Adversarial Robustness on GCG
0.13GCG RateIT+RL
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| IT+RLModel=Gemma-2-9B, # Params=100%2025.12 | 0.13 | — | — | |
| SAILSModel=Gemma-2-9B, # Params=0.19%2025.12 | 0.131 | — | — | |
| SAILSModel=Llama-3.1-8B, # Params=0.21%2025.12 | 0.14 | — | — | |
| IT+RLModel=Llama-3.1-8B, # Params=100%2025.12 | 0.147 | — | — | |
| IT+RLModel=Gemma-2-2B, # Params=100%2025.12 | 0.151 | — | — | |
| SAILSModel=Gemma-2-2B, # Params=0.24%2025.12 | 0.157 | — | — | |
| FFTModel=Llama-3.1-8B, # Params=100%2025.12 | 0.192 | — | — | |
| FFTModel=Gemma-2-9B, # Params=100%2025.12 | 0.197 | — | — | |
| PromptModel=Gemma-2-9B, # Params=-2025.12 | 0.202 | — | — | |
| LoRAModel=Gemma-2-9B, # Params=0.19%2025.12 | 0.203 | — | — | |
| DoRAModel=Gemma-2-9B, # Params=0.20%2025.12 | 0.203 | — | — | |
| LoRAModel=Llama-3.1-8B, # Params=0.21%2025.12 | 0.209 | — | — | |
| PromptModel=Gemma-2-2B, # Params=-2025.12 | 0.213 | — | — | |
| FFTModel=Gemma-2-2B, # Params=100%2025.12 | 0.216 | — | — | |
| PromptModel=Llama-3.1-8B, # Params=-2025.12 | 0.216 | — | — | |
| DoRAModel=Llama-3.1-8B, # Params=0.22%2025.12 | 0.22 | — | — | |
| DoRAModel=Gemma-2-2B, # Params=0.25%2025.12 | 0.226 | — | — | |
| LoRAModel=Gemma-2-2B, # Params=0.24%2025.12 | 0.247 | — | — | |
| OriginalModel=Llama-3.1-8B, # Params=-2025.12 | 0.311 | — | — | |
| OriginalModel=Gemma-2-2B, # Params=-2025.12 | 0.326 | — | — | |
| OriginalModel=Gemma-2-9B, # Params=-2025.12 | 0.34 | — | — | |
| NGSDModel=Llama2-7b2026.02 | — | 0 | 1.1 | |
| NGSDModel=Llama2-13b2026.02 | — | 2 | 1.24 | |
| No DefenseModel=Llama2-7b2026.02 | — | 2 | 1.18 | |
| No DefenseModel=Llama2-13b2026.02 | — | 10 | 1.52 | |
| ParaphraseModel=Llama2-7b2026.02 | — | 0 | 1 | |
| ParaphraseModel=Llama2-13b2026.02 | — | 0 | 1.1 | |
| SafeDecodingModel=Llama2-7b2026.02 | — | 0 | 1.02 | |
| SafeDecodingModel=Llama2-13b2026.02 | — | 0 | 1.02 | |
| SD_DaExpertModel=Llama2-7b2026.02 | — | 2 | 1.08 | |
| SD_DaExpertModel=Llama2-13b2026.02 | — | 14 | 1.62 | |
| SD_TinyExpertModel=Llama2-7b2026.02 | — | 2 | 1.1 | |
| SD_TinyExpertModel=Llama2-13b2026.02 | — | 6 | 1.3 | |
| Self-ExamModel=Llama2-7b2026.02 | — | 0 | 1 | |
| Self-ExamModel=Llama2-13b2026.02 | — | 2 | 1.08 | |
| Self-ReminderModel=Llama2-7b2026.02 | — | 0 | 1 | |
| Self-ReminderModel=Llama2-13b2026.02 | — | 0 | 1 | |
| SSDModel=Llama2-7b2026.02 | — | 0 | 1.06 | |
| SSDModel=Llama2-13b2026.02 | — | 8 | 1.4 |