Attack Detection on Benign Samples 105K sample set
40Benign FPRPromptGuard 2
Evaluation results
| Method | Links | |
|---|---|---|
| PromptGuard 2acronym=PG2026.02 | 40 | |
| LlamaGuardacronym=LG2026.02 | 300 | |
| Llama-as-Judgeacronym=LJ, prompting=zero-shot2026.02 | 440 | |
| LogReg (Ours)input=raw activations, evaluation_regime=LODO2026.02 | 650 |