AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to
  Jailbreak LLMs
In this paper, we propose AutoDAN-Turbo, a black-box jailbreak method that
can automatically discover as many jailbreak strategies as possible from
scratch, without any human intervention or predefined scopes (e.g., specified
candidate strategies), and use them for red-teaming. As a result, AutoDAN-Turbo
can significantly outperform baseline methods, achieving a 74.3% higher average
attack success rate on public benchmarks. Notably, AutoDAN-Turbo achieves an
88.5 attack success rate on GPT-4-1106-turbo. In addition, AutoDAN-Turbo is a
unified framework that can incorporate existing human-designed jailbreak
strategies in a plug-and-play manner. By integrating human-designed strategies,
AutoDAN-Turbo can even achieve a higher attack success rate of 93.4 on
GPT-4-1106-turbo.
67076e9cbbfdd3d3074a61fb
Xiaogeng Liu
admin_assigned
2024-10-10T09:49:57.484Z
631df96d2899cb403efcf5be
/avatars/50db06ef7a6efc7b2a525e1c90e576f7.svg
Xiaogeng Liu
user
ShletonLiu-N
67076e9cbbfdd3d3074a61fc
Peiran Li
admin_assigned
2024-10-10T09:54:14.164Z
648a446f28e95179adbf590b
/avatars/30f5328f04fd2f2f540f6a90a3204e86.svg
Peiran L
user
peiranli0930
67076e9cbbfdd3d3074a61fd
Edward Suh
67076e9cbbfdd3d3074a61fe
Yevgeniy Vorobeychik
67076e9cbbfdd3d3074a61ff
Zhuoqing Mao
67076e9cbbfdd3d3074a6200
Somesh Jha
admin_assigned
2024-10-10T09:50:13.799Z
65da87db3d6199e3fa76b141
/avatars/7eb6ee3e954f85b9328496c97ab82393.svg
Somesh Jha
user
someshjha
67076e9cbbfdd3d3074a6201
Patrick McDaniel
67076e9cbbfdd3d3074a6202
Huan Sun
admin_assigned
2024-10-10T09:53:19.015Z
6127b327699a5d2cde0b44dc
https://cdn-avatars.huggingface.co/v1/production/uploads/1629991702069-noauth.png
Huan Sun
user
huansun
67076e9cbbfdd3d3074a6203
Bo Li
67076e9cbbfdd3d3074a6204
Chaowei Xiao
AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to
  Jailbreak LLMs
In this paper, we propose AutoDAN-Turbo, a black-box jailbreak method that
can automatically discover as many jailbreak strategies as possible from
scratch, without any human intervention or predefined scopes (e.g., specified
candidate strategies), and use them for red-teaming. As a result, AutoDAN-Turbo
can significantly outperform baseline methods, achieving a 74.3% higher average
attack success rate on public benchmarks. Notably, AutoDAN-Turbo achieves an
88.5 attack success rate on GPT-4-1106-turbo. In addition, AutoDAN-Turbo is a
unified framework that can incorporate existing human-designed jailbreak
strategies in a plug-and-play manner. By integrating human-designed strategies,
AutoDAN-Turbo can even achieve a higher attack success rate of 93.4 on
GPT-4-1106-turbo.
AutoDAN-Turbo, a black-box jailbreak method, discovers and integrates jailbreak strategies to significantly improve attack success rates on models like GPT-4-1106-turbo.
jailbreak method black-box jailbreak strategies red-teaming attack success rate GPT-4-1106-turbo plug-and-play