HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal
QuestionCan automated red-team methods and defenses be compared with consistent behavior-level scoring?
Source summaryContextual behaviors had higher attack success than some other functional categories.
NUWA research note · independent review pending · Contains: question / method / limits