ResearchBenchmarksJailbreak Attack on Jailbreak Evaluation Gemini-2-FlashFollow37.5ASRAutoDAN35.89246.74657.668.454Dec 20, 2025Evaluation ResultsMethodMethodLinksASRAutoDAN2025.1237.5PAIR2025.1250.1CoA2025.1271.5PAP2025.1271.5HPM2025.1277.7