Rule set sha256:ef0271a74ba2

PROMPT_SECURITY_EXFIL_TRAINING_DATA_EXTRACTION_001

One rule of the rule set with digest ef0271a74ba2f80b96890ef958bdd3699e910badcbf1e7578d9efa398d6f21d8. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.

RulePROMPT_SECURITY_EXFIL_TRAINING_DATA_EXTRACTION_001
Rule versione3e6a4bdd4b50202cb063ef291a7edf89087ef62e5443c281ea4a9118f29ba07
ProvisionRegulation (EU) 2024/1689, Article 15(5)
ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj
ApprovalNot approved

rules/regulations/universal/prompt_security/exfil_training_data_extraction.yaml

Citation
Regulation (EU) 2024/1689 (EU AI Act), Article 15(5): "High-risk AI systems shall be resilient against attempts by unauthorised third parties to alter their use, outputs or performance by exploiting system vulnerabilities. The technical solutions aiming to ensure the cybersecurity of high-risk AI systems shall be appropriate to the relevant circumstances and the risks."
Condition
Detects training-data extraction attacks: "repeat a word forever" divergence prompts and requests to output verbatim memorised/training text. EU AI Act Article 15. OWASP LLM01 / LLM06.
Condition type
regex
Status in the file
No status recorded.