Jailbreak Attack Defense on MM-SafetyBench (ASR, CS)
0.2Attack Success Rate (ASR)
CASA
Updated 17d ago
Evaluation Results
| Method | Links | ||
|---|---|---|---|
2026.03 | 0.2 | - | |
2026.03 | 1.2 | - | |
2026.03 | 1.2 | - | |
2026.03 | 2.7 | - | |
2026.03 | 3.7 | - | |
2026.03 | 5.1 | - | |
2026.03 | 5.4 | - | |
2026.03 | 8.57 | 3 | |
2026.03 | 8.8 | - | |
2026.03 | 9 | - | |
2026.03 | 9.2 | - | |
2026.03 | 10.48 | 4 | |
2026.03 | 10.83 | 29 | |
2026.03 | 11.2 | - | |
2026.03 | 12.3 | - | |
2026.03 | 12.56 | 31 | |
2026.03 | 12.6 | - | |
2026.03 | 12.8 | - | |
2026.03 | 12.9 | - | |
2026.03 | 13.7 | - | |
2026.03 | 14.29 | 48 | |
2026.03 | 14.29 | 2 | |
2026.03 | 14.9 | - | |
2026.03 | 16.31 | 49 | |
2026.03 | 16.85 | 26 | |
2026.03 | 18.57 | 45 | |
2026.03 | 19.1 | - | |
2026.03 | 19.1 | - | |
2026.03 | 20.48 | 23 | |
2026.03 | 22.56 | 2 | |
2026.03 | 22.6 | - | |
2026.03 | 24.64 | 42 | |
2026.03 | 25.2 | - | |
2026.03 | 25.8 | - | |
2026.03 | 26.8 | - | |
2026.03 | 26.8 | - | |
2026.03 | 27.1 | - | |
2026.03 | 28.1 | - | |
2026.03 | 29.6 | - | |
2026.03 | 30.1 | - | |
2026.03 | 30.1 | - | |
2026.03 | 33.6 | - | |
2026.03 | 37.7 | - | |
2026.03 | 38.1 | - | |
2026.03 | 38.3 | - | |
2026.03 | 38.3 | - | |
2026.03 | 38.63 | 9 | |
2026.03 | 42.26 | 11 | |
2026.03 | 45.8 | - | |
2026.03 | 45.8 | - | |
2026.03 | 47.7 | - | |
2026.03 | 48.63 | 8 | |
2026.03 | 62.26 | 6 | |
2026.03 | 62.3 | - | |
2026.03 | 67.2 | - | |
2026.03 | 67.2 | - |