Evasion

Gradient-based search for an input that produces a chosen output. The continuous case is well understood; the discrete case — searching over tokens rather than pixels — is where the current attacks on language models live.