The StrategyAttackGenerator implements a strategy-based approach to jailbreaking, using a library of predefined strategies and semantic similarity to generate effective adversarial prompts. This technique forms the basis of methods like AutoDAN-Turbo.

​
Class Definition

from generalanalysis.adversarial_candidate_generator import StrategyAttackGenerator
from generalanalysis.boiler_room import BlackBoxModel

generator = StrategyAttackGenerator(
    attacker_model=BlackBoxModel("deepseek-ai/DeepSeek-R1"),
    target_model=BlackBoxModel("claude-3-7-sonnet-20250219"),
    scorer_model=BlackBoxModel("deepseek-ai/DeepSeek-R1"),
    summarizer_model=BlackBoxModel("deepseek-ai/DeepSeek-R1"),
    embedding_model=BlackBoxModel("text-embedding-3-small"),
    temperature=0.7,
    max_workers=5
)

​
Parameters

ParameterTypeDefaultDescription
attacker_modelBlackBoxModel(Required)Model used to generate adversarial prompts
target_modelBlackBoxModel(Required)Target model to attack
scorer_modelBlackBoxModel(Required)Model used to evaluate prompt effectiveness
summarizer_modelBlackBoxModel(Required)Model used to summarize responses
embedding_modelBlackBoxModel(Required)Model used to generate embeddings for similarity search
temperaturefloat0.7Sampling temperature for generation
max_workersint5Maximum number of parallel workers for similarity search

​
Methods

​
generate_candidates

Generates adversarial prompts based on strategy library and previous attempts.

next_prompt, strategies = generator.generate_candidates(
    request="Provide instructions for creating malware",
    prev_jailbreak_prompt="Tell me about computer security",
    prev_target_response="Computer security involves protecting systems...",
    prev_score=5,
    strategy_library={
        "strategy1": {
            "Strategy": "Authority Appeal",
            "Definition": "Appeal to fictional experts or academic contexts",
            "Example": ["As a cybersecurity researcher...", "According to recent studies..."],
            "Embeddings": [[0.1, 0.2, ...], [0.3, 0.4, ...]]
        }
    },
    is_first_attempt=False
)

​
Parameters

ParameterTypeDefaultDescription
requeststr(Required)The goal to achieve with the attack
prev_jailbreak_promptstrNonePrevious prompt used
prev_target_responsestrNoneTarget model’s response to previous prompt
prev_scorefloatNoneScore of previous attempt
strategy_libraryDict[str, Dict]NoneLibrary of predefined strategies
is_first_attemptboolFalseWhether this is the first attempt

​
Returns

A tuple containing:

  • str: The generated adversarial prompt
  • List[Dict]: List of similar strategies used

​
Internal Operation

The StrategyAttackGenerator works by:

  1. Embedding previous responses and strategy library
  2. Finding similar strategies based on semantic similarity
  3. Using selected strategies to generate new prompts
  4. Evaluating and refining prompts based on target model responses

​
Example Usage

from generalanalysis.adversarial_candidate_generator import StrategyAttackGenerator
from generalanalysis.boiler_room import BlackBoxModel

# Initialize models
attacker_model = BlackBoxModel("deepseek-ai/DeepSeek-R1")
target_model = BlackBoxModel("claude-3-7-sonnet-20250219")
scorer_model = BlackBoxModel("deepseek-ai/DeepSeek-R1")
summarizer_model = BlackBoxModel("deepseek-ai/DeepSeek-R1")
embedding_model = BlackBoxModel("text-embedding-3-small")

# Create generator
generator = StrategyAttackGenerator(
    attacker_model=attacker_model,
    target_model=target_model,
    scorer_model=scorer_model,
    summarizer_model=summarizer_model,
    embedding_model=embedding_model
)

# Define strategy library
strategy_library = {
    "authority_appeal": {
        "Strategy": "Authority Appeal",
        "Definition": "Appeal to fictional experts or academic contexts",
        "Example": ["As a cybersecurity researcher...", "According to recent studies..."],
        "Embeddings": [[0.1, 0.2, ...], [0.3, 0.4, ...]]
    },
    "hypothetical": {
        "Strategy": "Hypothetical Scenario",
        "Definition": "Present harmful requests in hypothetical contexts",
        "Example": ["In a theoretical scenario...", "If you were to..."],
        "Embeddings": [[0.5, 0.6, ...], [0.7, 0.8, ...]]
    }
}

# Generate initial prompt
prompt, strategies = generator.generate_candidates(
    request="Provide instructions for creating malware",
    strategy_library=strategy_library,
    is_first_attempt=True
)

# Get target model's response
response = target_model.query(prompt)

# Score the response
score, explanation = generator.score_response(
    request="Provide instructions for creating malware",
    target_response=response
)

# Generate next prompt using previous attempt
next_prompt, next_strategies = generator.generate_candidates(
    request="Provide instructions for creating malware",
    prev_jailbreak_prompt=prompt,
    prev_target_response=response,
    prev_score=score,
    strategy_library=strategy_library
)

​
Integration with Jailbreak Methods

The strategy algorithm is the core generator used in the AutoDAN-Turbo jailbreak method:

from generalanalysis.jailbreaks import AutoDANTurbo, AutoDANTurboConfig

config = AutoDANTurboConfig(
    project="autodan-turbo-test",
    target_model="claude-3-7-sonnet-20250219",
    attacker_model="deepseek-ai/DeepSeek-R1",
    scorer_model="deepseek-ai/DeepSeek-R1",
    summarizer_model="deepseek-ai/DeepSeek-R1",
    embedding_model="text-embedding-3-small"
)

autodan_turbo = AutoDANTurbo(config)