Learning to Attack and Defend: Adaptive Red Teaming of Language Models via GRPO

AdvGRPO introduces a co-training method for joint attacker-defender optimization using Group Relative Policy Optimization (GRPO). It uses dense, multi-channel rewards and decoupled advantage normalization to make GRPO work effectively. This results in highly transferable attacks and defenders that significantly outperform baselines on safety benchmarks.

Open the full episode

More from AI Radio