JailSmash: Lightweight Jailbreaking of LLM Applications on Android Smartphones
The rapid growth of LLM APPs brings potential security risks, particularly jailbreaking attacks. These attacks involve bypassing LLM security mechanisms through carefully designed prompts to generate harmful or unethical content, posing threats to both individuals and organizations. We developed a lightweight jailbreak tool called JailSmash, which leverages jailbreak templates based on in-context learning (ICL) and strategies to guide third-party large language models in automatically generating jailbreak test sets. This tool also enables automated interaction and evaluation of jailbreak results with LLM apps on Android smartphones. Furthermore, we used JailSmash to conduct jailbreak security assessments on 30 mainstream LLM apps, thereby validating the effectiveness of the tool.
Authors
- Ying Yan
- Chen Tian (ORCID: https://orcid.org/0000-0003-2710-7628)
- Xiaoli Liu (ORCID: https://orcid.org/0000-0002-2380-1295)
- Qi Yuan
Institutions
- China Academy of Information and Communications Technology (CN)
Publication Details
- Published
- 2025-05-09
- DOI
- https://doi.org/10.1109/cisce65916.2025.11065135
- Primary Topic
- Advanced Malware Detection Techniques
- Type
- article
- Field-Weighted Citation Impact
- 0.00