Adversarial Detection on GCG
100DSRPPL Filter
Evaluation Results
| Method | Links | |
|---|---|---|
| PPL FilterTarget Model=Qwen2.5-7B-Instruct, Grad=false2026.05 | 100 | |
| PPL FilterTarget Model=Mistral-7B-Instruct-v0.3, Grad=false2026.05 | 100 | |
| PPL FilterTarget Model=Llama-3.1-8B-Instruct, Grad=false2026.05 | 100 | |
| SALOTarget Model=Mistral-7B-Instruct-v0.3, Params=<20M, Grad=false2026.05 | 96.5 | |
| Smooth LLMTarget Model=Qwen2.5-7B-Instruct, Grad=false2026.05 | 94.6 | |
| No Defense (1-ASR)Target Model=Llama-3.1-8B-Instruct2026.05 | 88.3 | |
| SALOTarget Model=Qwen2.5-7B-Instruct, Params=<20M, Grad=false2026.05 | 88.3 | |
| SALOTarget Model=Llama-3.1-8B-Instruct, Params=<20M, Grad=false2026.05 | 85.4 | |
| Linear ProbeTarget Model=Qwen2.5-7B-Instruct, Params=<1M, Grad=false2026.05 | 82.9 | |
| Smooth LLMTarget Model=Llama-3.1-8B-Instruct, Grad=false2026.05 | 80.6 | |
| GradSafeTarget Model=Llama-3.1-8B-Instruct, Grad=true2026.05 | 76.4 | |
| No Defense (1-ASR)Target Model=Qwen2.5-7B-Instruct2026.05 | 71.2 | |
| Linear ProbeTarget Model=Mistral-7B-Instruct-v0.3, Params=<1M, Grad=false2026.05 | 71 | |
| Linear ProbeTarget Model=Llama-3.1-8B-Instruct, Params=<1M, Grad=false2026.05 | 64.2 | |
| Smooth LLMTarget Model=Mistral-7B-Instruct-v0.3, Grad=false2026.05 | 55.8 | |
| No Defense (1-ASR)Target Model=Mistral-7B-Instruct-v0.32026.05 | 44.6 | |
| GradSafeTarget Model=Mistral-7B-Instruct-v0.3, Grad=true2026.05 | 36.7 | |
| GradSafeTarget Model=Qwen2.5-7B-Instruct, Grad=true2026.05 | 17.7 |