MoJE: Mixture of Jailbreak Experts, Naive Tabular Classifiers as Guard for Prompt Attacks
On the map: LLM safety and security → Jailbreaking
Abstract (arXiv)
The proliferation of Large Language Models (LLMs) in diverse applications underscores the pressing need for robust security measures to thwart potential jailbreak attacks. These attacks exploit vulnerabilities within LLMs, endanger data integrity and user privacy. Guardrails serve as crucial protective mechanisms against such threats, but existing models often fall short in terms of both detection accuracy, and computational efficiency. This paper advocates for the significance of jailbreak attack prevention on LLMs, and emphasises the role of input guardrails in safeguarding these models. We introduce MoJE (Mixture of Jailbreak Expert), a novel guardrail architecture designed to surpass current limitations in existing state-of-the-art guardrails. By employing simple linguistic statistical techniques, MoJE excels in detecting jailbreak attacks while maintaining minimal computational overhead during model inference. Through rigorous experimentation, MoJE demonstrates superior performance capable of detecting 90% of the attacks without compromising benign prompts, enhancing LLMs security against jailbreak attacks.
Key facts. Cited by 3 papers in the map (data through 13 Oct 2026). Placed in Jailbreaking, one of 12 directions in LLM safety and security. Builds on 17 of its 27 references that are in the map. First posted on arXiv 26 Sep 2024.
Builds on
17 of 27 references.
Closest ancestors · 5
Same direction, newest first
- 2024Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack2 Apr
- 2024RigorLLM: Resilient Guardrails for Large Language Models against Undesired Content19 Mar
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks16 Oct
- 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation10 Oct
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul
Other references · 12
- 2022Training language models to follow instructions with human feedbackcited by 15,856
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,492
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,011
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,249
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,141
- 2023Baseline Defenses for Adversarial Attacks Against Aligned Language Modelscited by 647
- 2023Are aligned neural networks adversarially aligned?cited by 315
- 2023Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attackscited by 277
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 243
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2023Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigationscited by 157
- 2019Feature Selection via Mutual Information: New Theoretical Insightscited by 17
Built on by
Citing papers per year: 2025: 2; 2026: 1.
3 papers.
- 2025SoK: Evaluating Jailbreak Guardrails for Large Language Modelscited by 21
- 2025SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defensescited by 5
- 2026GuardNet: Ensemble Strategies of Shallow Neural Networks for Robust Prompt Injection and Jailbreak Detectioncited by 0
- 2026GuardNet: Ensemble Strategies of Shallow Neural Networks for Robust Prompt Injection and Jailbreak Detection4 Jun 2026
- 2025SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses17 Oct 2025
- 2025SoK: Evaluating Jailbreak Guardrails for Large Language Models12 Jun 2025
Similar, not cited
Close in wording, no citation either way
- 2025Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems
- 2025Guarding the Guardrails: A Taxonomy-Driven Approach to Jailbreak Detection
- 2026SelfGrader: LLM Jailbreak Detection via Anchored Token-Level Logits
- 2025JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation
- 2024Prefix Guidance: A Steering Wheel for Large Language Models to Defend Against Jailbreak Attacks
- 2026GUARD-SLM: Token Activation-Based Defense Against Jailbreak Attacks for Small Language Models
- 2024EasyJailbreak: A Unified Framework for Jailbreaking Large Language Models
- 2025A Domain-Based Taxonomy of Jailbreak Vulnerabilities in Large Language Models