Jailbreak Defense on Jailbreak Attacks
28.1ES ASRAdL*
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| AdL*Backbone=LLaMA2026.04 | 28.1 | — | 0 | |
| LIRA*Backbone=LLaMA2026.04 | 40.6 | — | 0 | |
| AdL*Backbone=Gemma2026.04 | 49.2 | 1.5 | 0 | |
| GDBackbone=LLaMA2026.04 | 57.8 | — | 0.7 | |
| CBBackbone=LLaMA2026.04 | 65.6 | — | 3.9 | |
| LIRA*Backbone=Gemma2026.04 | 75 | 19 | 0.8 | |
| CBBackbone=Gemma2026.04 | 93.7 | 22.2 | 2.3 | |
| ITBackbone=LLaMA2026.04 | 93.8 | — | 0 | |
| GDBackbone=Gemma2026.04 | 93.9 | 44.5 | 0.8 | |
| ITBackbone=Gemma2026.04 | 95.3 | 57.1 | 0 |