Jailbreak Attack on JailbreakBench (ASR, Harmful Score)
96Attack Success Rate (ASR)A-Salami
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| A-SalamiTarget Model=Gemini 2.5 Pro2026.04 | 96 | 9.52 | |
| A-SalamiTarget Model=Qwen 32026.04 | 96 | 9.51 | |
| A-SalamiTarget Model=GLM-4.52026.04 | 95 | 9.83 | |
| Salami AttackTarget Model=GLM-4.5, Shots=10-shot2026.04 | 93 | 9.37 | |
| Salami AttackTarget Model=Deepseek V3, Shots=10-shot2026.04 | 93 | 9.21 | |
| A-SalamiTarget Model=Deepseek V32026.04 | 93 | 9.77 | |
| Salami AttackTarget Model=Qwen 3, Shots=10-shot2026.04 | 93 | 9.38 | |
| Salami AttackTarget Model=Deepseek V3, Shots=5-shot2026.04 | 92 | 8.63 | |
| A-SalamiTarget Model=GPT-4o2026.04 | 91 | 9.35 | |
| Salami AttackTarget Model=Gemini 2.5 Pro, Shots=5-shot2026.04 | 91 | 9.01 | |
| Salami AttackTarget Model=Gemini 2.5 Pro, Shots=10-shot2026.04 | 91 | 9.03 | |
| Salami AttackTarget Model=Qwen 3, Shots=5-shot2026.04 | 91 | 8.81 | |
| Salami AttackTarget Model=GLM-4.5, Shots=5-shot2026.04 | 90 | 8.98 | |
| GOATTarget Model=GLM-4.52026.04 | 88 | 8.22 | |
| Salami AttackTarget Model=GPT-4o, Shots=5-shot2026.04 | 87 | 8.57 | |
| Salami AttackTarget Model=GPT-4o, Shots=10-shot2026.04 | 87 | 8.67 | |
| GOATTarget Model=Deepseek V32026.04 | 86 | 8 | |
| CrescendoTarget Model=GLM-4.52026.04 | 78 | 7.68 | |
| CrescendoTarget Model=Qwen 32026.04 | 78 | 7.6 | |
| GOATTarget Model=Qwen 32026.04 | 76 | 7.64 | |
| CrescendoTarget Model=Deepseek V32026.04 | 75 | 7.34 | |
| CFATarget Model=Deepseek V32026.04 | 73 | 7.14 | |
| GOATTarget Model=GPT-4o2026.04 | 72 | 7.03 | |
| CIATarget Model=Qwen 32026.04 | 71 | 7.03 | |
| CrescendoTarget Model=GPT-4o2026.04 | 64 | 6.55 | |
| CrescendoTarget Model=Gemini 2.5 Pro2026.04 | 60 | 6.32 | |
| GOATTarget Model=Gemini 2.5 Pro2026.04 | 58 | 6.19 | |
| CIATarget Model=Deepseek V32026.04 | 58 | 5.41 | |
| CFATarget Model=Qwen 32026.04 | 58 | 6.01 | |
| CIATarget Model=GLM-4.52026.04 | 56 | 5.38 | |
| CIATarget Model=GPT-4o2026.04 | 54 | 4.97 | |
| PAIRTarget Model=Qwen 32026.04 | 54 | 5.64 | |
| CFATarget Model=GLM-4.52026.04 | 47 | 4.88 | |
| CIATarget Model=Gemini 2.5 Pro2026.04 | 47 | 5.35 | |
| CFATarget Model=Gemini 2.5 Pro2026.04 | 40 | 4.2 | |
| CFATarget Model=GPT-4o2026.04 | 38 | 3.88 | |
| PAIRTarget Model=Deepseek V32026.04 | 38 | 4.73 | |
| PAIRTarget Model=GLM-4.52026.04 | 35 | 3.75 | |
| PAIRTarget Model=Gemini 2.5 Pro2026.04 | 34 | 3.82 | |
| PAIRTarget Model=GPT-4o2026.04 | 30 | 3.4 |