大语言模型对抗性攻击与防御综述.pdfVIP

计算机研究与发展

Journal

of

Computer

Research

and

Development62（3）：563−588，2025

大语言模型对抗性攻击与防御综述

台建玮杨双宁王佳佳李亚凯刘奇旭贾晓启111222

1

（安徽大学互联网学院合肥230039）

2

（中国科学院信息工程研究所北京100093）

（24012@）

SurveyofAdversarialAttacksandDefensesforLargeLanguageModels

1

1

1

2

2

2

Tai

Jianwei,

Yang

Shuangning,

Wang

Jiajia,

Li

Yakai,

Liu

Qixu,

and

Jia

Xiaoqi

1

（SchoolofInternet,AnhuiUniversity,Hefei230039）

2

（InstituteofInformationEngineering,ChineseAcademyofSciences,Beijing100093）

AbstractWith

the

rapid

development

of

natural

language

processing

and

deep

learning

technologies,

large

language

models

(LLMs)

have

been

increasingly

applied

in

various

fields

such

as

text

processing,

language

understanding,

image

generation,

and

code

auditing.

These

models

have

become

a

research

hotspot

of

common

interest

in

both

academia

and

industry.

However,

adversarial

attack

methods

allow

attackers

to

manipulate

large

language

models

into

generating

erroneous,

unethical,

or

false

content,

posing

increasingly

severe

security

threats

to

these

models

and

their

wide-ranging

applications.

This

paper

systematically

reviews

recent

advancements

in

adversarial

attack

methods

and

defense

strategies

for

large

language

models.

It

provides

a

detailed

summary

of

fundamental

principles,

implementation

techniques,

and

major

findings

from

relevant

studies.

Building

on

this

foundation,

the

paper

delves

into

technical

discussions

of

four

mainstream

attack

modes:

prompt

injection

attacks,

indirect

prompt

injection

attacks,

jailbreak

attacks,