Jailbreak Attack on Prefilling Attack 10 tokens
70.91ASRSD_DaExpert
Evaluation results
| Method | Links | ||
|---|---|---|---|
| SD_DaExpertBackbone=Vicuna2026.02 | 70.91 | 4.54 | |
| No DefenseBackbone=Vicuna2026.02 | 66.67 | 4.48 | |
| SafeDecodingBackbone=Vicuna2026.02 | 65.76 | 4.38 | |
| SD_TinyExpertBackbone=Vicuna2026.02 | 53.94 | 4.17 | |
| SafeDecodingBackbone=Llama32026.02 | 52.42 | 4.05 | |
| No DefenseBackbone=Llama32026.02 | 50 | 4.06 | |
| SD_DaExpertBackbone=Llama32026.02 | 50 | 3.95 | |
| SafeDecodingModel=Llama2-7b2026.02 | 29.7 | 3.22 | |
| Self-ExamBackbone=Vicuna2026.02 | 29.39 | 2.65 | |
| Self-ExamBackbone=Llama32026.02 | 26.67 | 2.61 | |
| SafeDecodingModel=Llama2-13b2026.02 | 26.67 | 3.05 | |
| SSDBackbone=Vicuna2026.02 | 26.36 | 2.87 | |
| No DefenseModel=Llama2-7b2026.02 | 26.36 | 2.95 | |
| No DefenseModel=Llama2-13b2026.02 | 21.82 | 2.88 | |
| SD_TinyExpertModel=Llama2-7b2026.02 | 19.39 | 2.42 | |
| ParaphraseBackbone=Vicuna2026.02 | 16.97 | 2.38 | |
| Self-ReminderBackbone=Vicuna2026.02 | 15.76 | 2.19 | |
| SD_TinyExpertModel=Llama2-13b2026.02 | 15.15 | 2.28 | |
| SD_TinyExpertBackbone=Llama32026.02 | 14.85 | 1.89 | |
| SSDModel=Llama2-13b2026.02 | 14.85 | 2.33 | |
| SSDModel=Llama2-7b2026.02 | 13.94 | 2.08 | |
| SD_DaExpertModel=Llama2-13b2026.02 | 13.03 | 2.31 | |
| SafeDecodingBackbone=Qwen32026.02 | 11.82 | 1.47 | |
| Self-ExamModel=Llama2-13b2026.02 | 9.39 | 1.78 | |
| SD_DaExpertBackbone=Qwen32026.02 | 9.09 | 1.44 | |
| ParaphraseModel=Llama2-13b2026.02 | 8.79 | 1.7 | |
| ParaphraseModel=Llama2-7b2026.02 | 8.48 | 1.62 | |
| NGSDModel=Llama2-13b2026.02 | 8.18 | 1.78 | |
| ParaphraseBackbone=Qwen32026.02 | 7.27 | 1.33 | |
| SD_DaExpertModel=Llama2-7b2026.02 | 6.06 | 1.45 | |
| NGSDBackbone=Vicuna2026.02 | 4.85 | 1.53 | |
| ParaphraseBackbone=Llama32026.02 | 4.85 | 1.89 | |
| SSDBackbone=Llama32026.02 | 4.55 | 1.77 | |
| Self-ReminderBackbone=Llama32026.02 | 4.24 | 1.47 | |
| Self-ExamModel=Llama2-7b2026.02 | 4.24 | 1.27 | |
| NGSDBackbone=Llama32026.02 | 3.33 | 1.28 | |
| NGSDModel=Llama2-7b2026.02 | 3.03 | 1.42 | |
| No DefenseBackbone=Qwen32026.02 | 2.73 | 1.16 | |
| SD_TinyExpertBackbone=Qwen32026.02 | 2.73 | 1.16 | |
| Self-ExamBackbone=Qwen32026.02 | 0.91 | 1.06 | |
| NGSDBackbone=Qwen32026.02 | 0.91 | 1.09 | |
| Self-ReminderBackbone=Qwen32026.02 | 0.61 | 1.04 | |
| Self-ReminderModel=Llama2-13b2026.02 | 0.61 | 1.15 | |
| SSDBackbone=Qwen32026.02 | 0.3 | 1.34 | |
| Self-ReminderModel=Llama2-7b2026.02 | 0 | 1.05 |