Jailbreak Attack on N=750 Harmful Query Evaluation Set Gemini-3.1-Flash-Lite
2.75ToxicityHADES
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| HADESNumber of Trials (T)=12026.05 | 2.75 | 3.96 | 45.87 | 42.13 | |
| FigStepNumber of Trials (T)=12026.05 | 2.92 | 4.15 | 50.13 | 49.2 | |
| CS-DJNumber of Trials (T)=12026.05 | 3.46 | 5.7 | 64.27 | 37.07 | |
| SINumber of Trials (T)=52026.05 | 4.02 | 6.9 | 78.67 | 74.13 | |
| FlipAttackNumber of Trials (T)=12026.05 | 4.72 | 8.52 | 94.53 | 93.2 | |
| TxtV-GDINumber of Trials (T)=52026.05 | 4.76 | 8.61 | 95.47 | 95.73 | |
| TTV-GDINumber of Trials (T)=5, Kd=62026.05 | 4.78 | 8.64 | 95.73 | 94.53 | |
| TypVNumber of Trials (T)=52026.05 | 4.79 | 8.63 | 96.13 | 95.2 | |
| TTVNumber of Trials (T)=52026.05 | 4.83 | 8.68 | 96.4 | 96.93 | |
| TxtVNumber of Trials (T)=52026.05 | 4.9 | 8.89 | 98.13 | 98.8 |