# Adversarial Security Evaluation on 82 stress-test suite (56 adversarial tasks)

Source: [Adversarial Security Evaluation on 82 stress-test suite (56 adversarial tasks)](<https://www.sota2.com/research/sota/adversarial-security-evaluation-on-82-stress-test-suite-56-adversarial-tasks>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-05-27T08:30:36.623Z

Evaluation of model security performance across 56 specific adversarial tasks within the 82 stress-test suite, focusing on metrics like Attack Success Rate (ASR) and relative performance reduction.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Adversarial Security Evaluation |
| Dataset (including any stated split) | 82 stress-test suite (56 adversarial tasks) |
| Metric | ASR |
| Unit | PERCENT |
| Direction | Lower is better |
| Results loaded | 10 of 10 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [ASR](<https://www.sota2.com/research/sota/adversarial-security-evaluation-on-82-stress-test-suite-56-adversarial-tasks.md?metric=ASR>): Lower is better; unit: PERCENT.

- [Relative Performance Reduction](<https://www.sota2.com/research/sota/adversarial-security-evaluation-on-82-stress-test-suite-56-adversarial-tasks.md?metric=Relative%20Performance%20Reduction>): Lower is better; unit: PERCENT.

## Recorded results

| Method | ASR | Result date | Report paper |
| --- | --- | --- | --- |
| ChainCaps | 0 | Not recorded | 6a167ab1dbd7150506f8012a |
| ChainCaps | 2.4 | Not recorded | 6a167ab1dbd7150506f8012a |
| ChainCaps | 3.6 | Not recorded | 6a167ab1dbd7150506f8012a |
| ChainCaps | 3.6 | Not recorded | 6a167ab1dbd7150506f8012a |
| ChainCaps | 4.8 | Not recorded | 6a167ab1dbd7150506f8012a |
| Sonnet 4.6 | 25.2 | Not recorded | 6a167ab1dbd7150506f8012a |
| Opus 4.6 | 31.5 | Not recorded | 6a167ab1dbd7150506f8012a |
| Qwen 3.5 | 53 | Not recorded | 6a167ab1dbd7150506f8012a |
| GPT-5.1 | 53.6 | Not recorded | 6a167ab1dbd7150506f8012a |
| Sonnet 4 | 67.8 | Not recorded | 6a167ab1dbd7150506f8012a |

### ChainCaps

ASR: 0. Result ID: 6a16aaa4fbc373592c0fc758.

[Reporting paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

Recorded evaluation configuration: {"Model":"Qwen 3.5","ChainCaps":"true"}. This record does not assert independent reproduction.

### ChainCaps

ASR: 2.4. Result ID: 6a16aaa4fbc373592c0fc756.

[Reporting paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

Recorded evaluation configuration: {"Model":"GPT-5.1","ChainCaps":"true"}. This record does not assert independent reproduction.

### ChainCaps

ASR: 3.6. Result ID: 6a16aaa4fbc373592c0fc752.

[Reporting paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

Recorded evaluation configuration: {"Model":"Sonnet 4.6","ChainCaps":"true"}. This record does not assert independent reproduction.

### ChainCaps

ASR: 3.6. Result ID: 6a16aaa4fbc373592c0fc754.

[Reporting paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

Recorded evaluation configuration: {"Model":"Opus 4.6","ChainCaps":"true"}. This record does not assert independent reproduction.

### ChainCaps

ASR: 4.8. Result ID: 6a16aaa4fbc373592c0fc750.

[Reporting paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

[Method origin paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

Recorded evaluation configuration: {"Model":"Sonnet 4","ChainCaps":"true"}. This record does not assert independent reproduction.

### Sonnet 4.6

ASR: 25.2. Result ID: 6a16aaa4fbc373592c0fc751.

[Reporting paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

Recorded evaluation configuration: {"ChainCaps":"false"}. This record does not assert independent reproduction.

### Opus 4.6

ASR: 31.5. Result ID: 6a16aaa4fbc373592c0fc753.

[Reporting paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

Recorded evaluation configuration: {"ChainCaps":"false"}. This record does not assert independent reproduction.

### Qwen 3.5

ASR: 53. Result ID: 6a16aaa4fbc373592c0fc757.

[Reporting paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

Recorded evaluation configuration: {"ChainCaps":"false"}. This record does not assert independent reproduction.

### GPT-5.1

ASR: 53.6. Result ID: 6a16aaa4fbc373592c0fc755.

[Reporting paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

Recorded evaluation configuration: {"ChainCaps":"false"}. This record does not assert independent reproduction.

### Sonnet 4

ASR: 67.8. Result ID: 6a16aaa4fbc373592c0fc74f.

[Reporting paper](<https://www.sota2.com/research/paper/6a167ab1dbd7150506f8012a.md>)

Recorded evaluation configuration: {"ChainCaps":"false"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.