{"data":{"id":"55f5e23b-bc56-406b-9296-12ff14c11005","title":"Beyond Attack Success Rate: Cost-Aware Metric for Evaluating Iterative LLM Jailbreaks","summary":"This paper argues that attack success rate (ASR) for jailbreaks ignores repeated calls to the victim model, which give the deployed system more chances to detect and intervene. It introduces ASR_STEP, which penalizes additional victim-model calls while keeping binary success judgments. On JailBreakBench across three model families, GCG's scores drop by 7.0 to 8.7 percentage points after discounting, PAP's stay unchanged, and PAIR's drop by 3.4 to 12 percentage points.","solution":"N/A -- no mitigation discussed in source.","labels":["research","security"],"sourceUrl":"https://arxiv.org/abs/2610.26589v1","publishedAt":"2026-10-19T15:36:41.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["jailbreak"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["GCG","PAIR","PAP","JailBreakBench"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-19T15:36:41.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["safety"],"aiComponentTargeted":"model","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0054"]}}