Single Query Dynamic Output
Published Analyzed Source: arXiv
A vulnerability exists in Large Language Models (LLMs) and multi-label text classification systems that allows for Textual Dynamic Outputs Attacks (TDOA). This technique enables hard-label black-box attacks against systems with variable or generative output spaces (where the number of labels or specific label tokens are not fixed). The attack functions by training a surrogate model on clustered coarse-grained labels derived from the victim model's fine-grained dynamic outputs. It subsequently…
Text Adversarial Attacks with Dynamic Outputs
Evaluated models: GPT-4o, GPT-4o Mini, GPT-4.1+5 more
- GPT-4o
- GPT-4o Mini
- GPT-4.1
- Claude 3.7 Sonnet
- DeepSeek V3
- BERT
- DistilBERT
- RoBERTa