Jailbreak Attack Robustness on GCG
0Harmfulness RateRealSafe-R1
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| RealSafe-R1Model=R1-Qwen-14B2025.08 | 0 | — | — | |
| SafeKeyModel=R1-Qwen-14B2025.08 | 0 | — | — | |
| Self-ReminderModel=R1-Qwen-14B2025.08 | 0 | — | — | |
| SAFEPATH-ZSModel=R1-Qwen-14B2025.08 | 0 | — | — | |
| ReasoningGuardModel=R1-Qwen-14B2025.08 | 0 | — | — | |
| RealSafe-R1Model=R1-Qwen-32B2025.08 | 0 | — | — | |
| Self-ReminderModel=R1-Qwen-32B2025.08 | 0 | — | — | |
| SAFEPATH-ZSModel=R1-Qwen-32B2025.08 | 0 | — | — | |
| ReasoningGuardModel=R1-Qwen-32B2025.08 | 0 | — | — | |
| ThinkingIModel=R1-Qwen-14B2025.08 | 4 | — | — | |
| ThinkingIModel=R1-Qwen-32B2025.08 | 6 | — | — | |
| ParaphraseModel=R1-Qwen-14B2025.08 | 8 | — | — | |
| ParaphraseModel=R1-Qwen-32B2025.08 | 12 | — | — | |
| SmoothLLMModel=R1-Qwen-32B2025.08 | 14 | — | — | |
| No DefenseModel=R1-Qwen-14B2025.08 | 16 | — | — | |
| SmoothLLMModel=R1-Qwen-14B2025.08 | 16 | — | — | |
| No DefenseModel=R1-Qwen-32B2025.08 | 22 | — | — | |
| No DefenseModel=R1-Qwen-7B2025.08 | — | 58 | 46 | |
| No DefenseModel=R1-Llama-8B2025.08 | — | 24 | 22 | |
| ReasoningGuardModel=R1-Qwen-7B2025.08 | — | 0 | 0 | |
| ReasoningGuardModel=R1-Llama-8B2025.08 | — | 0 | 0 |