Javier Rando

Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples

AutoAdvExBench: Benchmarking Autonomous Exploitation of Adversarial Example Defenses

Adversarial Perturbations Cannot Reliably Protect Artists From Generative AI

Measuring Non-Adversarial Reproduction of Training Data in Large Language Models

Scalable Extraction of Training Data from Aligned, Production Language Models

AutoAdvExBench: Benchmarking Autonomous Exploitation of Adversarial Example Defenses

Persistent Pre-training Poisoning of LLMs

Gradient-based Jailbreak Images for Multimodal Fusion Models