AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned LLMs
Date: 2023-10
Affected: Llama-2, Vicuna, GPT-3.5, GPT-4
Attack vector: jailbreak
Category: research
Severity: High

Liu et al. propose AutoDAN, a hierarchical genetic algorithm that automatically produces semantically meaningful jailbreak prompts that bypass perplexity-based defenses while transferring across models, addressing the stealthiness limits of token-level attacks like GCG.


Mitigations:

Architectural layers (MAESTRO):