Jailbreak Attack on Prefilling Attack 20 tokens
0.3ASRSelf-Reminder
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Self-ReminderModel=Llama2-7b2026.02 | 0.3 | 1.06 | |
| Self-ReminderBackbone=Qwen32026.02 | 0.91 | 1.07 | |
| Self-ExamBackbone=Qwen32026.02 | 0.91 | 1.07 | |
| SSDBackbone=Qwen32026.02 | 0.91 | 1.38 | |
| Self-ReminderModel=Llama2-13b2026.02 | 0.91 | 1.13 | |
| NGSDBackbone=Qwen32026.02 | 1.21 | 1.13 | |
| NGSDModel=Llama2-7b2026.02 | 1.52 | 1.38 | |
| NGSDModel=Llama2-13b2026.02 | 1.82 | 1.41 | |
| No DefenseBackbone=Qwen32026.02 | 2.73 | 1.15 | |
| SD_TinyExpertBackbone=Qwen32026.02 | 2.73 | 1.15 | |
| ParaphraseBackbone=Llama32026.02 | 3.03 | 1.94 | |
| NGSDBackbone=Llama32026.02 | 3.64 | 1.32 | |
| NGSDBackbone=Vicuna2026.02 | 3.94 | 1.5 | |
| Self-ReminderBackbone=Llama32026.02 | 4.24 | 1.56 | |
| SSDBackbone=Llama32026.02 | 4.85 | 1.72 | |
| Self-ExamModel=Llama2-7b2026.02 | 5.15 | 1.42 | |
| ParaphraseBackbone=Qwen32026.02 | 6.36 | 1.3 | |
| ParaphraseModel=Llama2-13b2026.02 | 6.67 | 1.62 | |
| SD_TinyExpertBackbone=Llama32026.02 | 7.27 | 1.6 | |
| SD_DaExpertModel=Llama2-7b2026.02 | 7.27 | 1.53 | |
| SD_DaExpertBackbone=Qwen32026.02 | 7.88 | 1.39 | |
| ParaphraseModel=Llama2-7b2026.02 | 8.48 | 1.71 | |
| Self-ExamModel=Llama2-13b2026.02 | 12.12 | 1.8 | |
| SSDModel=Llama2-13b2026.02 | 12.12 | 2.13 | |
| Self-ReminderBackbone=Vicuna2026.02 | 12.73 | 1.98 | |
| SafeDecodingBackbone=Qwen32026.02 | 13.33 | 1.53 | |
| SSDModel=Llama2-7b2026.02 | 14.85 | 2.29 | |
| SD_TinyExpertModel=Llama2-13b2026.02 | 18.79 | 2.74 | |
| SD_DaExpertModel=Llama2-13b2026.02 | 21.52 | 2.77 | |
| ParaphraseBackbone=Vicuna2026.02 | 23.64 | 2.75 | |
| SafeDecodingModel=Llama2-13b2026.02 | 23.64 | 2.96 | |
| No DefenseModel=Llama2-13b2026.02 | 23.94 | 2.82 | |
| SD_TinyExpertModel=Llama2-7b2026.02 | 24.24 | 2.96 | |
| Self-ExamBackbone=Llama32026.02 | 24.55 | 2.62 | |
| No DefenseModel=Llama2-7b2026.02 | 24.85 | 3.14 | |
| Self-ExamBackbone=Vicuna2026.02 | 27.27 | 2.59 | |
| SafeDecodingModel=Llama2-7b2026.02 | 27.88 | 3.28 | |
| SSDBackbone=Vicuna2026.02 | 32.12 | 3.05 | |
| SD_DaExpertBackbone=Llama32026.02 | 44.55 | 3.8 | |
| SafeDecodingBackbone=Llama32026.02 | 46.06 | 3.77 | |
| No DefenseBackbone=Llama32026.02 | 49.39 | 3.99 | |
| SD_TinyExpertBackbone=Vicuna2026.02 | 58.48 | 4.3 | |
| No DefenseBackbone=Vicuna2026.02 | 67.27 | 4.48 | |
| SafeDecodingBackbone=Vicuna2026.02 | 67.27 | 4.41 | |
| SD_DaExpertBackbone=Vicuna2026.02 | 67.27 | 4.53 |