Jailbreak Attack Robustness on JBB-Behaviors
10ASR (PAIR)RA
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| RABase Model=LLaDA2025.10 | 10 | 72.3 | 45 | |
| RABase Model=LLaDA1.52025.10 | 16 | 71.7 | 47 | |
| MOSABase Model=LLaDA1.52025.10 | 25 | 78.3 | 70 | |
| RA w/o interBase Model=LLaDA, Ablation=without intervention2025.10 | 26.3 | 75.7 | 71.3 | |
| MOSABase Model=LLaDA2025.10 | 27.3 | 77.7 | 66.3 | |
| DPOBase Model=LLaDA2025.10 | 31.3 | 88.3 | 74 | |
| DPOBase Model=LLaDA1.52025.10 | 36 | 90.7 | 74.3 | |
| SFTBase Model=LLaDA2025.10 | 36.7 | 94.3 | 71 | |
| RA w/o interBase Model=LLaDA1.5, Ablation=without intervention2025.10 | 38.7 | 79.3 | 68.5 | |
| SFTBase Model=LLaDA1.52025.10 | 39 | 91.3 | 70.7 | |
| OriginalBase Model=LLaDA2025.10 | 44.3 | 92.7 | 81.3 | |
| OriginalBase Model=LLaDA1.52025.10 | 45.3 | 96.7 | 81.7 | |
| RABase Model=MMaDA2025.10 | 46.3 | 81.7 | 55.3 | |
| RA w/o interBase Model=MMaDA, Ablation=without intervention2025.10 | 54.3 | 77.6 | 72 | |
| MOSABase Model=MMaDA2025.10 | 59 | 75.7 | 71 | |
| DPOBase Model=MMaDA2025.10 | 67.5 | 82.3 | 85.7 | |
| SFTBase Model=MMaDA2025.10 | 92 | 95 | 93.5 | |
| OriginalBase Model=MMaDA2025.10 | 98 | 79.3 | 93 |