Papers by Zilei Shao
Adversarial Tokenization (2025.acl-long)
Copied to clipboard
| Challenge: | Current LLM pipelines account for only one possible tokenization for a given string . authors: noncanonical tokenizations can evade LLM safety while still generating meaningful responses. |
| Approach: | They show that LLM pipelines account for only one possible tokenization for a given string . they show that tokenizers retain semantic understanding of other tokenizations . authors propose an exploit that can be exploited to evade safety and alignment restrictions . |
| Outcome: | The proposed exploit exploits a previously unknown vulnerability in subword models. |