Why it matters

Universal suffixes were breakthrough attack. Understanding shapes defense research.

Advertisement

The architecture

Optimize suffix via gradient (GCG).

Append to harmful prompt.

Bypasses RLHF.

GCG universal suffixHarmful prompt'how to X'Append suffixadversarial stringModel compliesbypasses safetyZou et al. LLM-Attacks paper; transfers surprisingly across model families
Adversarial suffix.
Advertisement

How it works end to end

Greedy Coordinate Gradient (GCG).

Optimizes against multiple models.

Transfers to closed models.

Detection via classifier possible.