Papers by Dinghao Jing
DAMON: A Dialogue-Aware MCTS Framework for Jailbreaking Large Language Models (2025.emnlp-main)
Copied to clipboard
| Challenge: | Existing methods for multi-turn attacks mainly utilize a predefined dialogue pattern, limiting their effectiveness in realistic situations. |
| Approach: | They propose a multi-turn jailbreak attack method that leverages Monte Carlo Tree Search to explore multi-turned conversational spaces and identifies sub-instruction sequences that induce harmful responses. |
| Outcome: | The proposed method can induce undesired behaviors across five LLMs and three datasets. |