[{"month":"03","oa_version":"Preprint","date_created":"2025-02-20T10:13:42Z","external_id":{"arxiv":["2403.06833"]},"ddc":["000"],"file_date_updated":"2025-02-20T10:11:45Z","doi":"10.48550/arXiv.2403.06833","type":"preprint","date_published":"2024-03-01T00:00:00Z","language":[{"iso":"eng"}],"related_material":{"link":[{"url":" https://github.com/egozverev/Shold-It-Be-Executed-Or-Processed","relation":"software"}]},"corr_author":"1","user_id":"2DF688A6-F248-11E8-B48F-1D18A9856A87","oa":1,"date_updated":"2025-02-24T12:52:23Z","tmp":{"image":"/images/cc_by_sa.png","short":"CC BY-SA (4.0)","name":"Creative Commons Attribution-ShareAlike 4.0 International Public License (CC BY-SA 4.0)","legal_code_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode"},"author":[{"id":"05162b19-1340-11ed-8f02-fa94e0e8c3bc","last_name":"Zverev","full_name":"Zverev, Egor","first_name":"Egor"},{"last_name":"Abdelnabi","first_name":"Sahar","full_name":"Abdelnabi, Sahar"},{"orcid":"0009-0003-4119-6281","full_name":"Tabesh, Soroush","first_name":"Soroush","last_name":"Tabesh","id":"06000900-6068-11ef-8d61-c2472ef2e752"},{"full_name":"Fritz, Mario","first_name":"Mario","last_name":"Fritz"},{"id":"40C20FD2-F248-11E8-B48F-1D18A9856A87","orcid":"0000-0001-8622-7887","last_name":"Lampert","first_name":"Christoph","full_name":"Lampert, Christoph"}],"acknowledgement":"The authors would like to sincerely thank Juan Rocamonde for valuable feedback to our manuscript. We acknowledge the support from the Scientific Service Units (SSU) of ISTA through resources provided by Scientific Computing (SciComp). We thank Dan Alistarh for providing us with computational resources. This work was partially funded by the German Federal Ministry of Education and Research (BMBF) under the grant AIgenCY (16KIS2012) and ELSA – European Lighthouse on Secure and Safe AI funded by the European Union under grant agreement No. 101070617. Views and opinions expressed are however those of the authors only and do not necessarily reflect those of the European Union or European Commission. Neither the European Union nor the European Commission can be held responsible for them.","citation":{"apa":"Zverev, E., Abdelnabi, S., Tabesh, S., Fritz, M., &#38; Lampert, C. (2024). Can LLMs separate instructions from data? And what do we even mean by that? <i>arXiv</i>. <a href=\"https://doi.org/10.48550/arXiv.2403.06833\">https://doi.org/10.48550/arXiv.2403.06833</a>","mla":"Zverev, Egor, et al. “Can LLMs Separate Instructions from Data? And What Do We Even Mean by That?” <i>ArXiv</i>, 2403.06833, 2024, doi:<a href=\"https://doi.org/10.48550/arXiv.2403.06833\">10.48550/arXiv.2403.06833</a>.","chicago":"Zverev, Egor, Sahar Abdelnabi, Soroush Tabesh, Mario Fritz, and Christoph Lampert. “Can LLMs Separate Instructions from Data? And What Do We Even Mean by That?” <i>ArXiv</i>, 2024. <a href=\"https://doi.org/10.48550/arXiv.2403.06833\">https://doi.org/10.48550/arXiv.2403.06833</a>.","ama":"Zverev E, Abdelnabi S, Tabesh S, Fritz M, Lampert C. Can LLMs separate instructions from data? And what do we even mean by that? <i>arXiv</i>. 2024. doi:<a href=\"https://doi.org/10.48550/arXiv.2403.06833\">10.48550/arXiv.2403.06833</a>","ista":"Zverev E, Abdelnabi S, Tabesh S, Fritz M, Lampert C. 2024. Can LLMs separate instructions from data? And what do we even mean by that? arXiv, 2403.06833.","ieee":"E. Zverev, S. Abdelnabi, S. Tabesh, M. Fritz, and C. Lampert, “Can LLMs separate instructions from data? And what do we even mean by that?,” <i>arXiv</i>. 