Jailbreak Defense on Prefix-Probe-600 Llama2-7B
1GCG ScorePPL
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| PPLBase Model=Llama2-7B2025.10 | 1 | 1.08 | 1.24 | 1.14 | 1 | 2.16 | 1.27 | |
| RetokenizationBase Model=Llama2-7B2025.10 | 1 | 1.12 | 1.4 | 1.2 | 1.03 | 1 | 1.13 | |
| SafeDecodingBase Model=Llama2-7B2025.10 | 1 | 1 | 1.24 | 1 | 1 | 1.4 | 1.11 | |
| SAIDBase Model=Llama2-7B2025.10 | 1 | 1 | 1.16 | 1 | 1.01 | 1 | 1.03 | |
| ICDBase Model=Llama2-7B2025.10 | 1.14 | 1 | 1 | 1 | 1 | 3.04 | 1.36 | |
| ParaphraseBase Model=Llama2-7B2025.10 | 1.16 | 1.06 | 1.02 | 1.08 | 1.02 | 1.12 | 1.08 | |
| Self-ExaminationBase Model=Llama2-7B2025.10 | 1.6 | 1.08 | 1 | 1.12 | 1 | 1.8 | 1.27 | |
| No DefenseBase Model=Llama2-7B2025.10 | 2.58 | 1.08 | 1.24 | 1.2 | 1 | 2.2 | 1.55 |