~/talk

Please (Don't) Stop the Music: Adversarial Red-Teaming of AI...

Talkat USENIX Security '25 · 2025-08-13..08-15· [security, machine-learning]
links:none on file
slides:none on file

Red teams two music-generation services with a corpus of 275 banned German songs, finds roughly 70–75% bypass of default filters producing about ten hours of harmful audio, and demonstrates simple bypasses (phonetic edits, hyphenation, encodings). Builds an output-check pipeline: extract vocals, transcribe with Whisper → GPT‑4 classifier into ten harm categories and JSON, then pass/fail; this reduces successful harmful outputs to about 4.4% (≈45 minutes) but notes transcription errors, stitchable verses, and prompt tricks remain.

AI-written summary · about

  1. 0:00AI alignment and risks
  2. 1:17Outer vs inner alignment
  3. 3:26Policy enforcement in AI
  4. 4:52Germany's music laws
  5. 6:39Red-teaming music models
  6. 8:49Bypassing input filters
  7. 9:57Detecting harmful lyrics
  8. 11:46Limitations of VR3 encoding
  9. 12:52AI safety takeaways
  10. 13:56Call for AI policy
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.