Agent Defense on S2Bench
0.119Query ASRSpider-Sense
Evaluation Results
| Method | Links | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Spider-SenseDefense Category=Guardrail-based, Backbone Model=Qwen-max2026.02 | 0.119 | 0.059 | 0.2 | 0.167 | 0.108 | 0.083 | 0.11 | 0.095 | 0.136 | 0.104 | 23.4 | |
| Spider-SenseDefense Category=Guardrail-based, Backbone Model=Claude-3.52026.02 | 0.123 | 0.141 | 0.177 | 0.302 | 0.024 | 0.096 | 0.075 | 0.193 | 0.095 | 0.191 | 41.7 | |
| Claude-3.5Defense Category=Model-based, Backbone Model=Claude-3.52026.02 | 0.296 | 0.647 | 0.642 | 0.807 | 0.233 | 0.308 | 0.227 | 0.262 | 0.352 | 0.514 | 30.5 | |
| AGrailDefense Category=Guardrail-based, Backbone Model=Qwen-max2026.02 | 0.377 | 0.171 | 0.632 | 0.376 | 0.159 | 0.136 | 0.193 | 0.295 | 0.33 | 0.249 | 103.9 | |
| gpt-oss-safeguard-20bDefense Category=Guardrail-based, Backbone Model=gpt-oss-safeguard-20b2026.02 | 0.436 | 0.49 | 0.599 | 0.672 | 0.509 | 0.413 | 0.459 | 0.567 | 0.511 | 0.538 | 50.8 | |
| GuardAgentDefense Category=Guardrail-based, Backbone Model=Qwen-max2026.02 | 0.5 | 0.133 | 0.601 | 0.404 | 0.176 | 0.11 | 0.146 | 0.214 | 0.333 | 0.225 | 75.9 | |
| AGrailDefense Category=Guardrail-based, Backbone Model=Claude-3.52026.02 | 0.5 | 0.645 | 0.596 | 0.417 | 0.2 | 0.205 | 0.1 | 0.31 | 0.326 | 0.382 | 121.4 | |
| LLaMA-Guard 3Defense Category=Guardrail-based, Backbone Model=LLaMA-Guard 32026.02 | 0.578 | 0.533 | 0.5 | 0.571 | 0.469 | 0.3 | 0.309 | 0.662 | 0.451 | 0.503 | 47.8 | |
| Qwen-MaxDefense Category=Model-based, Backbone Model=Qwen-Max2026.02 | 0.6 | 0.507 | 0.69 | 0.504 | 0.4 | 0.205 | 0.188 | 0.208 | 0.455 | 0.353 | 21.6 | |
| GuardAgentDefense Category=Guardrail-based, Backbone Model=Claude-3.52026.02 | 0.6 | 0.198 | 0.535 | 0.508 | 0.133 | 0.236 | 0.1 | 0.519 | 0.307 | 0.364 | 90.6 |