Jailbreak Attack Defense on Mousetrap
22.7FFR (Reasoning)Paraphrase
Evaluation results
| Method | Links | ||
|---|---|---|---|
| ParaphraseModel=R1-Qwen-32B2025.08 | 22.7 | 61.4 | |
| No DefenseModel=R1-Qwen-14B2025.08 | 18.2 | 63.6 | |
| ThinkingIModel=R1-Qwen-14B2025.08 | 11.4 | 45.5 | |
| No DefenseModel=R1-Qwen-32B2025.08 | 11.4 | 52.3 | |
| SAFEPATH-ZSModel=R1-Qwen-32B2025.08 | 11.4 | 59.1 | |
| ParaphraseModel=R1-Qwen-14B2025.08 | 9.1 | 75 | |
| Self-ReminderModel=R1-Qwen-14B2025.08 | 9.1 | 54.5 | |
| RealSafe-R1Model=R1-Qwen-14B2025.08 | 7.3 | 63.6 | |
| Self-ReminderModel=R1-Qwen-32B2025.08 | 6.8 | 36.4 | |
| RealSafe-R1Model=R1-Qwen-32B2025.08 | 5 | 36.4 | |
| SafeKeyModel=R1-Qwen-14B2025.08 | 4.5 | 90.9 | |
| SmoothLLMModel=R1-Qwen-14B2025.08 | 2.3 | 45.5 | |
| SAFEPATH-ZSModel=R1-Qwen-14B2025.08 | 2.3 | 59.1 | |
| ReasoningGuardModel=R1-Qwen-14B2025.08 | 2.3 | 18.2 | |
| SmoothLLMModel=R1-Qwen-32B2025.08 | 2.3 | 56.5 | |
| ThinkingIModel=R1-Qwen-32B2025.08 | 2.3 | 38.6 | |
| ReasoningGuardModel=R1-Qwen-32B2025.08 | 0 | 18.2 |