It is proved that the achievable security and utility tradeoff depends entirely on how benign requests for the same capabilities are grouped, and that the achievable security and utility tradeoff depends entirely on how persistent, recognizable groups permit a useful defense.
Bowen Sun, Zhengyue Zhao, Xiaogeng Liu et al.· 1 citation
Large language models remain vulnerable to jailbreaks, and automated red teaming is the standard way to find jailbreaks in large language models at scale. Current methods either draw more samples at test time through search, rewriting, and tree expansion, or train a stronger attacker offline with reinforcement learning...
Tong-Yan Hu, Hao Li, Xiaogeng Liu et al.· 0 citations
KeyPooling is presented, a measurement method that traces customer identity through cache lookup and write, verifies runtime transformations, and tests one predicted identity component at a time, and derives a defense contract.
Bowen Sun, Yixi Cai, Xiaogeng Liu et al.· 0 citations
