模型遷移性對抗攻擊

Risk Description

Adversarial examples generated against a surrogate model can successfully attack an unknown target model (black-box transfer attack). Attackers need no direct access to the target model — generating adversarial examples using open-source models with similar architectures suffices. Even with strict API access controls, models remain vulnerable. Recent research shows particularly high transfer attack success rates between LLMs.