推进您在 AI 对齐与安全领域的职业生涯

MATS 是一项独立的研究奖学金计划,帮助优秀研究者结识 AI 在对齐、透明度和安全领域的顶尖导师。学员将在我们位于美国加州伯克利和英国伦敦的办公室开展为期 12 周的研究,并可申请额外 6 至 12 个月的资助延期。

‍

2027 年冬季班申请现已截止。

Image
Naci Cankaya
MIRI

参加 MATS 项目极大地促进了我的职业发展,丰富了我的研究经验、人脉,也增强了我的信心。优秀的导师、充分的自主空间、才华出众且志向远大的社群,以及充足的资源支持,为边做边学、快速推进工作创造了理想条件。此外,我很难想象还有什么问题比 MATS 学员、导师以及整个 AI 安全社群正在努力解决的问题更重要。这个目标宏大得近乎疯狂,却意义非凡。这个领域的人们有着强烈的共同信念,也彼此扶持。欢迎加入我们!

Naci 的研究聚焦于 AI 开发与应用中的透明度和验证机制,旨在推动国际社会就如何审慎、克制地使用 AI 达成共识,并加强对 AI 技术及相关利益方的民主监督。Naci 拥有亚琛工业大学(RWTH Aachen)物理学硕士学位,曾在 SPAR 的 Aaron Scher 和 MATS 的 Mauricio Baker 指导下研究 AI 硬件技术与供应链。

Image
Jesse Hoogland
Timaeus

There's life pre-MATS and life post-MATS. It was the inflection point that set me up to become a technical AI safety researcher. I don't think there are other opportunities as good at getting early-career people integrated into AI safety. The in-person program was the most impactful and high-energy two months I've ever been a part of, and it's my number one recommendation to people considering work on AI safety.

Jesse Hoogland is the executive director of Timaeus, an AI safety research organization studying developmental interpretability and singular learning theory. He was a MATS scholar during MATS 3.0 and 3.1 in Evan Hubinger's Deceptive AI stream. During this period, he became interested in understanding how AI systems develop during training. This led to him helping to organize the SLT and Alignment conference and the DevInterp conference, which resulted in the developmental interpretability research agenda.

Image
Marius Hobbhahn
Apollo Research

Apollo almost certainly would not have happened without MATS. One of the core reasons why starting an organization is hard is because the founding members need to know and trust each other. It is often hard to find people with similar agendas that you also personally enjoy working with in a systematic manner. MATS implicitly created such an environment because it enabled many of us to understand what everyone else is working on, get to know them personally and see their research progress without having to commit to anything in particular.

Marius took part in MATS Winter 2022/23 Cohort under the mentorship of Evan Hubinger (Anthropic). He published multiple pieces on mechanistic interpretability on LessWrong including work on maximum data dimension and double descent. He is currently the CEO and Director of Apollo Research, a new London-based technical alignment organization. Previously, he did a Ph.D. in Machine Learning and conducted independent alignment research. Read more on his website.

Image
Robert Krzyzanowski
Poseidon Research

在参加 MATS 之前,我对人工智能对齐领域有着浓厚的兴趣,但缺乏前沿研究的相关技能,也不知从何入手。直接得益于 MATS,我实现了以下目标:(1) 对人工智能安全领域最核心的问题及其相关社区的结构有了相对完整的理解;(2) 产出了清晰且具有重要意义的研究成果,这让我有信心全职投身于该领域;(3) 结识了广泛的现任及未来合作者,他们带来了极其多元的视角。关于第三点,MATS 汇聚的人才令人惊叹,他们解决问题的动力极其强烈。如果未来人工智能对齐这一宏大工程最终取得成功,届时人们会发现,关键问题与解决方案中超过两位数百分比的贡献都归功于 MATS 的校友,对此我一点也不会感到惊讶。

我是一名独立人工智能安全研究员,目前专注于机械可解释性和训练过程透明度。

Image
Joseph Bloom
英国人工智能安全研究所

MATS 是快速提升技能并建立人工智能安全领域人脉的最佳途径,我强烈推荐。

Joseph Bloom 是 英国人工智能安全研究所(UK AI Security Institute)的模型透明度负责人,致力于研究失控风险、可监控性和可解释性之间的交叉领域。他的团队近期发表了关于 针对“藏拙”行为(Sandbagging)的游戏审计的研究。Joseph 曾是 MATS 5.0 计划中 Neel Nanda 的学员。他此前曾担任 TransformerLens 软件包的维护者,开发了 SAE Lens 软件包,并以 LASR 导师身份发表了 A is for Absorption 。Joseph 拥有墨尔本大学计算生物学与统计学双学位。

