mirror of
https://github.com/Shiva108/ai-llm-red-team-handbook.git
synced 2026-10-13 19:21:05 +02:00
docs: Refine formatting of numbered lists and add a blank line for readability.
This commit is contained in:
1 parent
f80b29325a
commit
e609cc2a2c
1 file changed
+4
-3
@@ -942,9 +942,9 @@ PRIVACY VIOLATION: Model leaks training data membership
|
||||
|
||||
### Current Research Gaps
|
||||
|
||||
1. **Copyright inWeights**: Determining if a model "contains" a copyrighted work in a legal sense (substantial similarity).
|
||||
2. **Machine Unlearning**: How to remove a distinct concept/person from a model cost-effectively.
|
||||
3. **Watermark Robustness**: Creating watermarks that survive distillation/theft (most currently fail).
|
||||
1. **Copyright inWeights**: Determining if a model "contains" a copyrighted work in a legal sense (substantial similarity).
|
||||
2. **Machine Unlearning**: How to remove a distinct concept/person from a model cost-effectively.
|
||||
3. **Watermark Robustness**: Creating watermarks that survive distillation/theft (most currently fail).
|
||||
|
||||
### Recommended Reading
|
||||
|
||||
@@ -973,6 +973,7 @@ As models move to the edge and APIs become ubiquitous, these "grey box" attacks
|
||||
## Quick Reference
|
||||
|
||||
### Attack Vector Summary
|
||||
|
||||
Attackers query the model to either learn its internal parameters (Model Theft) or determine if specific data points were used during training (Membership Inference). This exploits the model's high information retention and correlation with its training set.
|
||||
|
||||
### Key Detection Indicators
|
||||
|
||||
Reference in new issue
Block a user