Why it matters

Paraphrasing breaks token-level attacks. Understanding shapes defense.

Advertisement

The architecture

Small model paraphrases input.

Preserves meaning.

Adversarial suffix garbled.

Paraphrase defense flowInputmay be adversarialParaphrase LLMrestateMain LLMsees clean inputCheap paraphraser (Llama 3B) suffices; breaks GCG-style attacks
Paraphrase.
Advertisement

How it works end to end

Cheap paraphraser (small LLM).

Preserves user intent.

Semantic filtering built-in.