Image
Thomas Larsen
AI 未来项目

MATS 帮助我提升对齐领域技能的速度,比我原本通过自学基础贝叶斯主义(infra-bayesianism)快了三倍多。当时我只是因为喜欢数学而自学,对对齐领域中哪些部分至关重要并没有深刻的见解。MATS 让我对对齐问题有了更深层次的认识,此后我能够专注于解决问题的核心,并理清了自己认知中最主要的困惑。

Thomas 参加了 John Wentworth 指导的 2022 年夏季班和 Nate Soares 指导的 2023 年冬季班。在此期间,他撰写了一份关于 AI 安全研究方法的详细综述。随后,他在 MIRI 继续开展 SERI MATS 的研究工作,之后离职创办了 AI 安全倡导组织——人工智能政策中心(Center for AI Policy)。目前,他是 AI 未来项目(AI Futures Project)的研究员,同时担任 LTFF 的客座基金经理。

Image
Nina Panickssery
Anthropic

参加 MATS 是快速提升人工智能安全研究技能、深入了解该领域并结识其他研究人员与合作伙伴的绝佳途径。此外,项目组精心设计的办公环境也极大地提高了工作效率。

Nina 参加了 2023 年夏季的 MATS 项目,并接受了 Evan Hubinger 的指导。在 MATS 项目期间,她发表了论文《Steering Llama 2 via Contrastive Activation Addition》,该论文荣获 ACL 2024 杰出论文奖。MATS 项目结束后,Nina 加入 Anthropic 担任研究科学家,并指导了多个致力于大语言模型对齐项目的 SPAR 和 MATS 小组。

Image
Cody Rushing
Redwood Research

我强烈推荐 MATS!对于那些希望投身人工智能安全技术研究的人来说,MATS 是我的首选。我在 MATS 获得的指导和融入的社区氛围,不仅让我作为研究人员迅速成长,也为我探索有价值的研究方向提供了广阔空间。

Cody Rushing 是德克萨斯大学奥斯汀分校计算机科学专业的本科生。他目前正与 Buck Shlegeris 及 Redwood Research 合作开展人工智能控制方面的研究,并将于秋季继续这项工作。

https://starship006.github.io/

Image
Quentin Feuillade-Montixi
Seldon Labs#2

MATS was a life changing experience. I met and got mentored by amazing people, and I learned so much in such a small amount of time. Looking back at me before this program, I don't think I could even recognize myself 8 month ago. Even though I have no academic background, I felt listened, empowered and supported in order to tackle the biggest challenges that I (and possibly we) have ever faced.

After MATS, I worked as a contractor for METR evaluating GPT-4 pre-release. I then co-founded PRISM Eval and created an automated red-teaming system (BehaviorElicitiationTool: https://github.com/qfeuilla/BehaviorEliciationTool) that I presented at the Paris AI Summit. I am now founding WeaveMind (https://weavemind.ai/) at Seldon Lab Batch 2.

Image
Johannes Treutlein
Anthropic

MATS helped me get deeper into AI safety research by motivating me to get up to speed with current research and giving me access to mentorship from an expert in AI safety, as well as a smart and talented cohort and a large network of researchers. It also provided infrastructure such as office space in Berkeley and a generous stipend. SERI MATS worked as a matchmaker between Evan Hubinger and me and thus helped me get involved in his projects, which would have been harder to do otherwise. I feel like I have developed faster as a researcher since doing MATS.

Johannes completed the MATS Summer 2022 Cohort under the mentorship of Evan Hubinger (then a Research Fellow at MIRI). As a result of MATS, Johannes co-authored the paper Conditioning Predictive Models: Risks and Strategies with Evan as a lead author. He also published a follow-up paper on Incentivizing honest performative predictions with proper scoring rules at the UAI 2023 conference. After MATS, Johannes started a PhD in Computer Science at CHAI. Since 2024, he Johannes has been working at Anthropic on alignment stress-testing.

Image
Kay Kozaronek
AI Safety Connect (AISC)

Working in a team environment, particularly one as stimulating as MATS, was a transformative experience. It not only refined my research skills but also instilled a newfound entrepreneurial spirit in me. The program encouraged me to think beyond the conventional, to innovate, and to take risks. Additionally, the array of skills I acquired during my time at MATS was vast. I delved deep into research engineering, honed my science communication abilities, and even tapped into the art of fundraising. These skills, I believe, are indispensable and have equipped me to navigate the ever-evolving world of research with confidence. In conclusion, I wholeheartedly endorse the MATS program. To anyone considering embarking on this journey, you are not only signing up for an unparalleled research experience but also a lifetime of growth, learning, and camaraderie.

