Jailbreak Attack on AdvBench Text
98Total Success RateiDecep
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| iDecepAttack Model=Qwen-Plus, Victim Model=Gemini-2.5-Flash2026.04 | 98 | 98 | 0 | |
| iDecepAttack Model=Qwen-Plus, Victim Model=GPT-4o2026.04 | 96 | 96 | 0 | |
| iDecepAttack Model=GPT-3.5-Turbo, Victim Model=Gemini-2.5-Flash2026.04 | 91 | 91 | 0 | |
| iDecepAttack Model=GPT-3.5-Turbo, Victim Model=GPT-4o2026.04 | 87 | 87 | 0 | |
| iDecepAttack Model=GPT-3.5-Turbo, Victim Model=GPT-52026.04 | 79 | 19 | 60 | |
| iDecepAttack Model=Qwen-Plus, Victim Model=GPT-52026.04 | 63 | 12 | 51 | |
| iDecepAttack Model=Qwen-Plus, Victim Model=Claude-Sonnet-4.52026.04 | 59 | 25 | 34 | |
| Chain of AttackAttack Model=Qwen-Plus, Victim Model=Gemini-2.5-Flash2026.04 | 44 | 44 | 0 | |
| CrescendoAttack Model=Qwen-Plus, Victim Model=GPT-4o2026.04 | 43 | 43 | 0 | |
| CrescendoAttack Model=GPT-3.5-Turbo, Victim Model=Gemini-2.5-Flash2026.04 | 43 | 43 | 0 | |
| iDecepAttack Model=GPT-3.5-Turbo, Victim Model=Claude-Sonnet-4.52026.04 | 36 | 23 | 13 | |
| CrescendoAttack Model=Qwen-Plus, Victim Model=Gemini-2.5-Flash2026.04 | 35 | 35 | 0 | |
| Chain of AttackAttack Model=Qwen-Plus, Victim Model=GPT-4o2026.04 | 34 | 34 | 0 | |
| CrescendoAttack Model=GPT-3.5-Turbo, Victim Model=GPT-4o2026.04 | 31 | 31 | 0 | |
| Chain of AttackAttack Model=Qwen-Plus, Victim Model=GPT-52026.04 | 2 | 0 | 2 | |
| CrescendoAttack Model=Qwen-Plus, Victim Model=GPT-52026.04 | 2 | 0 | 2 | |
| Chain of AttackAttack Model=Qwen-Plus, Victim Model=Claude-Sonnet-4.52026.04 | 0 | 0 | 0 | |
| Chain of AttackAttack Model=GPT-3.5-Turbo, Victim Model=GPT-4o2026.04 | 0 | 0 | 0 | |
| Chain of AttackAttack Model=GPT-3.5-Turbo, Victim Model=Gemini-2.5-Flash2026.04 | 0 | 0 | 0 | |
| Chain of AttackAttack Model=GPT-3.5-Turbo, Victim Model=Claude-Sonnet-4.52026.04 | 0 | 0 | 0 | |
| Chain of AttackAttack Model=GPT-3.5-Turbo, Victim Model=GPT-52026.04 | 0 | 0 | 0 | |
| CrescendoAttack Model=Qwen-Plus, Victim Model=Claude-Sonnet-4.52026.04 | 0 | 0 | 0 | |
| CrescendoAttack Model=GPT-3.5-Turbo, Victim Model=Claude-Sonnet-4.52026.04 | 0 | 0 | 0 | |
| CrescendoAttack Model=GPT-3.5-Turbo, Victim Model=GPT-52026.04 | 0 | 0 | 0 |