← Search

Dillon Bowen

3 accepted papers

2025

Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility

EMNLP 2025

AI systems are rapidly advancing in capability, and frontier model developers broadly acknowledge the need for safeguards against serious misuse. However, this paper demonstrates that fine-tuning, whether via open weights or closed fine-tuning APIs, can produce helpful-only models with safeguards de

2025

Scaling Trends for Data Poisoning in LLMs

AAAI 2025technical

LLMs produce harmful and undesirable behavior when trained on datasets containing even a small fraction of poisoned data. We demonstrate that GPT models remain vulnerable to fine-tuning on poisoned data, even when safeguarded by moderation systems. Given the persistence of data poisoning vulnerabili…

2024

A StrongREJECT for Empty Jailbreaks

NeurIPS 2024poster

Most jailbreak papers claim the jailbreaks they propose are highly effective, often boasting near-100% attack success rates. However, it is perhaps more common than not for jailbreak developers to substantially exaggerate the effectiveness of their jailbreaks. We suggest this problem arises because…