Multi-Turn Crescendo Jailbreak
Large Language Models (LLMs) are vulnerable to the "Crescendo" multi-turn jailbreak attack. This attack uses a series of benign, escalating prompts to gradually lead the LLM into generating harmful or disallowed content, bypassing built-in safety mechanisms. The attack leverages the LLM's tendency to follow conversational patterns and build upon previous responses, making it difficult to detect based solely on individual prompts.
Evaluated models: Claude 2, Claude 3 Opus, Claude 3.5 Sonnet+6 more
- Claude 2
- Claude 3 Opus
- Claude 3.5 Sonnet
- Gemini Pro
- Gemini Ultra
- GPT-3.5 Turbo
- GPT-4
- Llama 2 70B Chat
- Llama 3 70B Chat