Attacks on Third-Party APIs of Large Language Models

arXiv:2404.16891v1 Announce Type: new
Abstract: Large language model (LLM) services have recently begun offering a plugin ecosystem to interact with third-party API services. This innovation enhances the capabilities of LLMs, but it also introduces risks, as these plugins developed by various third parties cannot be easily trusted. This paper proposes a new attacking framework to examine security and safety vulnerabilities within LLM platforms that incorporate third-party services. Applying our framework specifically to widely used LLMs, we identify real-world malicious attacks …

apis arxiv attacks cs.ai cs.cl cs.cr cs.cy language language models large party third third-party