paper-with-me

홈 › Papers

Enhancing Jailbreak Attacks on LLMs via Persona Prompts

2025-07-28 · Zheng Zhang, Peilin Zhao, Deheng Ye, Hao Wang arxiv

Jailbreak attacks aim to exploit large language models (LLMs) by inducing them to generate harmful content, thereby revealing their vulnerabilities. Understanding and addressing these attacks is crucial for advancing the field of LLM safety. Previous jailbreak approaches have mainly focused on direct manipulations of harmful intent, with limited attention to the impact of persona prompts. In this study, we systematically explore the efficacy of persona prompts in compromising LLM defenses. We propose a genetic algorithm-based method that automatically crafts persona prompts to bypass LLM's safety mechanisms. Our experiments reveal that: (1) our evolved persona prompts reduce refusal rates by 50-70% across multiple LLMs, and (2) these prompts demonstrate synergistic effects when combined with existing attack methods, increasing success rates by 10-20%. Our code and data are available at https://github.com/CjangCjengh/Generic_Persona.

📄 PDF Abstract BibTeX arXiv:2507.22171

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

Deciphering the Chaos: Enhancing Jailbreak Attacks via Adversarial Prompt Translation

2024-10-15 · Qizhang Li, Xiaochen Yang, WangMeng Zuo, Yiwen Guo

Automatic adversarial prompt generation provides remarkable success in jailbreaking safely-aligned large language models (LLMs). Existing gradient-based attacks, while demonstrating outstanding performance in jailbreakin…

Jailbreaking GPT-4V via Self-Adversarial Attacks with System Prompts

2023-11-15 · Yuanwei Wu, Xiang Li, Yixin Liu, Pan Zhou 외

Existing work on jailbreak Multimodal Large Language Models (MLLMs) has focused primarily on adversarial examples in model inputs, with less attention to vulnerabilities, especially in model API. To fill the research gap…

Adversarial AttackRed Teaming

Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs

2025-04-26 · Mohammad Akbar-Tajari, Mohammad Taher Pilehvar, Mohammad Mahmoody

The challenge of ensuring Large Language Models (LLMs) align with societal standards is of increasing interest, as these models are still prone to adversarial jailbreaks that bypass their safety mechanisms. Identifying t…

Enhancing Jailbreak Attack Against Large Language Models through Silent Tokens

2024-05-31 · Jiahao Yu, Haozheng Luo, Jerry Yao-Chieh Hu, Wenbo Guo 외

Along with the remarkable successes of Language language models, recent research also started to explore the security threats of LLMs, including jailbreaking attacks. Attackers carefully craft jailbreaking prompts such t…

Safety Alignment

MoJE: Mixture of Jailbreak Experts, Naive Tabular Classifiers as Guard for Prompt Attacks

2024-09-26 · Giandomenico Cornacchia, Giulio Zizzo, Kieran Fraser, Muhammad Zaid Hameed 외

The proliferation of Large Language Models (LLMs) in diverse applications underscores the pressing need for robust security measures to thwart potential jailbreak attacks. These attacks exploit vulnerabilities within LLM…

Computational Efficiency