Jailbreak Defense on Llama-2-7B-chat-hf
0GCG Attack Success Rate (ASR)Goal Prioritization
Evaluation results
| Method | Links | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Goal PrioritizationDefense Method=Goal Prioritization2026.04 | 0 | 7 | 1 | 16 | 10 | 6 | 31 | 0 | 0 | 3 | 6 | 9 | 7 | |
| Qwen3GuardDefense Method=Qwen3Guard2026.04 | 0 | 0 | 0 | 13 | 6 | 0 | 10 | 0 | 0 | 0 | 31 | 19 | 7 | |
| TrajGuardDefense Method=TrajGuard (Ours)2026.04 | 0 | 0 | 0 | 10 | 1 | 0 | 3 | 0 | 1 | 3 | 6 | 5 | 2 | |
| Llama Guard 3Defense Method=Llama Guard 32026.04 | 2 | 1 | 0 | 16 | 23 | 22 | 25 | 0 | 69 | 8 | 56 | 22 | 20 | |
| Self-GuardDefense Method=Self-Guard2026.04 | 24 | 36 | 1 | 15 | 14 | 12 | 26 | 0 | 13 | 32 | 29 | 18 | 18 | |
| No DefenseDefense Method=No Defense2026.04 | 96 | 68 | 1 | 16 | 30 | 59 | 71 | 34 | 83 | 38 | 62 | 68 | 52 |