AutoDAN

A new method called COPA reduces attack success rates by 6.3× versus the best static baseline and 4.4× on average across lifelong attack streams, while retaining 92% defense on month-old attacks compa…

A new evaluation protocol called Fair-ASR, introduced in a paper, equalizes target-call budgets across jailbreak attacks and finds that rankings of 11 representative attacks shift dramatically dependi…