Why it matters

HarmBench is comprehensive attack eval. Understanding shapes red-teaming.

Advertisement

The architecture

510 behaviors (harmful).

Multiple attack methods.

Trained classifier for judgment.

HarmBench frameworkBehaviors510 harmfulAttack methodsGCG + PAIR + etc.Classifiertrained judgeMazeika et al. 2024; combines many attacks + strong classifier
HarmBench.
Advertisement

How it works end to end

Mazeika et al. 2024.

Attack methods: GCG, PAIR, AutoDAN, more.

Fine-tuned safety classifier.