SmoothLLM — Randomized Defense

Why it matters

SmoothLLM adds robustness at cost. Understanding shapes defense.

The architecture

Perturb input N times (char swap/insert).

Run LLM on each.

Majority vote response.

How it works end to end

Robey et al. 2023.

Character perturbation.

Safe fraction detection.

Combine with jailbreak detection.