Share your thoughts, 1 month free Claude Pro on usSee more

Jailbreak Defense on AutoDAN

0ASR

SafeDecoding

Updated 1mo ago

Evaluation Results

Method	Links
SafeDecoding 2024.02		0	1.08
Self-Examination 2024.02		0	1.04
Paraphrase 2024.02		0	1
Self-Reminder 2024.02		0	1.06
ICD 2024.02		0	1
SafeDecoding 2024.02		0	1
SAGE 2025.05		0	1
Goal Prioritization 2025.05		0	1
SAGE 2025.05		0	1
SAGE 2025.05		1	1.02
No Defense 2024.02		2	1.08
PPL 2024.02		2	1.04
Self-Examination 2025.05		2	1.08
Self-Examination 2025.05		2	1
JPU 2026.01		3.46	-
Self-Examination 2024.02		4	1.14
Self-Examination 2025.05		4	1.12
JPU 2026.01		5.77	-
CKU 2026.01		5.96	-
Goal Prioritization 2025.05		6	1.22
CKU 2026.01		6.54	-
RSFT 2026.01		6.54	-
Safe Unlearning 2026.01		6.92	-
Circuit Breaker 2026.01		7.12	-
Safe Unlearning 2026.01		7.12	-
Circuit Breaker 2026.01		7.5	-
Eraser 2026.01		7.88	-
Self-Reminder 2025.05		8	1.28
RSFT 2026.01		8.85	-
Eraser 2026.01		9.23	-
Retokenization 2024.02		10	1.14
IA 2025.05		10	1.36
ICD 2025.05		14	1.48
Base model 2026.01		18.65	-
Base model 2026.01		20.77	-
Goal Prioritization 2025.05		22	1.18
No Defense 2025.05		24	1.86
IA 2025.05		26	1.5
Self-Reminder 2025.05		38	3.62
IA 2025.05		38	2.5
Self-Reminder 2025.05		58	2.22
No Defense 2025.05		66	3.28
Paraphrase 2024.02		70	3.32
Self-Reminder 2024.02		70	4.64
Retokenization 2024.02		76	2.62
ICD 2024.02		80	4.5
ICD 2025.05		82	4.1
No Defense 2024.02		88	4.92
PPL 2024.02		88	4.92
ICD 2025.05		88	4.74
No Defense 2025.05		94	4.64