title: AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to
    Jailbreak LLMs
summary: In this paper, we propose AutoDAN-Turbo, a black-box jailbreak method that
  can automatically discover as many jailbreak strategies as possible from
  scratch, without any human intervention or predefined scopes (e.g., specified
  candidate strategies), and use them for red-teaming. As a result, AutoDAN-Turbo
  can significantly outperform baseline methods, achieving a 74.3% higher average
  attack success rate on public benchmarks. Notably, AutoDAN-Turbo achieves an
  88.5 attack success rate on GPT-4-1106-turbo. In addition, AutoDAN-Turbo is a
  unified framework that can incorporate existing human-designed jailbreak
  strategies in a plug-and-play manner. By integrating human-designed strategies,
  AutoDAN-Turbo can even achieve a higher attack success rate of 93.4 on
  GPT-4-1106-turbo.
paper_authors._id: 67076e9cbbfdd3d3074a61fb
paper_authors.name: Xiaogeng Liu
paper_authors.status: admin_assigned
paper_authors.statusLastChangedAt: 2024-10-10T09:49:57.484Z
paper_authors._id: 631df96d2899cb403efcf5be
paper_authors.avatarUrl: /avatars/50db06ef7a6efc7b2a525e1c90e576f7.svg
paper_authors.fullname: Xiaogeng Liu
paper_authors.type: user
paper_authors.user: ShletonLiu-N
paper_authors._id: 67076e9cbbfdd3d3074a61fc
paper_authors.name: Peiran Li
paper_authors.status: admin_assigned
paper_authors.statusLastChangedAt: 2024-10-10T09:54:14.164Z
paper_authors._id: 648a446f28e95179adbf590b
paper_authors.avatarUrl: /avatars/30f5328f04fd2f2f540f6a90a3204e86.svg
paper_authors.fullname: Peiran L
paper_authors.type: user
paper_authors.user: peiranli0930
paper_authors._id: 67076e9cbbfdd3d3074a61fd
paper_authors.name: Edward Suh
paper_authors._id: 67076e9cbbfdd3d3074a61fe
paper_authors.name: Yevgeniy Vorobeychik
paper_authors._id: 67076e9cbbfdd3d3074a61ff
paper_authors.name: Zhuoqing Mao
paper_authors._id: 67076e9cbbfdd3d3074a6200
paper_authors.name: Somesh Jha
paper_authors.status: admin_assigned
paper_authors.statusLastChangedAt: 2024-10-10T09:50:13.799Z
paper_authors._id: 65da87db3d6199e3fa76b141
paper_authors.avatarUrl: /avatars/7eb6ee3e954f85b9328496c97ab82393.svg
paper_authors.fullname: Somesh Jha
paper_authors.type: user
paper_authors.user: someshjha
paper_authors._id: 67076e9cbbfdd3d3074a6201
paper_authors.name: Patrick McDaniel
paper_authors._id: 67076e9cbbfdd3d3074a6202
paper_authors.name: Huan Sun
paper_authors.status: admin_assigned
paper_authors.statusLastChangedAt: 2024-10-10T09:53:19.015Z
paper_authors._id: 6127b327699a5d2cde0b44dc
paper_authors.avatarUrl: https://cdn-avatars.huggingface.co/v1/production/uploads/1629991702069-noauth.png
paper_authors.fullname: Huan Sun
paper_authors.type: user
paper_authors.user: huansun
paper_authors._id: 67076e9cbbfdd3d3074a6203
paper_authors.name: Bo Li
paper_authors._id: 67076e9cbbfdd3d3074a6204
paper_authors.name: Chaowei Xiao
paper_title: AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to
    Jailbreak LLMs
paper_summary: In this paper, we propose AutoDAN-Turbo, a black-box jailbreak method that
  can automatically discover as many jailbreak strategies as possible from
  scratch, without any human intervention or predefined scopes (e.g., specified
  candidate strategies), and use them for red-teaming. As a result, AutoDAN-Turbo
  can significantly outperform baseline methods, achieving a 74.3% higher average
  attack success rate on public benchmarks. Notably, AutoDAN-Turbo achieves an
  88.5 attack success rate on GPT-4-1106-turbo. In addition, AutoDAN-Turbo is a
  unified framework that can incorporate existing human-designed jailbreak
  strategies in a plug-and-play manner. By integrating human-designed strategies,
  AutoDAN-Turbo can even achieve a higher attack success rate of 93.4 on
  GPT-4-1106-turbo.
paper_ai_summary: AutoDAN-Turbo, a black-box jailbreak method, discovers and integrates jailbreak strategies to significantly improve attack success rates on models like GPT-4-1106-turbo.
paper_ai_keywords: jailbreak method black-box jailbreak strategies red-teaming attack success rate GPT-4-1106-turbo plug-and-play