2024.","short":"E. Zverev, S. Abdelnabi, S. Tabesh, M. Fritz, C. Lampert, ArXiv (2024)."},"_id":"19063","OA_place":"repository","acknowledged_ssus":[{"_id":"ScienComp"}],"year":"2024","has_accepted_license":"1","title":"Can LLMs separate instructions from data? And what do we even mean by that?","day":"01","publication":"arXiv","main_file_link":[{"open_access":"1","url":"https://doi.org/10.48550/arXiv.2403.06833"}],"department":[{"_id":"GradSch"},{"_id":"ChLa"}],"article_number":"2403.06833","arxiv":1,"OA_type":"green","publication_status":"published","abstract":[{"text":"Instruction-tuned Large Language Models (LLMs) show impressive results in numerous practical applications, but they lack essential safety features that are common in other areas of computer science, particularly an explicit separation of instructions and data. This makes them vulnerable to manipulations such as indirect prompt injections and generally unsuitable for safety-critical tasks. Surprisingly, there is currently no established definition or benchmark to quantify this phenomenon. In this work, we close this gap by introducing a formal measure for instruction-data separation and an empirical variant that is calculable from a model's outputs. We also present a new dataset, SEP, that allows estimating the measure for real-world models. Our results on various LLMs show that the problem of instruction-data separation is real: all models fail to achieve high separation, and canonical mitigation techniques, such as prompt engineering and fine-tuning, either fail to substantially improve separation or reduce model utility. The source code and SEP dataset are openly accessible at https://github.com/egozverev/Shold-It-Be-Executed-Or-Processed.\r\n","lang":"eng"}],"file":[{"date_updated":"2025-02-20T10:11:45Z","relation":"main_file","file_size":530972,"checksum":"35eb43968684b87be59144603ef10af0","date_created":"2025-02-20T10:11:45Z","file_name":"2403.06833v3.pdf","content_type":"application/pdf","success":1,"access_level":"open_access","file_id":"19064","creator":"ezverev"}],"status":"public","article_processing_charge":"No","license":"https://creativecommons.org/licenses/by-sa/4.0/"},{"abstract":[{"text":"We investigate parameter-efficient fine-tuning (PEFT) methods that can provide good accuracy under limited computational and memory budgets in the context of large language models (LLMs). We present a new PEFT method called Robust Adaptation (RoSA) inspired by robust principal component analysis that jointly trains low-rank\r\n and highly-sparse components on top of a set of fixed pretrained weights to efficiently approximate the performance of a full-fine-tuning (FFT) solution. Across a series of challenging generative tasks such as grade-school math and SQL query generation, which require fine-tuning for good performance, we show that RoSA outperforms LoRA, pure sparse fine-tuning, and alternative hybrid methods at the same parameter budget, and can even recover the performance of FFT on some tasks. We provide system support for RoSA to complement the training algorithm, specifically in the form of sparse GPU kernels which enable memory- and computationally-efficient training, and show that it is also compatible with low-precision base weights, resulting in the first joint representation combining quantization, low-rank and sparse approximations. Our code is available at https://github.com/IST-DASLab/RoSA.","lang":"eng"}],"publication_status":"published","status":"public","intvolume":"       