## Line Chart: Stealthiness vs. Detection Likelihood and ASR ### Overview The chart visualizes the relationship between stealth class categories (High, Medium, Low) and two metrics: Detection Rate (%) and Attack Success Rate (%). A blue line represents Detection Rate, while red bars represent Attack Success Rate. The data suggests an inverse relationship between stealth and detection likelihood, with Attack Success Rate increasing as stealth decreases. ### Components/Axes - **X-Axis (Stealth Class)**: - Categories: High (encoded/meta), Medium (roleplay), Low (direct) - **Y-Axes**: - Primary (left, red): Detection Rate (%) – ranges from 0% to 75% - Secondary (right, blue): Attack Success Rate (%) – ranges from 60% to 90% - **Legend**: - Blue line: Detection Rate - Red bars: Attack Success Rate - **Title**: "Stealthiness vs. Detection Likelihood and ASR" ### Detailed Analysis 1. **Detection Rate (Blue Line)**: - **High (encoded/meta)**: ~43% detection - **Medium (roleplay)**: Peaks at ~75% detection - **Low (direct)**: Drops sharply to ~3% detection - **Trend**: Increases from High to Medium, then plummets at Low. 2. **Attack Success Rate (Red Bars)**: - **High (encoded/meta)**: ~21% success - **Medium (roleplay)**: ~39% success - **Low (direct)**: ~88% success - **Trend**: Gradually increases across all categories. ### Key Observations - **Inverse Relationship**: As stealth decreases (High → Low), Detection Rate drops significantly, while Attack Success Rate rises sharply. - **Medium Category Anomaly**: Medium stealth has the highest Detection Rate (75%) but only moderate Attack Success Rate (39%), suggesting roleplay may be highly detectable but less effective. - **Low Category Dominance**: Low stealth (direct) has the lowest Detection Rate (3%) and highest Attack Success Rate (88%), indicating direct methods are riskier but more effective when undetected. ### Interpretation The data implies that stealthier methods (High/encoded) are less likely to succeed but avoid detection, while direct methods (Low) maximize success at the cost of near-certain detection. The Medium category (roleplay) appears suboptimal, balancing moderate detection and success rates. This could reflect real-world scenarios where overt actions (Low) are high-risk/high-reward, while covert methods (High) prioritize evasion over impact. The Medium category’s outlier status warrants further investigation into roleplay mechanics or contextual factors.