Why it matters

JailbreakBench standardizes jailbreak eval. Understanding shapes attack eval.

Advertisement

The architecture

100 harmful + 100 benign behaviors.

Attack artifacts library.

Judge model for success.

JailbreakBench structureBehaviorsharmful + benignAttack artifactsknown jailbreaksJudgesafety + relevanceChao et al. 2024; provides reproducibility + baseline scores
JailbreakBench.
Advertisement

How it works end to end

Reproducible attack artifacts.

Judge model standardized.

Benign behaviors test over-refusal.