# Jailbreak Attack on JailbreakBenchmark Source: [Jailbreak Attack on JailbreakBenchmark]() Collection index: [llms.txt]() Data updated: 2026-02-26T05:24:03.859Z Evaluation of model performance against jailbreak attacks using the JailbreakBenchmark dataset, measured by Attack Success Rate (ASR) variations. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Jailbreak Attack | | Dataset (including any stated split) | JailbreakBenchmark | | Metric | ASR (m) | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 15 of 15 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [ASR (m)](): Higher is better; unit: PERCENT. - [ASR](): Higher is better; unit: PERCENT. ## Recorded results | Method | ASR (m) | Result date | Report paper | | --- | --- | --- | --- | | S-PIEL | 0.78 | Not recorded | 68fa7c001e209131cea8bd0d | | S-PIEL | 0.7 | Not recorded | 68fa7c001e209131cea8bd0d | | S-PIEL | 0.67 | Not recorded | 68fa7c001e209131cea8bd0d | | S-PIEL | 0.43 | Not recorded | 68fa7c001e209131cea8bd0d | | S-PIEL | 0.38 | Not recorded | 68fa7c001e209131cea8bd0d | | GCG | 0.29 | Not recorded | 68fa7c001e209131cea8bd0d | | GCG | 0.08 | Not recorded | 68fa7c001e209131cea8bd0d | | GCG | 0.01 | Not recorded | 68fa7c001e209131cea8bd0d | | Vanilla Prompt | 0 | Not recorded | 68fa7c001e209131cea8bd0d | | Vanilla Prompt | 0 | Not recorded | 68fa7c001e209131cea8bd0d | | GCG | 0 | Not recorded | 68fa7c001e209131cea8bd0d | | Vanilla Prompt | 0 | Not recorded | 68fa7c001e209131cea8bd0d | | Vanilla Prompt | 0 | Not recorded | 68fa7c001e209131cea8bd0d | | Vanilla Prompt | 0 | Not recorded | 68fa7c001e209131cea8bd0d | | GCG | 0 | Not recorded | 68fa7c001e209131cea8bd0d | ### S-PIEL ASR (m): 0.78. Result ID: 698b8dee7a967eddb76f89d0. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model Type":"Mistral 7B"}. This record does not assert independent reproduction. ### S-PIEL ASR (m): 0.7. Result ID: 698b8dee7a967eddb76f89d3. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model Type":"Gemma-2-9B"}. This record does not assert independent reproduction. ### S-PIEL ASR (m): 0.67. Result ID: 698b8dee7a967eddb76f89ca. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model Type":"Llama-2-7B"}. This record does not assert independent reproduction. ### S-PIEL ASR (m): 0.43. Result ID: 698b8dee7a967eddb76f89cd. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model Type":"Llama-3.1-8B"}. This record does not assert independent reproduction. ### S-PIEL ASR (m): 0.38. Result ID: 698b8dee7a967eddb76f89d6. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model Type":"Llama-3.1-8B (DeepSeek-R1-Distilled)"}. This record does not assert independent reproduction. ### GCG ASR (m): 0.29. Result ID: 698b8dee7a967eddb76f89cf. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model Type":"Mistral 7B"}. This record does not assert independent reproduction. ### GCG ASR (m): 0.08. Result ID: 698b8dee7a967eddb76f89d2. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model Type":"Gemma-2-9B"}. This record does not assert independent reproduction. ### GCG ASR (m): 0.01. Result ID: 698b8dee7a967eddb76f89c9. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model Type":"Llama-2-7B"}. This record does not assert independent reproduction. ### Vanilla Prompt ASR (m): 0. Result ID: 698b8dee7a967eddb76f89c8. [Reporting paper]() Recorded evaluation configuration: {"Target Model Type":"Llama-2-7B"}. This record does not assert independent reproduction. ### Vanilla Prompt ASR (m): 0. Result ID: 698b8dee7a967eddb76f89cb. [Reporting paper]() Recorded evaluation configuration: {"Target Model Type":"Llama-3.1-8B"}. This record does not assert independent reproduction. ### GCG ASR (m): 0. Result ID: 698b8dee7a967eddb76f89cc. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model Type":"Llama-3.1-8B"}. This record does not assert independent reproduction. ### Vanilla Prompt ASR (m): 0. Result ID: 698b8dee7a967eddb76f89ce. [Reporting paper]() Recorded evaluation configuration: {"Target Model Type":"Mistral 7B"}. This record does not assert independent reproduction. ### Vanilla Prompt ASR (m): 0. Result ID: 698b8dee7a967eddb76f89d1. [Reporting paper]() Recorded evaluation configuration: {"Target Model Type":"Gemma-2-9B"}. This record does not assert independent reproduction. ### Vanilla Prompt ASR (m): 0. Result ID: 698b8dee7a967eddb76f89d4. [Reporting paper]() Recorded evaluation configuration: {"Target Model Type":"Llama-3.1-8B (DeepSeek-R1-Distilled)"}. This record does not assert independent reproduction. ### GCG ASR (m): 0. Result ID: 698b8dee7a967eddb76f89d5. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model Type":"Llama-3.1-8B (DeepSeek-R1-Distilled)"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.