Paper proposes ASR_STEP to discount iterative LLM jailbreaks
On JailBreakBench, discounting victim-model calls lowers GCG by 7.0 to 8.7 points and PAIR by 3.4 to 12.
2 stories, newest first · one card per story
On JailBreakBench, discounting victim-model calls lowers GCG by 7.0 to 8.7 points and PAIR by 3.4 to 12.
Ten arms trained on about 53k dual-labeled prompts show HarmBench-copyright scores spanning 0-100 while detection stays unchanged.
Today 1.2K readers · 1.8K views · 1.4K reads · all time 160K views