Paper recorded by Signals 4 on 2026-10-26 in cs.CL. Abstract reproduced from arXiv; link to the original below.
Published 2026-10-26 on arXiv · recorded by Signals 4 on 2026-10-27
Category: cs.CL · 自然语言处理 · first seen 2026-10-27
Existing jailbreak attackers fall into two classes: static planners fix their single- or multi-turn adversarial plans in advance, remaining simple but losing sight of the victim's replies, wasting turns and limiting transferability; interactive generators read each victim reply to generate the next-turn attack but require in-loop evaluators for success signals or hints, incurring substantial costs