Efficient Adversarial Training in LLMs with Continuous Attacks

The authors use Greedy Coordinate Gradient (GCG) to generate discrete adversarial suffixes in natural language.