Prompt Injection Attack Robustness on JailbreakBench 2025 (test)
64ASPIgnore Prefix
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Ignore PrefixAttack Method=Ignore Prefix, Model Group=Open-source LLMs (Mean)2025.05 | 64 | 62.9 | |
| Role-playing CoTAttack Method=Role-playing CoT, Model Group=Open-source LLMs (Mean)2025.05 | 57.1 | 52.4 | |
| HypnotismAttack Method=Hypnotism, Model Group=Open-source LLMs (Mean)2025.05 | 45.8 | 43.7 |