Jailbreaking on AdvBench 520
96.7ASR (%)STEER
Evaluation Results
| Method | Links | |
|---|---|---|
| STEERTarget Model=Mistral-7B, Iterations=@82026.07 | 96.7 | |
| STEERTarget Model=GLM-4-9B, Iterations=@82026.07 | 96.5 | |
| STEERTarget Model=Gemma-7B, Iterations=@82026.07 | 96.2 | |
| GCGTarget Model=Gemma-7B, Iterations=@82026.07 | 95.8 | |
| CSRTTarget Model=Gemma-7B, Iterations=@82026.07 | 88.1 | |
| GCGTarget Model=Mistral-7B, Iterations=@82026.07 | 85.6 | |
| CSRTTarget Model=Mistral-7B, Iterations=@82026.07 | 84.2 | |
| STEERTarget Model=Llama-3-8B, Iterations=@82026.07 | 82.1 | |
| STEERTarget Model=DeepSeek-R1, Iterations=@82026.07 | 77.3 | |
| STEERTarget Model=Qwen3-8B, Iterations=@82026.07 | 76.5 | |
| CSRTTarget Model=GLM-4-9B, Iterations=@82026.07 | 74.4 | |
| CSRTTarget Model=Llama-3-8B, Iterations=@82026.07 | 69.6 | |
| CSRTTarget Model=Qwen3-8B, Iterations=@82026.07 | 58.1 | |
| CSRTTarget Model=DeepSeek-R1, Iterations=@82026.07 | 55.8 | |
| GCGTarget Model=DeepSeek-R1, Iterations=@82026.07 | 47.5 | |
| GCGTarget Model=Qwen3-8B, Iterations=@82026.07 | 33.8 | |
| GCGTarget Model=GLM-4-9B, Iterations=@82026.07 | 20.2 | |
| GCGTarget Model=Llama-3-8B, Iterations=@82026.07 | 18.3 |