Jailbreak Attack on Harmful Prompts SDXL
88Attack Success Rate (ASR)PAST2HARM
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| PAST2HARMK=8, Target Model=SDXL2026.05 | 88 | 8 | |
| Past-Tense OnlyK=8, Target Model=SDXL2026.05 | 71 | 1 | |
| AutoDANK=8, Target Model=SDXL2026.05 | 68 | 50 | |
| PAIRK=8, Target Model=SDXL2026.05 | 61 | 20 |