LLM Attack Effectiveness on Gemma3 12B-it
0.13TTFT (s)Benign
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| Benignmode=No Attack2026.02 | 0.13 | 0.21 | 68 | 76.28 | 0 | 0 | — | |
| Engorgio2026.02 | 0.13 | 0.2 | 68.26 | 77.22 | 0 | 2,221 | 0.83 | |
| LoopLLM2026.02 | 3.46 | 36.83 | 126.04 | 193.95 | 3,414 | 899 | 0.71 | |
| ExtendAttack2026.02 | 10.55 | 52.71 | 163.5 | 680 | 3,179 | 684 | 0.68 | |
| F&Sinput=plain-text2026.02 | 97.83 | 167.73 | 244.29 | 3,544.8 | 1,367 | 302 | 0.67 | |
| F&Sinput=ExtendAttack2026.02 | 104.5 | 178.36 | 158.57 | 1,453.84 | 1,380 | 555 | 0.46 |