235","article_processing_charge":"No","page":"38187-38206","scopus_import":"1","year":"2024","title":"RoSA: Accurate parameter-efficient fine-tuning via robust adaptation","day":"01","publication":"Proceedings of the 41st International Conference on Machine Learning","volume":235,"main_file_link":[{"url":"https://doi.org/10.48550/arXiv.2401.04679","open_access":"1"}],"department":[{"_id":"DaAl"},{"_id":"GradSch"}],"arxiv":1,"corr_author":"1","user_id":"2DF688A6-F248-11E8-B48F-1D18A9856A87","quality_controlled":"1","oa":1,"date_updated":"2024-10-01T08:22:01Z","author":[{"full_name":"Nikdan, Mahdi","first_name":"Mahdi","last_name":"Nikdan","id":"66374281-f394-11eb-9cf6-869147deecc0"},{"first_name":"Soroush","full_name":"Tabesh, Soroush","last_name":"Tabesh","orcid":"0009-0003-4119-6281","id":"06000900-6068-11ef-8d61-c2472ef2e752"},{"id":"41888001-440d-11ef-8299-d0e838b8185e","first_name":"Elvir","full_name":"Crncevic, Elvir","last_name":"Crncevic"},{"id":"4A899BFC-F248-11E8-B48F-1D18A9856A87","orcid":"0000-0003-3650-940X","last_name":"Alistarh","full_name":"Alistarh, Dan-Adrian","first_name":"Dan-Adrian"}],"acknowledgement":"The authors would like to thank Eldar Kurtic for experimental support and useful suggestions throughout the project","citation":{"mla":"Nikdan, Mahdi, et al. “RoSA: Accurate Parameter-Efficient Fine-Tuning via Robust Adaptation.” <i>Proceedings of the 41st International Conference on Machine Learning</i>, vol. 235, ML Research Press, 2024, pp. 38187–206.","apa":"Nikdan, M., Tabesh, S., Crncevic, E., &#38; Alistarh, D.-A. (2024). RoSA: Accurate parameter-efficient fine-tuning via robust adaptation. In <i>Proceedings of the 41st International Conference on Machine Learning</i> (Vol. 235, pp. 38187–38206). Vienna, Austria: ML Research Press.","chicago":"Nikdan, Mahdi, Soroush Tabesh, Elvir Crncevic, and Dan-Adrian Alistarh. “RoSA: Accurate Parameter-Efficient Fine-Tuning via Robust Adaptation.” In <i>Proceedings of the 41st International Conference on Machine Learning</i>, 235:38187–206. ML Research Press, 2024.","ama":"Nikdan M, Tabesh S, Crncevic E, Alistarh D-A. RoSA: Accurate parameter-efficient fine-tuning via robust adaptation. In: <i>Proceedings of the 41st International Conference on Machine Learning</i>. Vol 235. ML Research Press; 2024:38187-38206.","ista":"Nikdan M, Tabesh S, Crncevic E, Alistarh D-A. 2024. RoSA: Accurate parameter-efficient fine-tuning via robust adaptation. Proceedings of the 41st International Conference on Machine Learning. ICML: International Conference on Machine Learning vol. 235, 38187–38206.","ieee":"M. Nikdan, S. Tabesh, E. Crncevic, and D.-A. Alistarh, “RoSA: Accurate parameter-efficient fine-tuning via robust adaptation,” in <i>Proceedings of the 41st International Conference on Machine Learning</i>, Vienna, Austria, 2024, vol. 235, pp. 38187–38206.","short":"M. Nikdan, S. Tabesh, E. Crncevic, D.-A. Alistarh, in:, Proceedings of the 41st International Conference on Machine Learning, ML Research Press, 2024, pp. 38187–38206."},"_id":"18117","month":"09","oa_version":"Preprint","date_created":"2024-09-22T22:01:44Z","external_id":{"arxiv":["2401.04679"]},"publication_identifier":{"eissn":["2640-3498"]},"conference":{"name":"ICML: International Conference on Machine Learning","start_date":"2024-07-21","end_date":"2024-07-27","location":"Vienna, Austria"},"type":"conference","date_published":"2024-09-01T00:00:00Z","publisher":"ML Research Press","language":[{"iso":"eng"}],"related_material":{"link":[{"url":"https://github.com/IST-DASLab/RoSA","relation":"software"}]}}]