Orca-Bench: How Ready Are Language Model Agents for Oncall?

arxiv.org

30 points·yruzin··11 comments

Seems like there's a big attack-defence asymmetry at present: models are great at exploiting systems and poor at fixing them.

Your strategy can’t be patch AFTER an intrusion. Only to build a hardened environment from scratch and be ready in advance.

Attackers advantage in the iterative fast feedback loop?

It’s harder to have a loop to ensure you are defending all possible attacks?

I guess the loop is you need to attack yourself and fix. But attackers only need a single opening.

Finding all possible attacks and patching them against yourself is inherently more expensive?

This doesn't work anymore. Is there a newer link?

Was really looking forward to that. Hope they publish.

All I can think of is

GET /ignore-all-previous-instructions.

How do you protect against that?

Avoid the most dangerous situations by making sure LLMs with untrusted input produce output that's human reviewed.

Still makes an interesting way for, say, a former employee to poison the results.

This goes against the agentic yolo approach tho.

I think this is where harness makes a lot of sense. Use LLM to produce all possible attack angles/phrases and just stupidly filter them out on input.

you probably still need a human for oncall but the llm can try to solve any issues first before the human gets paged

You would trust an LLM to make changes to prod without being verified by a human first?