Internal memory extraction attack detection on RAP WebShop
1AUROCMemPot
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| MemPotAttack=MEXTRA_Cosine2026.02 | 1 | 94 | 100 | 0 | |
| MemPotAttack=MEXTRA_Edit2026.02 | 1 | 100 | 100 | 0 | |
| MemPotAttack=MEXTRA_General2026.02 | 1 | 100 | 100 | 0 | |
| MemPotAttack=IKEA2026.02 | 1 | 100 | 100 | 0 | |
| AgentAttack=MEXTRA_Edit2026.02 | 0.81 | 30 | 30 | 0.96 | |
| ControlNetAttack=MEXTRA_General2026.02 | 0.73 | 0 | 36 | 0.08 | |
| AgentAttack=MEXTRA_General2026.02 | 0.72 | 12 | 12 | 0.91 | |
| ControlNetAttack=IKEA2026.02 | 0.71 | 6 | 34 | 0.1 | |
| ControlNetAttack=MEXTRA_Edit2026.02 | 0.59 | 2 | 16 | 0.08 | |
| AgentAttack=MEXTRA_Cosine2026.02 | 0.51 | 2 | 2 | 0.97 | |
| AgentAttack=IKEA2026.02 | 0.47 | 2 | 2 | 0.96 | |
| ControlNetAttack=MEXTRA_Cosine2026.02 | 0.45 | 0 | 10 | 0.08 |