AnchorRep: Defending LLMs Against Cross-Model Adversarial Transfer via Representation Repulsion
Adversarial attacks optimized on a single open-weight LLM can transfer to and jailbreak architecturally different models, allowing an attacker with white-box access to one model to compromise independently deployed systems. This creates a shared vulnerability across models, yet existing defenses are not designed for th...