# Jailbreak Defense on AdvBench (AutoDAN Attack) Source: [Jailbreak Defense on AdvBench (AutoDAN Attack)]() Collection index: [llms.txt]() Data updated: 2026-02-26T05:40:31.968Z Evaluation of model performance defending against jailbreak prompts generated using the AutoDAN attack methodology on the AdvBench dataset, measured by Defense Success Rate (DSR). A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Jailbreak Defense | | Dataset (including any stated split) | AdvBench AutoDAN attack | | Metric | DSR | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 15 of 15 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [DSR](): Higher is better; unit: PERCENT. ## Recorded results | Method | DSR | Result date | Report paper | | --- | --- | --- | --- | | SmoothLLM | 100 | Not recorded | 68fa738f1e209131cea5d3a7 | | Paraphrasing | 100 | Not recorded | 68fa738f1e209131cea5d3a7 | | Response check | 100 | Not recorded | 68fa738f1e209131cea5d3a7 | | Backtranslation | 98 | Not recorded | 68fa738f1e209131cea5d3a7 | | Backtranslation | 98 | Not recorded | 68fa738f1e209131cea5d3a7 | | Response check | 96 | Not recorded | 68fa738f1e209131cea5d3a7 | | Backtranslation | 96 | Not recorded | 68fa738f1e209131cea5d3a7 | | Paraphrasing | 72 | Not recorded | 68fa738f1e209131cea5d3a7 | | No defense | 64 | Not recorded | 68fa738f1e209131cea5d3a7 | | SmoothLLM | 64 | Not recorded | 68fa738f1e209131cea5d3a7 | | No defense | 40 | Not recorded | 68fa738f1e209131cea5d3a7 | | Paraphrasing | 30 | Not recorded | 68fa738f1e209131cea5d3a7 | | SmoothLLM | 24 | Not recorded | 68fa738f1e209131cea5d3a7 | | Response check | 12 | Not recorded | 68fa738f1e209131cea5d3a7 | | No defense | 4 | Not recorded | 68fa738f1e209131cea5d3a7 | ### SmoothLLM DSR: 100. Result ID: 699300653a6c31484912f7a7. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model":"Llama-2-13B"}. This record does not assert independent reproduction. ### Paraphrasing DSR: 100. Result ID: 699300653a6c31484912f7a8. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model":"Llama-2-13B"}. This record does not assert independent reproduction. ### Response check DSR: 100. Result ID: 699300653a6c31484912f7a9. [Reporting paper]() Recorded evaluation configuration: {"Target Model":"Llama-2-13B"}. This record does not assert independent reproduction. ### Backtranslation DSR: 98. Result ID: 699300653a6c31484912f7a5. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target Model":"GPT-3.5-turbo-0301"}. This record does not assert independent reproduction. ### Backtranslation DSR: 98. Result ID: 699300653a6c31484912f7aa. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target Model":"Llama-2-13B"}. This record does not assert independent reproduction. ### Response check DSR: 96. Result ID: 699300653a6c31484912f7a4. [Reporting paper]() Recorded evaluation configuration: {"Target Model":"GPT-3.5-turbo-0301"}. This record does not assert independent reproduction. ### Backtranslation DSR: 96. Result ID: 699300653a6c31484912f7af. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Target Model":"Vicuna-13B"}. This record does not assert independent reproduction. ### Paraphrasing DSR: 72. Result ID: 699300653a6c31484912f7a3. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model":"GPT-3.5-turbo-0301"}. This record does not assert independent reproduction. ### No defense DSR: 64. Result ID: 699300653a6c31484912f7a1. [Reporting paper]() Recorded evaluation configuration: {"Target Model":"GPT-3.5-turbo-0301"}. This record does not assert independent reproduction. ### SmoothLLM DSR: 64. Result ID: 699300653a6c31484912f7a2. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model":"GPT-3.5-turbo-0301"}. This record does not assert independent reproduction. ### No defense DSR: 40. Result ID: 699300653a6c31484912f7a6. [Reporting paper]() Recorded evaluation configuration: {"Target Model":"Llama-2-13B"}. This record does not assert independent reproduction. ### Paraphrasing DSR: 30. Result ID: 699300653a6c31484912f7ad. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model":"Vicuna-13B"}. This record does not assert independent reproduction. ### SmoothLLM DSR: 24. Result ID: 699300653a6c31484912f7ac. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Target Model":"Vicuna-13B"}. This record does not assert independent reproduction. ### Response check DSR: 12. Result ID: 699300653a6c31484912f7ae. [Reporting paper]() Recorded evaluation configuration: {"Target Model":"Vicuna-13B"}. This record does not assert independent reproduction. ### No defense DSR: 4. Result ID: 699300653a6c31484912f7ab. [Reporting paper]() Recorded evaluation configuration: {"Target Model":"Vicuna-13B"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.