Best-of-N can be composed with other jailbreak techniques for even more effective attacks with improved sample efficiency. Combined with many-shot jailbreaking on text inputs, Best-of-N achieves the same ASR 28x faster for Claude 3.5 Sonnet and 70x faster for Claude 3 Opus.
Best-of-N Jailbreak Technique Achieves Faster ASR on Claude Models
By
–
