{"id":114069,"date":"2024-03-03T12:25:49","date_gmt":"2024-03-03T10:25:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/artprompt-ataka-na-ai-sistemy-pozvolyayushhaya-obojti-filtry-pri-pomoshhi-ascii-kartinok"},"modified":"2024-03-03T12:25:49","modified_gmt":"2024-03-03T10:25:53","slug":"artprompt-ataka-na-ai-sistemy-pozvolyayushhaya-obojti-filtry-pri-pomoshhi-ascii-kartinok","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/artprompt-ataka-na-ai-sistemy-pozvolyayushhaya-obojti-filtry-pri-pomoshhi-ascii-kartinok","title":{"rendered":"ArtPrompt \u2014 un ataque a los sistemas de IA que permite eludir filtros mediante im\u00e1genes ASCII","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un grupo de investigadores de las universidades de Washington, Illinois y Chicago ha descubierto un nuevo m\u00e9todo para eludir las restricciones en el procesamiento de contenido peligroso en chatbots de IA, basados en grandes modelos de lenguaje (LLM). El ataque se basa en la capacidad de modelos de lenguaje como GPT-3.5, GPT-4 (OpenAI), Gemini (Google), Claude (Anthropic) y Llama2 (Meta) para reconocer y tener en cuenta en las consultas textos presentados en forma de gr\u00e1ficos ASCII. As\u00ed, para eludir los filtros de preguntas peligrosas, basta con indiciar palabras prohibidas en forma de imagen ASCII.

\"ArtPrompt<\/center>
\"ArtPrompt<\/center> <\/p>\n

En t\u00e9rminos de eficacia, el nuevo m\u00e9todo de ataque supera significativamente otros m\u00e9todos conocidos para eludir los filtros en chatbots. La calidad de reconocimiento de gr\u00e1ficos ASCII fue m\u00e1s alta en los modelos Gemini, GPT-4 y GPT-3.5, con un nivel de elusi\u00f3n exitoso de los filtros en consultas de prueba (HPR, Tasa de Utilidad) evaluado en 100%, 98% y 92%, y el \u00edndice de \u00e9xito del ataque (ASR, Tasa de \u00c9xito del Ataque) en 76%, 32% y 76%, mientras que el nivel de peligrosidad de las respuestas obtenidas (HS, Puntaje de Peligrosidad) en una escala de cinco puntos fue de 4.42, 3.38 y 4.56, respectivamente.

\"ArtPrompt<\/center>
\"ArtPrompt<\/center> <\/p>\n

Los investigadores tambi\u00e9n demostraron que los m\u00e9todos de defensa actuales contra la elusi\u00f3n de filtros (PPL, Parafraseo y Retokenizaci\u00f3n) son ineficaces para bloquear el ataque ArtPrompt. Adem\u00e1s, la utilizaci\u00f3n del m\u00e9todo de Retokenizaci\u00f3n incluso aument\u00f3 el n\u00famero de consultas procesadas con \u00e9xito.

\"ArtPrompt<\/center> <\/p>\n

Adici\u00f3n: Yandex GPT2 tambi\u00e9n responde perfectamente a preguntas con gr\u00e1ficos ASCII. Ejemplo con la palabra \u00abHELLO\u00bb:

\"ArtPrompt<\/center>
\n
Fuente: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0412\u0430\u0448\u0438\u043d\u0433\u0442\u043e\u043d\u0441\u043a\u043e\u0433\u043e, \u0418\u043b\u043b\u0438\u043d\u043e\u0439\u0441\u0441\u043a\u043e\u0433\u043e \u0438 \u0427\u0438\u043a\u0430\u0433\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043f\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 AI-\u0447\u0430\u0442\u043e\u0431\u043e\u0442\u0430\u0445, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 (LLM). \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 GPT-3.5, GPT-4 (OpenAI), Gemini (Google), Claude (Anthropic) \u0438 Llama2 (Meta) \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u044e\u0442 \u0438 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0442 \u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 \u0442\u0435\u043a\u0441\u0442, \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0439 \u0432 \u0432\u0438\u0434\u0435 ASCII-\u0433\u0440\u0430\u0444\u0438\u043a\u0438. \u0422\u0430\u043a\u0438\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":114070,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114069","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ArtPrompt \u2014 ataque a sistemas de IA que permite eludir filtros utilizando im\u00e1genes ASCII | ProHoster","description":"Un grupo de investigadores de las universidades de Washington, Illinois y Chicago ha descubierto un nuevo m\u00e9todo para eludir las restricciones en el procesamiento de contenido peligroso en chatbots de IA, basados en grandes modelos de lenguaje.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/artprompt-ataka-na-ai-sistemy-pozvolyayushhaya-obojti-filtry-pri-pomoshhi-ascii-kartinok","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ArtPrompt \u2014 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 AI-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 ASCII-\u043a\u0430\u0440\u0442\u0438\u043d\u043e\u043a | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0412\u0430\u0448\u0438\u043d\u0433\u0442\u043e\u043d\u0441\u043a\u043e\u0433\u043e, \u0418\u043b\u043b\u0438\u043d\u043e\u0439\u0441\u0441\u043a\u043e\u0433\u043e \u0438 \u0427\u0438\u043a\u0430\u0433\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043f\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 AI-\u0447\u0430\u0442\u043e\u0431\u043e\u0442\u0430\u0445, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/artprompt-ataka-na-ai-sistemy-pozvolyayushhaya-obojti-filtry-pri-pomoshhi-ascii-kartinok","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-03T10:25:53+00:00","article:modified_time":"2024-03-03T10:25:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/114069","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=114069"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/114069\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media\/114070"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=114069"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=114069"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=114069"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}