RLHF 人類偏好數據操縱
Design & Development
Risk Description
During Reinforcement Learning from Human Feedback (RLHF), malicious annotators systematically manipulate preference rankings, causing models to learn biased values or harmful behavior patterns. Annotators may prefer deceptive, manipulative, or biased responses, corrupting the model alignment training. This attack is particularly dangerous as RLHF directly shapes model behavioral norms.
Framework Mappings
iso 23894R2
cosaiData Poisoning
tw principle資安與安全
tw principle問責
tw risk type技術設計缺陷(Technical Design Flaw)
Controls English translation pending
- 多層偏好驗證
- 標註者行為分析
Implementation Steps English translation pending
- 建立多輪交叉驗證機制,確保偏好排序的一致性
- 部署標註者行為異常偵測系統,識別系統性偏差模式
- 使用「紅隊」標註者定期測試偏好數據品質
- 維護基準偏好數據集,定期比對生產標註的分佈偏移