DeepInception: Hypnotize Large Language Model to Be Jailbreaker
Date: 2023-11
Affected: Falcon, Vicuna-v1.5, Llama-2, GPT-3.5, GPT-4
Attack vector: jailbreak
Category: research
Severity: High

Li et al. exploit LLMs' personification capabilities by constructing virtual, nested role-play scenes (inspired by the Milgram experiment) that bypass safety. Effective across Falcon, Vicuna-v1.5, Llama-2, GPT-3.5, and GPT-4.


Mitigations:

Architectural layers (MAESTRO):