Information Retrieval on Passage Ret.
0.56ASRNo Defense
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| No DefenseAttack Type=Combined, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0.56 | — | |
| PromptGuardAttack Type=Combined, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0.56 | — | |
| PromptArmorAttack Type=Combined, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0.55 | — | |
| PIGuardAttack Type=Combined, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0.4 | — | |
| No DefenseAttack Type=Direct, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0.11 | — | |
| PromptArmorAttack Type=Direct, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0.11 | — | |
| PromptGuardAttack Type=Direct, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0.11 | — | |
| PIGuardAttack Type=Direct, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0.1 | — | |
| GPT-OSS-SafeguardAttack Type=Direct, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0.03 | — | |
| DataSentinelAttack Type=Direct, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0 | — | |
| DataSentinelAttack Type=Combined, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0 | — | |
| GPT-OSS-SafeguardAttack Type=Combined, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0 | — | |
| AgentWatcherAttack Type=Direct, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0 | — | |
| AgentWatcherAttack Type=Combined, Target LLM=Qwen-3-4B-Instruct-25072026.04 | 0 | — | |
| AgentWatcherAttack Type=Clean, Target LLM=Qwen-3-4B-Instruct-25072026.04 | — | 0.99 | |
| DataSentinelAttack Type=Clean, Target LLM=Qwen-3-4B-Instruct-25072026.04 | — | 0.08 | |
| GPT-OSS-SafeguardAttack Type=Clean, Target LLM=Qwen-3-4B-Instruct-25072026.04 | — | 1 | |
| No DefenseAttack Type=Clean, Target LLM=Qwen-3-4B-Instruct-25072026.04 | — | 1 | |
| PIGuardAttack Type=Clean, Target LLM=Qwen-3-4B-Instruct-25072026.04 | — | 0.88 | |
| PromptArmorAttack Type=Clean, Target LLM=Qwen-3-4B-Instruct-25072026.04 | — | 1 | |
| PromptGuardAttack Type=Clean, Target LLM=Qwen-3-4B-Instruct-25072026.04 | — | 1 |