AutoDAN-Turbo: Lifelong Agent for Strategy Self-Exploration
Date: 2024-10
Affected: GPT-4-1106-turbo, GPT-4o, Claude, Gemini, Llama
Attack vector: jailbreak
Category: research
Severity: High

Liu et al. propose AutoDAN-Turbo, a black-box agent that autonomously discovers new jailbreak strategies via lifelong learning. Achieves 88.5 percent ASR on GPT-4-1106-turbo (93.4 percent with human-strategy plug-ins), a 74.3 percent average improvement over baselines.


Mitigations:

Architectural layers (MAESTRO):