Jailbreak Attack on Prefilling Attack 40 tokens benchmark leaderboard · SOTA2 Research

Jailbreak Attack on Prefilling Attack 40 tokens

0ASR (%)Self-Reminder

Evaluation Results

Method	Links
Self-Reminder2026.02		0	1.03
Self-Exam2026.02		0.61	1.06
Self-Reminder2026.02		0.61	1.08
SSD2026.02		0.91	1.32
Self-Reminder2026.02		1.21	1.08
SD_TinyExpert2026.02		1.52	1.12
NGSD2026.02		1.52	1.37
NGSD2026.02		2.12	1.17
Self-Reminder2026.02		2.73	1.68
No Defense2026.02		2.73	1.15
SSD2026.02		3.03	1.66
NGSD2026.02		3.64	1.3
Self-Exam2026.02		3.64	1.3
Paraphrase2026.02		4.85	1.93
Self-Exam2026.02		5.15	1.75
Paraphrase2026.02		6.97	1.33
Paraphrase2026.02		6.97	1.62
SD_TinyExpert2026.02		7.27	1.57
Self-Reminder2026.02		7.58	1.58
SD_DaExpert2026.02		7.58	1.39
NGSD2026.02		7.58	1.77
NGSD2026.02		8.48	1.77
SD_DaExpert2026.02		8.48	1.7
Paraphrase2026.02		10	1.77
SSD2026.02		11.52	1.83
SafeDecoding2026.02		13.64	1.55
SSD2026.02		14.85	2.36
No Defense2026.02		20	2.55
Self-Exam2026.02		20.91	2.42
SD_TinyExpert2026.02		21.21	3.02
SD_DaExpert2026.02		21.82	2.89
SafeDecoding2026.02		22.12	2.78
Paraphrase2026.02		25.15	2.72
No Defense2026.02		25.15	3.23
SafeDecoding2026.02		26.97	3.33
Self-Exam2026.02		28.18	2.66
SSD2026.02		30	2.99
SafeDecoding2026.02		34.85	3.31
SD_DaExpert2026.02		39.7	3.53
SD_TinyExpert2026.02		41.21	2.79
No Defense2026.02		46.36	3.7
SD_TinyExpert2026.02		58.18	4.16
SafeDecoding2026.02		65.76	4.34
No Defense2026.02		66.97	4.43
SD_DaExpert2026.02		66.97	4.43