An Adversarial Toxicity Prompt Generator Exploiting Multilingual Code-Switching in LLMs

The widespread adoption of Large Language Models (LLMs) has heightened concerns about their potential to generate toxic, biased, or harmful content. These risks are magnified in multilingual contexts involving code-switching, culturally nuanced slang, and adversarial prompt engineering, which often evade conventional moderation. Existing detection models struggle due to static datasets and limited adaptability to evolving linguistic patterns. To address these challenges, we propose two innovations: a Dynamic Multilingual Toxicity Dataset that extends PolygloToxicityPrompts using subject-predicate permutations and translation averaging; and a novel Adversarial Prompt Generation Framework based on Reinforcement Learning with Adversarial Feedback (RLAF), designed to elicit toxic responses from target LLMs via reward-driven refinement. Enhanced with BLOOM fine-tuning, Model-Agnostic Meta-Learning (MAML), and dynamic few-shot learning, our framework offers robust stress-testing under multilingual, adversarial conditions [15], [16], [20].

Authors

Institutions

Publication Details

Published
2025-05-05
DOI
https://doi.org/10.1109/cai64502.2025.00156
Primary Topic
Cryptography and Data Security
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

An Adversarial Toxicity Prompt Generator Exploiting Multilingual Code-Switching in LLMs

Nalini Ratha, Vinit Sudhir Wadgaonkar
Cryptography and Data Security
article

An Adversarial Toxicity Prompt Generator Exploiting Multilingual Code-Switching in LLMs

Nalini Ratha, Vinit Sudhir Wadgaonkar
article en

Abstract

The widespread adoption of Large Language Models (LLMs) has heightened concerns about their potential to generate toxic, biased, or harmful content. These risks are magnified in multilingual contexts involving code-switching, culturally nuanced slang, and adversarial prompt engineering, which often evade conventional moderation. Existing detection models struggle due to static datasets and limited adaptability to evolving linguistic patterns. To address these challenges, we propose two innovations: a Dynamic Multilingual Toxicity Dataset that extends PolygloToxicityPrompts using subject-predicate permutations and translation averaging; and a novel Adversarial Prompt Generation Framework based on Reinforcement Learning with Adversarial Feedback (RLAF), designed to elicit toxic responses from target LLMs via reward-driven refinement. Enhanced with BLOOM fine-tuning, Model-Agnostic Meta-Learning (MAML), and dynamic few-shot learning, our framework offers robust stress-testing under multilingual, adversarial conditions [15], [16], [20].

University at Buffalo, State University of New York (US)
Openalex Percentile: Top 92%
Cryptography and Data Security
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.