Updated 3/19/2025
The Virus attack method enables attackers to bypass guardrail moderation on fine-tuning data, leading to a significant degradation of safety alignment in large language models (LLMs). This is achieved through a dual-objective data optimization strategy that crafts harmful data undetectable by the guardrail while maximizing their effectiveness in compromising the victim model's safety.
Virus: Harmful Fine-tuning Attack for Large Language Models Bypassing Guardrail Moderation
Affects: Llama 3 8B, Llama Guard 2
Source: arXiv