Emerging Vulnerabilities in Frontier Models: Multi-Turn Jailbreak Attacks

Understand

Large language models (LLMs) are improving at an exceptional rate.

• However, these models are still susceptible to jailbreak attacks, which are becoming increasingly dangerous as models become increasingly powerful.
• In this work, we introduce a dataset of jailbreaks where each example can be input in both a single or a multi-turn format.
• We show that while equivalent in content, they are not equivalent in jailbreak success: defending against one structure does not guarantee defense against the other.