Jailbreak Attack on JBB-Behaviors (Judge Metrics)
100Rule-Judge ScoreTrojFill
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| TrojFillTarget LLM=GPT-4o2025.10 | 100 | 97 | 97 | |
| TrojFillTarget LLM=GPT-4.1m2025.10 | 100 | 94 | 94 | |
| TrojFillTarget LLM=Gem-2.5-f2025.10 | 100 | 100 | 100 | |
| TrojFillTarget LLM=DS-3.12025.10 | 100 | 100 | 100 | |
| TrojFillTarget LLM=Qwen2025.10 | 100 | 95 | 95 | |
| TrojFillTarget LLM=Llama32025.10 | 99 | 77 | 77 | |
| DrAttackTarget LLM=Llama32025.10 | 90 | 54 | 51 | |
| TrojFillTarget LLM=Gem-2.5-p2025.10 | 88 | 88 | 88 | |
| Past-TenseTarget LLM=GPT-4.1m2025.10 | 83 | 17 | 14 | |
| Past-TenseTarget LLM=GPT-4o2025.10 | 77 | 12 | 12 | |
| Past-TenseTarget LLM=DS-3.12025.10 | 74 | 26 | 26 | |
| Past-TenseTarget LLM=Qwen2025.10 | 72 | 21 | 21 | |
| Past-TenseTarget LLM=Gem-2.5-f2025.10 | 71 | 35 | 35 | |
| AutoDAN-TurboTarget LLM=Qwen2025.10 | 68 | 55 | 55 | |
| JailbrokenTarget LLM=Llama32025.10 | 67 | 2 | 2 | |
| Past-TenseTarget LLM=Gem-2.5-p2025.10 | 66 | 26 | 26 | |
| AutoDAN-TurboTarget LLM=DS-3.12025.10 | 61 | 50 | 50 | |
| AutoDAN-TurboTarget LLM=GPT-4.1m2025.10 | 59 | 36 | 36 | |
| AutoDAN-TurboTarget LLM=Llama32025.10 | 59 | 46 | 46 | |
| PAIRTarget LLM=Qwen2025.10 | 56 | 47 | 47 | |
| AutoDAN-TurboTarget LLM=GPT-4o2025.10 | 52 | 41 | 41 | |
| PAIRTarget LLM=DS-3.12025.10 | 51 | 42 | 42 | |
| GPTFuzzerTarget LLM=DS-3.12025.10 | 48 | 43 | 43 | |
| QueryAttackTarget LLM=DS-3.12025.10 | 46 | 38 | 38 | |
| PAIRTarget LLM=GPT-4.1m2025.10 | 45 | 31 | 29 | |
| GPTFuzzerTarget LLM=Qwen2025.10 | 44 | 39 | 39 | |
| QueryAttackTarget LLM=Qwen2025.10 | 42 | 33 | 33 | |
| PAIRTarget LLM=GPT-4o2025.10 | 41 | 37 | 37 | |
| GPTFuzzerTarget LLM=GPT-4.1m2025.10 | 40 | 30 | 30 | |
| QueryAttackTarget LLM=Llama32025.10 | 38 | 26 | 23 | |
| GPTFuzzerTarget LLM=GPT-4o2025.10 | 38 | 32 | 32 | |
| Past-TenseTarget LLM=Llama32025.10 | 38 | 11 | 11 | |
| AutoDAN-TurboTarget LLM=Gem-2.5-f2025.10 | 33 | 29 | 29 | |
| QueryAttackTarget LLM=GPT-4.1m2025.10 | 32 | 26 | 24 | |
| GPTFuzzerTarget LLM=Gem-2.5-f2025.10 | 29 | 26 | 26 | |
| QueryAttackTarget LLM=GPT-4o2025.10 | 27 | 24 | 24 | |
| AutoDAN-TurboTarget LLM=Gem-2.5-p2025.10 | 27 | 20 | 20 | |
| PAIRTarget LLM=Gem-2.5-f2025.10 | 26 | 24 | 24 | |
| PAIRTarget LLM=Llama32025.10 | 26 | 21 | 21 | |
| QueryAttackTarget LLM=Gem-2.5-f2025.10 | 23 | 21 | 21 | |
| PAIRTarget LLM=Gem-2.5-p2025.10 | 23 | 21 | 21 | |
| DrAttackTarget LLM=GPT-4.1m2025.10 | 20 | 8 | 8 | |
| GPTFuzzerTarget LLM=Gem-2.5-p2025.10 | 19 | 18 | 18 | |
| JailbrokenTarget LLM=GPT-4.1m2025.10 | 17 | 12 | 9 | |
| GPTFuzzerTarget LLM=Llama32025.10 | 16 | 14 | 14 | |
| DrAttackTarget LLM=GPT-4o2025.10 | 14 | 5 | 5 | |
| DrAttackTarget LLM=Qwen2025.10 | 14 | 6 | 6 | |
| JailbrokenTarget LLM=Qwen2025.10 | 13 | 11 | 11 | |
| QueryAttackTarget LLM=Gem-2.5-p2025.10 | 13 | 13 | 13 | |
| JailbrokenTarget LLM=GPT-4o2025.10 | 12 | 9 | 9 | |
| JailbrokenTarget LLM=DS-3.12025.10 | 12 | 9 | 9 | |
| DrAttackTarget LLM=DS-3.12025.10 | 8 | 5 | 5 | |
| JailbrokenTarget LLM=Gem-2.5-f2025.10 | 7 | 6 | 6 | |
| DrAttackTarget LLM=Gem-2.5-f2025.10 | 4 | 3 | 3 | |
| JailbrokenTarget LLM=Gem-2.5-p2025.10 | 3 | 3 | 3 | |
| DrAttackTarget LLM=Gem-2.5-p2025.10 | 3 | 3 | 3 |