I'm working on AI Safety Connect, a new organization convening diplomatic and AI Safety stakeholders at the highest level - think UN, India Impact Summit etc. We are also seeding a few other projects, like engaging the UAE in AI Safety and helping prevent critical coordination failures among frontier labs.

Image
Jay Bailey
Arcadia Impact

MATS was an excellent environment to get productive work done and a fantastic resource to improve my future impact in AI alignment. I made connections, learned a great deal about my mentor's subfield and alignment in general, and was fired up to keep working when I got back to Australia. Since MATS I've been funded for a project with a collaborator I met at MATS, and gotten significantly further in the hiring process for orgs than before.

Previous UK AISI employee experienced in frontier LLM evaluation, now looking to contribute to technical AI safety and reducing extinction risks from misaligned AGI systems.

Image
Dan Valentine
Anthropic

Ethan spent a lot of time discussing our research with us and gave great advice on direction. He unblocked us in various ways, such as getting access to more models or to lots of compute budget. He connected us with lots of great people, some of whom became collaborators. And he was a very inspiring mentor to work with.

Dan Valentine is a Member of Technical Staff at Anthropic, an AI safety and research company. His work is primarily focused on AI safety and alignment research, including scalable oversight methods and understanding how AI models interact with data and prompts.

MATS 校友正在塑造 AI 的未来

自 2021 年底以来,已有 631 名研究人员参与了 MATS 项目,产出了 220 多篇研究论文,并加入顶尖 AI 实验室,或创立了推动 AI 对齐、透明度和安全性进步的新组织。

在过去 4.5 年中,我们协助产出了超过 220 篇 研究论文,累计获得超过 19,000 次引用,组织 h 指数达到 59。

MATS 学员参与了多项新研究方向的探索,包括面向 AI 可解释性的稀疏自编码器、激活与表征工程、涌现失调、提示免疫、发展性可解释性、计算力学、异常 token 分析、情境意识评估、梯度路由、外显推理监督、预测模型条件化、自然抽象的形式化等。

75% 的 校友目前从事 AI 对齐、透明度和安全领域的工作。‍

MATS 校友已被 Anthropic、Google DeepMind、OpenAI、Meta AI、UK AISI、Redwood Research、METR、RAND CAST、Coefficient Giving、ARC、FAR.AI、Apollo Research、Truthful AI、Goodfire、LawZero、MIRI、CAIF、Center on Long-Term Risk、Beneficial AI Foundation、SaferAI、Haize Labs、EleutherAI、Harmony Intelligence、Conjecture 等领先组织聘用,并加入了 UC Berkeley CHAI、NYU ARG、NU Bau Lab 和 Mila 等学术研究小组。

MATS 致力于为学员提供全方位支持,让他们把精力集中在真正重要的研究上

MATS 提供导师支持、研究经费、住宿和社群,让学员可以把精力放在解决全球最重要的问题上。

 
津贴

学员每周可获得 1,250 美元津贴,用于支付相关开支。

 
餐饮与住宿

学员在项目期间可享用午餐和晚餐。伯克利提供住宿,伦敦则提供住房补贴。

 
算力预算

学员每周可获得价值 2,000 美元的算力资源,用于实验和评估。

 
办公空间

学员可在伯克利和伦敦使用办公空间,并与其他学员日常协作。

 
教育活动

学员将参加由 AI 对齐领域专家主持的研讨会、工作坊和特邀讲座。

 
研究支持

专属研究经理将协助学员规划项目、跟进进度并排除障碍。

 
导师指导

学员将获得 AI 对齐、治理和安全领域顶尖研究者的指导。

 
延期路径

学员可以申请加入 MATS 延期项目,继续开展 6 至 12 个月的资助研究。近期申请延期的学员中,录取率超过 80%。

 
社区

学员可以结识同行,并融入更广泛的 AI 对齐社群。

MATS 学员开展的研究

MATS 学员的研究涵盖推进 AI 安全、增强系统韧性和加深对 AI 的理解等方向。他们运用机制可解释性、稀疏特征分析、潜在表征研究等方法,探索现代 AI 系统的内部运作。

精选研究

Towards Understanding Sycophancy in Language Models

Human feedback is commonly utilized to finetune AI assistants. But human feedback may also encourage model responses that match user beliefs over truthful ones, a behaviour known as sycophancy. We investigate the prevalence of sycophancy in models whose finetuning procedure made use of human feedback, and the potential role of human preference judgments in such behavior. We first demonstrate that five state-of-the-art AI assistants consistently exhibit sycophancy across four varied free-form text-generation tasks. To understand if human preferences drive this broadly observed behavior, we analyze existing human preference data. We find that when a response matches a user's views, it is more likely to be preferred. Moreover, both humans and preference models (PMs) prefer convincingly-written sycophantic responses over correct ones a non-negligible fraction of the time. Optimizing model outputs against PMs also sometimes sacrifices truthfulness in favor of sycophancy. Overall, our results indicate that sycophancy is a general behavior of state-of-the-art AI assistants, likely driven in part by human preference judgments favoring sycophantic responses.

