Thomas Winninger

New attack method uses LLM interpretability to bypass defenses

Researchers have developed a novel white-box adversarial attack method for large language models that leverages mechanistic interpretability. This technique identifies "acceptance subspaces" within a model and uses grad…