Jailbreak Attack on Prefilling Attack 20 tokens benchmark leaderboard · SOTA2 Research

Jailbreak Attack on Prefilling Attack 20 tokens

0.3ASRSelf-Reminder

Evaluation Results

Method	Links
Self-Reminder2026.02		0.3	1.06
Self-Reminder2026.02		0.91	1.07
Self-Exam2026.02		0.91	1.07
SSD2026.02		0.91	1.38
Self-Reminder2026.02		0.91	1.13
NGSD2026.02		1.21	1.13
NGSD2026.02		1.52	1.38
NGSD2026.02		1.82	1.41
No Defense2026.02		2.73	1.15
SD_TinyExpert2026.02		2.73	1.15
Paraphrase2026.02		3.03	1.94
NGSD2026.02		3.64	1.32
NGSD2026.02		3.94	1.5
Self-Reminder2026.02		4.24	1.56
SSD2026.02		4.85	1.72
Self-Exam2026.02		5.15	1.42
Paraphrase2026.02		6.36	1.3
Paraphrase2026.02		6.67	1.62
SD_TinyExpert2026.02		7.27	1.6
SD_DaExpert2026.02		7.27	1.53
SD_DaExpert2026.02		7.88	1.39
Paraphrase2026.02		8.48	1.71
Self-Exam2026.02		12.12	1.8
SSD2026.02		12.12	2.13
Self-Reminder2026.02		12.73	1.98
SafeDecoding2026.02		13.33	1.53
SSD2026.02		14.85	2.29
SD_TinyExpert2026.02		18.79	2.74
SD_DaExpert2026.02		21.52	2.77
Paraphrase2026.02		23.64	2.75
SafeDecoding2026.02		23.64	2.96
No Defense2026.02		23.94	2.82
SD_TinyExpert2026.02		24.24	2.96
Self-Exam2026.02		24.55	2.62
No Defense2026.02		24.85	3.14
Self-Exam2026.02		27.27	2.59
SafeDecoding2026.02		27.88	3.28
SSD2026.02		32.12	3.05
SD_DaExpert2026.02		44.55	3.8
SafeDecoding2026.02		46.06	3.77
No Defense2026.02		49.39	3.99
SD_TinyExpert2026.02		58.48	4.3
No Defense2026.02		67.27	4.48
SafeDecoding2026.02		67.27	4.41
SD_DaExpert2026.02		67.27	4.53