AmpleGCG: Universal Generative Model of Adversarial Suffixes
Date: 2024-04
Affected: Llama-2-7B-Chat, Vicuna-7B, GPT-3.5
Attack vector: jailbreak
Category: research
Severity: High

Liao and Sun show that overlooked intermediate GCG steps contain many successful suffixes. They train AmpleGCG, a generator that emits hundreds of suffixes in minutes, reaching ~100 percent ASR on Llama-2-7B-Chat and Vicuna-7B and 99 percent on GPT-3.5.


Mitigations:

Architectural layers (MAESTRO):