The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearning
Authors:
Nathaniel Li,
Alexander Pan,
Anjali Gopal,
Summer Yue,
Daniel Berrios,
Alice Gatti,
Justin D. Li,
Ann-Kathrin Dombrowski,
Shashwat Goel,
Long Phan,
Gabriel Mukobi,
Nathan Helm-Burger,
Rassin Lababidi,
Lennart Justen,
Andrew B. Liu,
Michael Chen,
Isabelle Barrass,
Oliver Zhang,
Xiaoyuan Zhu,
Rishub Tamirisa,
Bhrugu Bharathi,
Adam Khoja,
Zhenqi Zhao,
Ariel Herbert-Voss,
Cort B. Breuer
, et al. (32 additional authors not shown)
Abstract:
The White House Executive Order on Artificial Intelligence highlights the risks of large language models (LLMs) empowering malicious actors in developing biological, cyber, and chemical weapons. To measure these risks of malicious use, government institutions and major AI labs are developing evaluations for hazardous capabilities in LLMs. However, current evaluations are private, preventing furthe…
▽ More
The White House Executive Order on Artificial Intelligence highlights the risks of large language models (LLMs) empowering malicious actors in developing biological, cyber, and chemical weapons. To measure these risks of malicious use, government institutions and major AI labs are developing evaluations for hazardous capabilities in LLMs. However, current evaluations are private, preventing further research into mitigating risk. Furthermore, they focus on only a few, highly specific pathways for malicious use. To fill these gaps, we publicly release the Weapons of Mass Destruction Proxy (WMDP) benchmark, a dataset of 3,668 multiple-choice questions that serve as a proxy measurement of hazardous knowledge in biosecurity, cybersecurity, and chemical security. WMDP was developed by a consortium of academics and technical consultants, and was stringently filtered to eliminate sensitive information prior to public release. WMDP serves two roles: first, as an evaluation for hazardous knowledge in LLMs, and second, as a benchmark for unlearning methods to remove such hazardous knowledge. To guide progress on unlearning, we develop RMU, a state-of-the-art unlearning method based on controlling model representations. RMU reduces model performance on WMDP while maintaining general capabilities in areas such as biology and computer science, suggesting that unlearning may be a concrete path towards reducing malicious use from LLMs. We release our benchmark and code publicly at https://wmdp.ai
△ Less
Submitted 15 May, 2024; v1 submitted 5 March, 2024;
originally announced March 2024.
Refined height pairing
Authors:
Bruno Kahn,
with an appendix by Qing Liu
Abstract:
For a $d$-dimensional smooth projective variety $X$ over the function field of a smooth variety $B$ over a field $k$ and for $i\ge 0$, we define a subgroup $CH^i(X)^{(0)}$ of $CH^i(X)$ and construct a "refined height pairing" \[CH^i(X)^{(0)}\times CH^{d+1-i}(X)^{(0)}\to CH^1(B)\] in the category of abelian groups modulo isogeny. For $i=1,d$, $CH^i(X)^{(0)}$ is the group of cycles numerically equiv…
▽ More
For a $d$-dimensional smooth projective variety $X$ over the function field of a smooth variety $B$ over a field $k$ and for $i\ge 0$, we define a subgroup $CH^i(X)^{(0)}$ of $CH^i(X)$ and construct a "refined height pairing" \[CH^i(X)^{(0)}\times CH^{d+1-i}(X)^{(0)}\to CH^1(B)\] in the category of abelian groups modulo isogeny. For $i=1,d$, $CH^i(X)^{(0)}$ is the group of cycles numerically equivalent to $0$. This pairing relates to pairings defined by P. Schneider and A. Beilinson if $B$ is a curve, to a refined height defined by L. Moret-Bailly when $X$ is an abelian variety, and to a pairing with values in $H^2(B_{\bar k},\mathbf{Q}_l(1))$ defined by D. Rössler and T. Szamuely in general. We study it in detail when $i=1$.
△ Less
Submitted 6 December, 2023; v1 submitted 1 September, 2020;
originally announced September 2020.
