Alexandra Souly

Defences against LLM misuse fine-tuning attacks that aim to detect individual malicious or suspicious samples are insufficient.