Exposing LLM Vulnerabilities: Adversarial Scam Detection and Performance
Can we trust Large Language Models (LLMs) to accurately predict scam? This paper investigates the vulnerabilities of LLMs when facing adversarial scam messages for the task of scam detection. We addressed this issue by creating a comprehensive dataset with fine-grained labels of scam messages, including both original and adversarial scam messages. The dataset extended traditional binary classes for the scam detection task into more nuanced scam types. Our analysis showed how adversarial examples took advantage of vulnerabilities of a LLM, leading to high misclassification rate. We evaluated the performance of LLMs on these adversarial scam messages and proposed strategies to improve their robustness.
Authors
- Shailik Sarkar (ORCID: https://orcid.org/0000-0001-6544-2262)
- Hemant Purohit (ORCID: https://orcid.org/0000-0002-4573-8450)
- Chang‐Tien Lu (ORCID: https://orcid.org/0000-0003-3675-0199)
- Fengxiu Zhang (ORCID: https://orcid.org/0000-0001-5784-9708)
- Michin Hong (ORCID: https://orcid.org/0000-0002-2781-7374)
- Qi Zhang (ORCID: https://orcid.org/0000-0002-7238-8134)
- Hossein Salemi (ORCID: https://orcid.org/0000-0003-3462-9037)
- Chen-Wei Chang
- Jin-Hee Cho
- S. Mitra (ORCID: https://orcid.org/0000-0002-0800-4626)
Institutions
- George Mason University (US)
- University School (US)
- Indiana University (US)
- Virginia Tech (US)
Publication Details
- Published
- 2024-12-15
- DOI
- https://doi.org/10.1109/bigdata62323.2024.10825256
- Citations
- 3
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 1.05