跳到正文
Perplexity· @perplexity_ai · X·· 2 小时前AI 评分46
AI 导读

Perplexity 公布对 Computer agents 虚拟机沙箱 SPACE 的红队测试结果:让 12 个模型尝试逃逸 VM 从宿主机窃取凭证,并绕过网络策略访问被封禁 URL。研究发现,红队常用的标准 Capture the Flag 设置会让智能体偏离真正被测的安全边界,且安全专用模型并不保证更好表现。

正文 · 原文

We are publishing new research on our findings from red-teaming SPACE, our VM sandbox for Computer agents.

We gave 12 models two tasks: escape the VM to take a credential from the host, and bypass SPACE's network policy to reach a blocked URL.

We found that the standard Capture the Flag setup used in red-teaming can steer agents away from the security boundary being tested, and that security-specialized models don't guarantee better results.

perplexity.ai/hub/blog/escapi…

来源:Perplexity · x.com