ResearchBenchmarksJailbreak Transfer Attack Success Rate on AdvBench (Source Llama-2)Follow21ASR (Llama-2)25-CRI6.4410.221417.78Feb 13, 2025Evaluation ResultsMethodMethodLinksASR (Llama-2)ASR (Vicuna)ASR (Llama-3)ASR (Falcon)ASR (Mistral-7B v0.2)ASR (Mistral-7B v0.3)ASR (Phi-4)ASR (Qwen2.5)Median Attack Success Rate (ASR)Average Attack Success Rate (ASR)25-CRIInitialization=25-CRIInitialization=25-CRI2025.0221958899949462839179.5RandomInitialization=RandomInitialization=Random2025.0220945198858649486866.41-CRIInitialization=1-CRIInitialization=1-CRI2025.0210965994736870616966.4StandardInitialization=StandardInitialization=Standard2025.0279644963763435147.554.6