LLM Cascade Performance under Adversarial Attack on LLM Cascade Configuration baseline (test)
84.5Cascade AccuracyInitial cascade
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| Initial cascadeConfiguration=(19)2026.05 | 84.5 | 59.1 | 54.5 | 0.6 | 85 | 102 | 85 | |
| Initial cascadeConfiguration=(15)2026.05 | 83.5 | 37.5 | 71 | 3.4 | 85 | 51.8 | 87 | |
| Initial cascadeConfiguration=(17)2026.05 | 82.5 | 19.4 | 67 | 0.9 | 84 | 49.8 | 82.5 | |
| Initial cascadeConfiguration=(1)2026.05 | 78 | 10.37 | 48 | 0.51 | 76 | 25.19 | 86.5 | |
| Joint-target AttackAttack Parameter (p)=0, Transfer Path=(8)→(15)2026.05 | 51 | 29.1 | 50 | 3.4 | 74 | 53.2 | 59 | |
| Joint-target AttackAttack Parameter (p)=0, Transfer Path=(8)→(17)2026.05 | 49.5 | 16.7 | 36 | 1.1 | 74 | 53.2 | 67 | |
| Joint-target AttackAttack Parameter (p)=0, Transfer Path=(1)→(19)2026.05 | 45.5 | 40.8 | 34.5 | 0.7 | 51 | 113.4 | 59.5 | |
| Joint-target AttackAttack Parameter (p)=0, Transfer Path=(1)→(17)2026.05 | 43.5 | 15.6 | 29 | 1 | 69 | 55.5 | 52 | |
| Joint-target AttackAttack Parameter (p)=0, Transfer Path=(1)→(1)2026.05 | 21 | 9.3 | 16 | 0.63 | 63 | 25.47 | 18 |