Article

We propose AutoDefense, a response-filtering based multi-agent defense framework that filters harmful responses from LLMs.

We propose an availability poisoning attack for generating transferable poisoned data across different victim learners.