Advanced AI Assistants (Gabriel2024)

   Domain 2 2.2 Other Intentional Post-deployment

3. 24.03.07 · Risk Sub-Category

   Malicious Uses

   Adversarial AI: Prompt Injections

   "Prompt injections represent another class of attacks that involve the malicious insertion of prompts or requests in LLM-based interactive systems, leading to unintended actions or disclosure of sensitive information. The prompt injection is somewhat related to the classic structured query language (SQL) injection attack in cybersecurity where the embedded command looks like a regular input at the start but has a malicious impact. The injected prompt can deceive the application into executing the unauthorized code, exploit the vulnerabilities, and compromise security in its entirety. More rece

   From The Ethics of Advanced AI Assistants (Gabriel2024)

   Domain 2 2.2 Other Intentional Post-deployment

Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.