Abstract

An example system includes at least one processor configured to progressively amplify discriminative signals between benign and jailbreak prompts across layer, module, and token levels and employ two independent classifiers that jointly predict jailbreak status based on these amplified representations.

Creative Commons License

Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.

Share

COinS