NonTextual Target Attack

Xinzhe Huang, Wenjing Hu, Tianhang Zheng +6

Existing gradient-based jailbreak attacks on Large Language Models (LLMs) typically optimize adversarial suffixes to align the LLM output with predefined target responses. However,…