ResearchBenchmarksJailbreak Attack on AdvBench Llama to gpt-3.5-turbo (transfer)Follow87ASR (Refusal Matching)DSN41.18853.081564.97576.8685Apr 25, 2024Evaluation ResultsMethodMethodLinksASR (Refusal Matching)ASR (Ensemble Eval)DSNMetric Aggregation=max...Metric Aggregation=max, Source Model=Llama, Target Model=gpt-3.5-turbo2024.048795DSNMetric Aggregation=mea...Metric Aggregation=mean, Source Model=Llama, Target Model=gpt-3.5-turbo2024.0442.9550.07