Representation Interpretation of Refusal Mechanism In Large Language Models


์†Œ๊ฐœ

๋ชจ๋“  ๊ธฐ๊ณ„๊ฐ€ ์ž…๋ ฅ์— ๋Œ€ํ•ด์„œ ์ถœ๋ ฅ์„ ๊ฐ€์ง€๋“ฏ์ด AI ๋ชจ๋ธ๋„ ์ž…๋ ฅ์— ๋ฐ˜์‘ํ•ด์„œ ์ถœ๋ ฅ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. ํ•œ ๊ฐ€์ง€ ์ฐจ์ด์ ์ด ์žˆ๋‹ค๋ฉด, ๊ธฐ๊ณ„๋Š” ๊ทธ ๊ณผ์ •์„ ์‚ฌ๋žŒ์ด ์„ค๊ณ„ํ•˜๊ณ  ๋ฐ์ดํ„ฐ๊ฐ€ ํ๋ฅด๋„๋ก ๋งŒ๋“ค์ง€๋งŒ, AI๋Š” ํ•™์Šต์„ ํ†ตํ•ด์„œ ์ž์—ฐ์Šค๋Ÿฝ๊ฒŒ ๋‚ด๋ถ€ ๋ฉ”์ปค๋‹ˆ์ฆ˜์ด ํ˜•์„ฑ๋ฉ๋‹ˆ๋‹ค. AI๋ชจ๋ธ์˜ ๋‚ด๋ถ€๊ฐ€ ๋ฒกํ„ฐ๋กœ ๊ตฌ์„ฑ๋˜์–ด ์žˆ๋‹ค๋Š” ์ ์—์„œ ๋ฒกํ„ฐ๋ฅผ ํ•ด์„ํ•œ๋‹ค๋ฉด, ์•Œ์ง€๋ชปํ•˜๋Š” ๋ชจ๋ธ ๋‚ด๋ถ€๋ฅผ ํ•ด์„ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

์ด ์—ฐ๊ตฌ์—์„œ๋Š” AI๋ชจ๋ธ์ด ํ•ด๋กœ์šด ์งˆ๋ฌธ์— ๋Œ€ํ•ด์„œ ๊ฑฐ์ ˆํ•˜๋Š” ๋ฉ”์ปค๋‹ˆ์ฆ˜์— ๋Œ€ํ•œ ๊ด€์ฐฐ์  ๊ฒฐ๊ณผ๋“ค์„ ๊ณต์œ ํ•ฉ๋‹ˆ๋‹ค. ํŠนํžˆ ์ด์ „ [room1805]์—์„œ ์†Œ๊ฐœํ•œ ๋ฌธ์žฅ์ด ๋๋‚  ๋•Œ ๊ฑฐ์ ˆ์ด ๋ฐœ์ƒํ•œ๋‹ค๋Š” ์ ์œผ๋กœ ๋ฏธ๋ค„๋ดค์„ ๋•Œ, ๋ฌธ์žฅ์˜ ์ค‘๊ฐ„์—์„œ ๋ฐœ์ƒํ•˜๋Š” ๊ฑฐ์ ˆ๊ณผ ๋ฌธ์žฅ์„ ๋งˆ์น˜๊ณ  ์ƒ์„ฑํ•˜๋Š” ๊ฑฐ์ ˆ์€ ์–ด์ฉ์ง€ ๋‹ค๋ฅธ ๋ฉ”์ปค๋‹ˆ์ฆ˜์ธ ๊ฒƒ ๊ฐ™์Šต๋‹ˆ๋‹ค.

ํ”„๋กฌํ”„ํŠธ, ๊ฑฐ์ ˆ ์ƒ์„ฑ ์œ„์น˜

์—ฐ๊ตฌ ๊ฒฐ๊ณผ๋ฅผ ํ™•์ธํ•˜๊ธฐ ์ „์— ๊ณ ๋ คํ•  ๊ฒŒ ์žˆ์Šต๋‹ˆ๋‹ค. LLM์€ ๋‹จ์–ด๋“ค์„ ์ˆœ์ฐจ์ ์œผ๋กœ ์ฒ˜๋ฆฌํ•˜๋Š” autoregressive ๋ชจ๋ธ์ž…๋‹ˆ๋‹ค. ๊ฑฐ์ ˆ์€ ํ† ํฐ๋“ค์˜ ์–ด๋–ค ์œ„์น˜์—์„œ๋„ ์‹œ์ž‘๋  ์ˆ˜ ์žˆ๊ณ , ์ž…๋ ฅ์œผ๋กœ ์ฃผ์–ด์ง€๋Š” ํ”„๋กฌํ”„ํŠธ์— ๋”ฐ๋ผ์„œ ๊ฑฐ์ ˆ ๋ฌธ์žฅ ์ƒ์„ฑ์€ ํฌ๊ฒŒ ์˜ํ–ฅ์„ ๋ฐ›์Šต๋‹ˆ๋‹ค. ๊ทธ๋ž˜์„œ ๋ณธ ์—ฐ๊ตฌ์—์„œ๋Š” ํ”„๋กฌํ”„ํŠธ ํƒ€์ž…๊ณผ ๋ฌธ์žฅ์œผ๋กœ ๊ตฌ๋ถ„๋˜๋Š” ๊ฑฐ์ ˆ ์œ„์น˜์— ๋Œ€ํ•œ ๊ฐ€์ •์„ ์„ธ์šฐ๊ณ , ๊ฑฐ์ ˆ ๋ฒกํ„ฐ๋“ค์„ ๋ถ„์„ํ–ˆ์Šต๋‹ˆ๋‹ค.

