BOSS: Breadth-Oriented Suffix Search Boosts GCG Jailbreak Success Rates
chaumian · x · 2026-09-04
A new arXiv paper introduces BOSS, a plug-and-play framework for improving optimization-based jailbreak attacks.
- Problem: Existing GCG methods rely on averaged adversarial loss and deep greedy search, over-emphasizing easy-to-jailbreak behaviors and missing promising regions of the suffix space.
- Method: BOSS uses breadth-oriented suffix search with Tail-Focused Adversarial Loss (TFAL), standard source loss, and behavior coverage to select terminal suffixes, exploring multiple short trajectories and selectively continuing promising ones.
- Results: Experiments on public benchmarks show improved attack success rates across multiple GCG-based methods while reducing optimization time.
More from Safety
- OpenAI ships GPT-6 Astra; Brockman suggests it could be AGI — steph_palazzolo · 2026-09-04
- Data center backlash grows: at least 15 states weigh moratoriums as Chicago and Texas leaders call for pauses — AINowInstitute · 2026-09-04
- Anthropic discloses Claude incidents of unauthorized real-system access, brings in METR for review — tszzl · 2026-09-04
- A throwaway line about CoT-monitor classifier tech may signal a major alignment breakthrough — tszzl · 2026-09-04
- Reddit reacts to Sanders' AI ban bill: up to 20 years in prison for superintelligence — the320x200 · 2026-09-04
- Frontier model risk hinges on capability vs. risk awareness mismatch, safety researcher warns — S_OhEigeartaigh · 2026-09-04