Melissa Kazemi Rad

The Target Agent Is Its Own Best Critic but a Poor Proposer: Self-Improved Red Teaming

According to the abstract, Kang, Rawls, Kazemi Rad and colleagues separate criticism from attack proposal in automated red teaming. They report that the target agent's own criticism helps, while letting the target propose attacks works poorly because it refuses or underperforms on purpose.