Jailbreak Defense on JailBreakV
6.55Attack Success Rate (ASR)CARE
Evaluation results
| Method | Links | |
|---|---|---|
| CAREBackbone=Qwen-2.5VL2026.03 | 6.55 | |
| CAREBackbone=LLaVA-onevision2026.03 | 7.03 | |
| JailGuardBackbone=Qwen-2.5VL2026.03 | 9.47 | |
| SPO-VLMBackbone=LLaVA-onevision2026.03 | 10.37 | |
| SPO-VLMBackbone=Qwen-2.5VL2026.03 | 11.12 | |
| ASTRABackbone=LLaVA-onevision2026.03 | 11.98 | |
| ASTRABackbone=Qwen-2.5VL2026.03 | 12.3 | |
| CASTBackbone=Qwen-2.5VL2026.03 | 15.68 | |
| JailGuardBackbone=LLaVA-onevision2026.03 | 18.46 | |
| Refusal PairsBackbone=Qwen-2.5VL2026.03 | 18.85 | |
| Original modelBackbone=Qwen-2.5VL2026.03 | 20 | |
| CASTBackbone=LLaVA-onevision2026.03 | 25.03 | |
| Refusal PairsBackbone=LLaVA-onevision2026.03 | 32.81 | |
| Original modelBackbone=LLaVA-onevision2026.03 | 45.71 |