作者:

Meg Tong

Mrinank Sharma, Meg Tong, Tomasz Korbak, David Duvenaud, Amanda Askell, Samuel R. Bowman, Newton Cheng, Esin Durmus, Zac Hatfield-Dodds, Scott R. Johnston, Shauna Kravec, Timothy Maxwell, Sam McCandlish, Kamal Ndousse, Oliver Rausch, Nicholas Schiefer, Da Yan, Miranda Zhang, Ethan Perez

日期:

Oct 20, 2023

从专有 LLM API 窃取推理轨迹

领先的大语言模型服务商如今会隐藏模型逐步推理的过程,也就是思维链,以保护知识产权并减少信息泄露。服务商不会把这些轨迹保存在服务器端,而是以加密文本块的形式返回给客户端;客户端在之后的每次请求中再将这些内容传回。基于以往研究,我们发现一个架构层面的漏洞:同一服务商生态内,不同会话、用户和模型之间的加密文本块完全兼容、可以互换。我们利用这一兼容性,设计出可大规模实施的解密越狱攻击。攻击者只需把某个模型的加密推理轨迹注入同一服务商旗下防护较弱的模型,就能迫使后者将轨迹原样解密为明文输出,无须直接越狱能力更强的模型。该漏洞带来四类攻击。第一,它能绕过反蒸馏机制,让攻击者提取专有模型的推理过程;我们在 Anthropic、OpenAI 和 Google 的模型上都进行了演示。第二,它能用于大规模提取私人数据。开发者经常公开分享会话日志,却不知道日志中的加密文本块包含什么。我们从公开代码库抓取的 315,320 个推理块中解码出 367 条个人身份信息(PII)和 182 个凭据。第三,即使模型最终可见的回复安全地拒绝了恶意请求,解密内容仍可能暴露推理过程中隐藏的危险信息。第四,攻击者可以把恶意载荷完全藏在加密文本块中,通过有毒数据污染公开的智能体运行记录,从而实施隐形提示注入。我们在负责任地披露问题后,提出了具体的密码学和系统层缓解方案,以保护客户端推理过程。

作者:

Alexander Panfilov, Joachim Schaeffer

Alexander Panfilov, David Schmotz, Ilia Shumailov, Luca Beurer-Kellner, Joachim Schaeffer, Ameya Prabhu, Jonas Geiping, Maksym Andriushchenko

日期:

Aug 10, 2026

MATS 学员的主要研究方向

点击相应方向以了解更多关于申请流程、申请人画像及重点领域的信息。

AI 安全需要快速扩大规模,而瓶颈正日益转向组织建设。本方向面向希望创办 AI 安全机构或项目的创业者、领域建设者和积极主动的通才,并由相关领域的创业者、现任 CEO 与项目负责人提供指导。

通过机器学习实验开展实践研究,以理解并提升模型安全性,涵盖 AI 控制、可解释性、可扩展监督、评估、红队测试和鲁棒性。

研究先进 AI 应该如何治理,涵盖治理机制、监管与制度分析,以及让治理措施得以执行的技术系统。

在先进 AI 重塑世界的背景下,研究灾难性生物风险。领域包括病原体检测、医疗对策、合成筛查、实体生物防御、威胁建模,以及通过红队测试识别生物 AI 的危险能力。

研究 AI 发展可能如何演变,以及这对长期安全意味着什么。涵盖发展时间线、能力跃迁动态、风险建模和 AI 发展轨迹的战略分析。

研究先进 AI 系统中能动性、对齐与安全推理所依赖的数学和哲学基础。

研究先进 AI 所依赖基础设施的软件与硬件安全,包括侧信道分析、集群安全、模型权重保护和物理层验证。

加入 MATS 团队

Image

MATS 希望缓解 AI 安全领域的人才短缺,并培养专业人才来应对我们认为当今世界最紧迫、也最缺乏专业力量的问题:降低未对齐 AI带来的风险。我们相信,不同背景的人才都能为 AI 对齐研究作出重要贡献。为此,我们提供所需的培训、后勤支持和社群环境,也为学员提供经济支持,帮助他们安心开展研究。
‍
MATS Research 是一家独立的 501(c)(3) 公益慈善机构(EIN: 99-0648563)。