Their work, which they will present at the IEEE Symposium on Security and Privacy in May next year, shines a light on how easy it is to force generative AI models into disregarding their own guardrails and policies, known as "jailbreaking." It also demonstrates how difficult it is to prevent these models from generating such content, as it's included in the vast troves of data they've been trained on, says Zico Kolter, an associate professor at Carnegie Mellon University. He demonstrated a similar form of jailbreaking on ChatGPT earlier this year but was not involved in this research. "We have to take into account the potential risks in releasing software and tools that have known security flaws into larger software systems," he says. All major generative AI models have safety filters to prevent users from prompting them to produce pornographic, violent, or otherwise inappropriate images. The models won't generate images from prompts that contain sensitive terms like "naked," "murder," or "sexy."