Jailbreak Defense on PGD-Jailbreak
5.45ASRCARE
Evaluation Results
| Method | Links | |
|---|---|---|
| CAREBackbone=Qwen-2.5VL, Perturbation radius (κ)=32/2552026.03 | 5.45 | |
| CAREBackbone=Qwen-2.5VL, Perturbation radius (κ)=16/2552026.03 | 6.43 | |
| CAREBackbone=LLaVA-onevision, Perturbation radius (κ)=64/2552026.03 | 8.46 | |
| CAREBackbone=Qwen-2.5VL, Attack constraint=UnConstrain2026.03 | 10.31 | |
| CAREBackbone=Qwen-2.5VL, Perturbation radius (κ)=64/2552026.03 | 10.68 | |
| Original modelBackbone=LLaVA-onevision, Attack constraint=UnConstrain2026.03 | 67.37 |