Multi-turn Jailbreak on AdvBench
98ASR (X-Teaming)No Defense
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| No DefenseModel=Qwen2.5-7B, Defense=No Defense2026.06 | 98 | 90 | |
| No DefenseModel=Llama3-8B, Defense=No Defense2026.06 | 92 | 73 | |
| SAGEModel=Qwen2.5-7B, Defense=SAGE2026.06 | 83.6 | 2.8 | |
| PROACTModel=Qwen2.5-7B, Defense=PROACT2026.06 | 67 | 3.1 | |
| PROACTModel=Llama3-8B, Defense=PROACT2026.06 | 24 | 2.5 | |
| SAGEModel=Llama3-8B, Defense=SAGE2026.06 | 21.2 | 3.5 | |
| THRDModel=Qwen2.5-7B, Defense=Ours2026.06 | 1.3 | 0.5 | |
| THRDModel=Llama3-8B, Defense=Ours2026.06 | 0.2 | 1 |