Jailbreak Attack on Prefilling Attack 10 tokens benchmark leaderboard · SOTA2 Research

Jailbreak Attack on Prefilling Attack 10 tokens

70.91ASRSD_DaExpert

Evaluation Results

Method	Links
SD_DaExpert2026.02		70.91	4.54
No Defense2026.02		66.67	4.48
SafeDecoding2026.02		65.76	4.38
SD_TinyExpert2026.02		53.94	4.17
SafeDecoding2026.02		52.42	4.05
No Defense2026.02		50	4.06
SD_DaExpert2026.02		50	3.95
SafeDecoding2026.02		29.7	3.22
Self-Exam2026.02		29.39	2.65
Self-Exam2026.02		26.67	2.61
SafeDecoding2026.02		26.67	3.05
SSD2026.02		26.36	2.87
No Defense2026.02		26.36	2.95
No Defense2026.02		21.82	2.88
SD_TinyExpert2026.02		19.39	2.42
Paraphrase2026.02		16.97	2.38
Self-Reminder2026.02		15.76	2.19
SD_TinyExpert2026.02		15.15	2.28
SD_TinyExpert2026.02		14.85	1.89
SSD2026.02		14.85	2.33
SSD2026.02		13.94	2.08
SD_DaExpert2026.02		13.03	2.31
SafeDecoding2026.02		11.82	1.47
Self-Exam2026.02		9.39	1.78
SD_DaExpert2026.02		9.09	1.44
Paraphrase2026.02		8.79	1.7
Paraphrase2026.02		8.48	1.62
NGSD2026.02		8.18	1.78
Paraphrase2026.02		7.27	1.33
SD_DaExpert2026.02		6.06	1.45
NGSD2026.02		4.85	1.53
Paraphrase2026.02		4.85	1.89
SSD2026.02		4.55	1.77
Self-Reminder2026.02		4.24	1.47
Self-Exam2026.02		4.24	1.27
NGSD2026.02		3.33	1.28
NGSD2026.02		3.03	1.42
No Defense2026.02		2.73	1.16
SD_TinyExpert2026.02		2.73	1.16
Self-Exam2026.02		0.91	1.06
NGSD2026.02		0.91	1.09
Self-Reminder2026.02		0.61	1.04
Self-Reminder2026.02		0.61	1.15
SSD2026.02		0.3	1.34
Self-Reminder2026.02		0	1.05