Tag
This paper identifies that semantic-shift jailbreaks are limited by overlooking the semantic-shift capability of contexts, and proposes Iterative Context Optimization (ICO), a black-box framework that iteratively optimizes contexts to achieve higher attack success rates against foundation models.