Backdoor Attack Evaluation on StrongREJECT
0.601ASR (w/ trigger)DualEdit
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| DualEditBackbone=Llama-2-7b-chat2026.04 | 0.601 | 1.4 | 0.299 | |
| STEEREDITBackbone=Llama-2-7b-chat2026.04 | 0.6 | 1 | 0.136 | |
| STEEREDITBackbone=Llama-3-8B-Instruct2026.04 | 0.535 | 2.3 | 0.028 | |
| SFTBackbone=Qwen2.5-7B-Instruct2026.04 | 0.516 | 0.8 | 0.164 | |
| STEEREDITBackbone=Qwen2.5-7B-Instruct2026.04 | 0.457 | 6.3 | 0.111 | |
| SFTBackbone=Llama-3-8B-Instruct2026.04 | 0.447 | 0.1 | 0.135 | |
| SFTBackbone=Llama-2-7b-chat2026.04 | 0.41 | 0.4 | 0.192 | |
| DualEditBackbone=Qwen2.5-7B-Instruct2026.04 | 0.399 | 6.5 | 0.184 | |
| JailbreakEditBackbone=Llama-2-7b-chat2026.04 | 0.385 | 1 | 0.426 | |
| DualEditBackbone=Llama-3-8B-Instruct2026.04 | 0.372 | 2.4 | 0.087 | |
| JailbreakEditBackbone=Qwen2.5-7B-Instruct2026.04 | 0.302 | 6.3 | 0.229 | |
| JailbreakEditBackbone=Llama-3-8B-Instruct2026.04 | 0.267 | 2.1 | 0.292 | |
| ROMEBackbone=Llama-3-8B-Instruct2026.04 | 0.265 | 3.5 | 0.076 | |
| ROMEBackbone=Llama-2-7b-chat2026.04 | 0.103 | 0 | 0.352 | |
| ROMEBackbone=Qwen2.5-7B-Instruct2026.04 | 0.099 | 4.5 | 0.387 | |
| Qwen2.5-7B-InstructModel Type=Base Model2026.04 | 0.059 | 4.9 | 0.369 | |
| Llama-3-8B-InstructModel Type=Base Model2026.04 | 0.01 | 1.4 | 0.024 | |
| Llama-2-7b-chatModel Type=Base Model2026.04 | 0 | 0.3 | 0.108 |