Jailbreaking Attack Success on STRONGREJECT 40 held-out behaviors
94EVUSIHO
Evaluation results
| Method | Links | |
|---|---|---|
| IHOTarget model=Qwen-7B2026.06 | 94 | |
| IHOTarget model=Qwen-32B2026.06 | 92 | |
| PAIR+Target model=Qwen-7B2026.06 | 90 | |
| GCG+Target model=Qwen-7B2026.06 | 89 | |
| JR1+Target model=Qwen-7B2026.06 | 89 | |
| JR1+Target model=Qwen-32B2026.06 | 88 | |
| PAIR+Target model=Qwen-32B2026.06 | 87 | |
| GCG+Target model=Qwen-32B2026.06 | 85 | |
| INP.Target model=Qwen-7B2026.06 | 85 | |
| IHOTarget model=LLaMA-8B2026.06 | 85 | |
| JR1+Target model=LLaMA-8B2026.06 | 83 | |
| IHOTarget model=Qwen-7B+D2026.06 | 82 | |
| IHOTarget model=CB2026.06 | 82 | |
| BONTarget model=LLaMA-8B2026.06 | 81 | |
| INP.Target model=Qwen-32B2026.06 | 80 | |
| IHOTarget model=CB+D2026.06 | 79 | |
| PAIRTarget model=Qwen-7B2026.06 | 78 | |
| GCG+Target model=LLaMA-8B2026.06 | 78 | |
| IHOTarget model=LAT2026.06 | 78 | |
| IHOTarget model=CAT2026.06 | 78 | |
| BONTarget model=Qwen-7B2026.06 | 77 | |
| PAIR+Target model=LLaMA-8B2026.06 | 76 | |
| PAIRTarget model=Qwen-32B2026.06 | 75 | |
| BONTarget model=Qwen-32B2026.06 | 75 | |
| INP.Target model=LLaMA-8B2026.06 | 74 | |
| JR1+Target model=Qwen-7B+D2026.06 | 72 | |
| JR1+Target model=CAT2026.06 | 72 | |
| PAIR+Target model=Qwen-7B+D2026.06 | 70 | |
| INP.Target model=Qwen-7B+D2026.06 | 69 | |
| JR1+Target model=LAT2026.06 | 67 | |
| PAIR+Target model=CAT2026.06 | 67 | |
| PAIR+Target model=LAT2026.06 | 65 | |
| INP.Target model=CB2026.06 | 64 | |
| PAIR+Target model=CB2026.06 | 62 | |
| INP.Target model=LAT2026.06 | 62 | |
| BONTarget model=Qwen-7B+D2026.06 | 61 | |
| INP.Target model=CAT2026.06 | 58 | |
| INP.Target model=CB+D2026.06 | 57 | |
| PAIRTarget model=LLaMA-8B2026.06 | 56 | |
| JR1+Target model=CB2026.06 | 54 | |
| Ample+Target model=Qwen-7B2026.06 | 53 | |
| PAIR+Target model=CB+D2026.06 | 52 | |
| BONTarget model=CB2026.06 | 49 | |
| GCG+Target model=LAT2026.06 | 48 | |
| JR1+Target model=CB+D2026.06 | 44 | |
| PAIRTarget model=Qwen-7B+D2026.06 | 43 | |
| PAIRTarget model=CAT2026.06 | 41 | |
| PAIRTarget model=LAT2026.06 | 38 | |
| BONTarget model=CB+D2026.06 | 37 | |
| Ample+Target model=Qwen-32B2026.06 | 36 | |
| PAIRTarget model=CB2026.06 | 27 | |
| PAIRTarget model=CB+D2026.06 | 21 | |
| GCG+Target model=CB2026.06 | 17 | |
| Ample+Target model=LLaMA-8B2026.06 | 13 | |
| Ample+Target model=Qwen-7B+D2026.06 | 9 | |
| Ample+Target model=CB2026.06 | 9 | |
| GCG+Target model=CAT2026.06 | 7 | |
| BONTarget model=LAT2026.06 | 3 | |
| Ample+Target model=CB+D2026.06 | 1 | |
| Ample+Target model=LAT2026.06 | 1 | |
| BONTarget model=CAT2026.06 | 1 | |
| Ample+Target model=CAT2026.06 | 0 |