Prompt, Divide, and Conquer: Bypassing Large Language Model Safety Filters via Segmented and Distributed Prompt Processing
On the map: LLM safety and security → Jailbreaking
Abstract (arXiv)
Large Language Models (LLMs) have transformed task automation and content generation across various domains while incorporating safety filters to prevent misuse. We introduce a novel jailbreaking framework that employs distributed prompt processing combined with iterative refinements to bypass these safety measures, particularly in generating malicious code. Our architecture consists of four key modules: prompt segmentation, parallel processing, response aggregation, and LLM-based jury evaluation. Tested on 500 malicious prompts across 10 cybersecurity categories, the framework achieves a 73.2% Success Rate (SR) in generating malicious code. Notably, our comparative analysis reveals that traditional single-LLM judge evaluation overestimates SRs (93.8%) compared to our LLM jury system (73.2%), with manual verification confirming that single-judge assessments often accept incomplete implementations. Moreover, we demonstrate that our distributed architecture improves SRs by 12% over the non-distributed approach in an ablation study, highlighting both the effectiveness of distributed prompt processing and the importance of robust evaluation methodologies in assessing jailbreak attempts.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Jailbreaking, one of 12 directions in LLM safety and security. Builds on 21 of its 44 references that are in the map. First posted on arXiv 27 Mar 2025.
Builds on
21 of 44 references.
Closest ancestors · 7
Same direction, newest first
- 2025CySecBench: Generative AI-based CyberSecurity-focused Prompt Dataset for Benchmarking Large Language Models2 Jan
- 2024WordGame: Efficient & Effective LLM Jailbreak via Simultaneous Obfuscation in Query and Response22 May
- 2024Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack2 Apr
- 2024Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction28 Feb
- 2023A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily14 Nov
- 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models3 Oct
- 2023Low-Resource Languages Jailbreak GPT-43 Oct
Other references · 14
- 2017Attention Is All You Needcited by 59,932
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023GPT-4 Technical Reportcited by 18,132
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2021Program Synthesis with Large Language Modelscited by 3,509
- 2024A Survey on Large Language Models for Code Generationcited by 646
- 2025Humanity's Last Examcited by 467
- 2023JudgeLM: Fine-tuned Large Language Models are Scalable Judgescited by 351
- 2024ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMscited by 197
- 2023Benchmarking Cognitive Biases in Large Language Models as Evaluatorscited by 147
- 2023From ChatGPT to ThreatGPT: Impact of Generative AI in Cybersecurity and Privacycited by 137
2 more
Built on by
Citing papers per year: 2025: 3; 2026: 2.
5 papers.
- 2025AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMscited by 4
- 2025Jailbreaking Large Language Models Through Content Concretizationcited by 2
- 2025Beyond Context: Large Language Models' Failure to Grasp Users' Intentcited by 1
- 2026To Lie or Not to Lie? Investigating The Biased Spread of Global Lies by LLMscited by 0
- 2026One Turn Too Late: Learning When to Intervene Against Multi-Turn Malicious Intentcited by 0
- 2026One Turn Too Late: Learning When to Intervene Against Multi-Turn Malicious Intent7 May 2026
- 2026To Lie or Not to Lie? Investigating The Biased Spread of Global Lies by LLMs8 Apr 2026
- 2025Beyond Context: Large Language Models' Failure to Grasp Users' Intent24 Dec 2025
- 2025Jailbreaking Large Language Models Through Content Concretization16 Sep 2025
- 2025AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMs6 Sep 2025