GEO Attack Detection on ESCI Pipeline (≈1:9) (test)
0FDRPrompt-Guard-2-86M
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Prompt-Guard-2-86MAttack=IOA2026.05 | 0 | 93.2 | |
| Prompt-Guard-2-86MAttack=Review2026.05 | 0 | 0.5 | |
| Prompt-Guard-2-86MAttack=Reason2026.05 | 0 | 0 | |
| Prompt-Guard-2-86MAttack=TAP2026.05 | 0 | 0 | |
| Prompt-Guard-2-86MAttack=SRP2026.05 | 0 | 5.9 | |
| Prompt-Guard-2-86MAttack=RAF2026.05 | 0 | 1.3 | |
| Prompt-Guard-2-86MAttack=STS2026.05 | 0 | 79.5 | |
| Qwen3Guard-Gen-8BAttack=TAP2026.05 | 18.6 | 38.5 | |
| PG-FTAttack=Reason2026.05 | 25.2 | 85.2 | |
| PG-FTAttack=Review2026.05 | 25.9 | 84.4 | |
| PG-FTAttack=SRP2026.05 | 28.7 | 82.6 | |
| PG-FTAttack=TAP2026.05 | 29.2 | 78.9 | |
| PG-FTAttack=STS2026.05 | 29.7 | 82.1 | |
| PG-FTAttack=RAF2026.05 | 31.7 | 76.2 | |
| PG-FTAttack=IOA2026.05 | 33.8 | 79.2 | |
| Llama-Guard-4-12BAttack=STS2026.05 | 63.5 | 45.9 | |
| Qwen3Guard-Gen-8BAttack=STS2026.05 | 81.2 | 1.8 | |
| Qwen3Guard-Gen-8BAttack=IOA2026.05 | 81.9 | 2.1 | |
| Llama-Guard-4-12BAttack=SRP2026.05 | 87.2 | 13.8 | |
| Qwen3Guard-Gen-8BAttack=Review2026.05 | 87.5 | 1 | |
| Qwen3Guard-Gen-8BAttack=Reason2026.05 | 87.5 | 1 | |
| Qwen3Guard-Gen-8BAttack=SRP2026.05 | 87.5 | 1.1 | |
| Qwen3Guard-Gen-8BAttack=RAF2026.05 | 87.5 | 1.1 | |
| Llama-Guard-4-12BAttack=RAF2026.05 | 88.7 | 12.1 | |
| Llama-Guard-4-12BAttack=IOA2026.05 | 89.5 | 12.3 | |
| Llama-Guard-4-12BAttack=Review2026.05 | 92.7 | 7.1 | |
| Llama-Guard-4-12BAttack=Reason2026.05 | 93 | 6.8 | |
| Llama-Guard-4-12BAttack=TAP2026.05 | 93.5 | 8 |