license: apache-2.0
We created Starling by fine-tuning Vicuna-7B on HarmfulQA, a ChatGPT-distilled dataset that we collected using the Chain of Utterances (CoU) prompt. More details are on our paper Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignment
Experimental results on several safety benchmark datasets indicate that Starling is a safer model compared to the baseline model, Vicuna.
Experimental Results
Compared to Vicuna, Avg. 5.2% reduction in Attack Success Rate (ASR) on DangerousQA and HarmfulQA using three different prompts.
Compared to Vicuna, Avg. 3-7% improvement in HHH score measured on BBH-HHH benchmark.
TruthfulQA (MC2): 48.90 vs Vicuna's 47.00
MMLU (5-shot): 46.69 vs Vicuna's 47.18
BBH (3-shot): 33.47 vs Vicuna's 33.05
Jailbreak Prompt for harmfulness eval using Red Eval as reported in the paper
This jailbreak prompt (termed as Chain of Utterances (CoU) prompt in the paper) shows a 65% Attack Success Rate (ASR) on GPT-4 and 72% on ChatGPT.
HarmfulQA Data Collection
Note: This model is referred to as Starling (Blue) in the paper. We shall soon release Starling (Blue-Red) which was trained on harmful data using an objective function that helps model learn from the negative data.