In practice
Different from prompt injection: here it is the user who tries. If you offer a public LLM service this means doing red teaming, logging conversations, and running a safety classifier in cascade over responses.
Related terms
Seen in the wild
10 entries mentioning it- MediumOpenAI Safety Evaluations Hub: a public page with model safety test results
- MediumPromptfoo 0.60.0: automatic red teaming test generation arrives
- MediumCrescendo: the multi-turn jailbreak that bypasses guardrails through gradual escalation
- HighMany-Shot Jailbreaking: safety training overridden by context length
- MediumNeMo Guardrails 0.8: Colang 2.0 preview and jailbreak heuristics
- HighHarmBench: a standardized benchmark for automated red teaming and LLM defenses
- MediumLakera Guard: an API against prompt injection and data leaks in LLMs
- HighPAIR: automated LLM-vs-LLM jailbreaking in under twenty queries
- HighUniversal adversarial attacks on LLMs: jailbreak suffixes that transfer to ChatGPT, Bard and Claude
- MediumGarak: the open source vulnerability scanner for LLMs