๊ด€์ฐฐ 1: ๊ฑฐ์ ˆ ํ‘œํ˜„ ์œ ์‚ฌ์„ฑ

๊ฑฐ์ ˆ ๋ฐฉ์‹์— ๋”ฐ๋ผ์„œ (1) ์œ ์‚ฌํ•˜๊ฑฐ๋‚˜ (2) ๋‹ค๋ฅธ ๋‚ด๋ถ€ ํ‘œํ˜„์ด ์žˆ๋‹ค.

๊ด€์ฐฐ 2: ๊ฑฐ์ ˆ ์œ„์น˜

๋ฌธ์žฅ์„ ๋งˆ์น˜๊ณ  ๊ฑฐ์ ˆํ•˜๋Š” ๊ฒƒ์€, ์ค‘๊ฐ„์— ๊ฑฐ์ ˆํ•˜๋Š” ๊ฒƒ๊ณผ ๋‚ด๋ถ€ ํ‘œํ˜„์ด ๋‹ค๋ฅด๋‹ค.

๊ด€์ฐฐ 3: ๊ฑฐ์ ˆ ํ‘œํ˜„ intervention

๊ฑฐ์ ˆ ๋ฒกํ„ฐ๋ฅผ ๋”ํ•  ๋•Œ, ๊ฐ•๊ฑดํ•œ ๋ฒกํ„ฐ๊ฐ€ ์กด์žฌํ•œ๋‹ค.

๊ด€์ฐฐ 4: ๊ฑฐ์ ˆ ํ‘œํ˜„๊ณผ ์œ ์‚ฌ๋„

ํ•ด๋กญ์ง€ ์•Š์€ ๋ฌธ์žฅ์— ๋Œ€ํ•ด์„œ๋„ ํ™œ์„ฑํ™”๊ฐ€ ์ผ๋ถ€ ๋œ๋‹ค.

๊ฒฐ๋ก 

LLM์˜ ์ตœ๊ทผ ์—ฐ๊ตฌ๋“ค์€ ๋ชจ๋ธ ๋‚ด๋ถ€์˜ ํ•ด์„์— ์ง‘์ค‘ํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ๊ณผ๊ฑฐ์—๋Š” ๊ณ ์ฐจ์› ๋ฒกํ„ฐ์— ๋Œ€ํ•œ ํ•ด์„์ด ๋ถˆ๊ฐ€๋Šฅํ•˜๋‹ค๋Š” ์ธ์‹์ด ๊ฐ•ํ–ˆ์ง€๋งŒ, ํ˜„์žฌ๋Š” ๋ชจ๋ธ ๋‚ด๋ถ€๋ฅผ ํ•ด์„ํ•˜์—ฌ ๋ฒกํ„ฐ๋“ค์„ ์ฐพ๊ณ , ๊ทธ๋“ค์˜ ์˜ํ–ฅ๋ ฅ์„ ์ธก์ •ํ•˜๊ฑฐ๋‚˜ ์ˆ˜์ •ํ•˜๋Š” ์—ฐ๊ตฌ๊ฐ€ ๋งŽ์ด ์ง„ํ–‰๋˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ์ด ์—ฐ๊ตฌ๋Š” ๊ฑฐ์ ˆ ๋งค์ปค๋‹ˆ์ฆ˜์„ ํ•ด์„ํ•˜๋Š” ์ดˆ๊ธฐ ์—ฐ๊ตฌ์ž…๋‹ˆ๋‹ค. ์•ž์œผ๋กœ ๋” ๋งŽ์ด ์—ฐ๊ตฌ๋  ๊ฑฐ์ ˆ ๋งค์ปค๋‹ˆ์ฆ˜์˜ ํ•ด์„ ๋ฐฉ๋ฒ•์„ ๊ธฐ๋Œ€ํ•ด์ฃผ์„ธ์š”!