Reasoning-Level Denial-of-Service on Email Agent
17Processing Delay (s)No Attack
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| No AttackModel=GPT-3.5-Turbo2026.05 | 17 | 1 | 95 | 93 | |
| No AttackModel=GPT-OSS-120B2026.05 | 28 | 1 | 96 | 96 | |
| No AttackModel=LLaMA-70B2026.05 | 30 | 1 | 95 | 95 | |
| OTora-AwareModel=GPT-3.5-Turbo2026.05 | 112 | 3.5 | 75 | 92 | |
| OTora-AgnosticModel=GPT-3.5-Turbo2026.05 | 135 | 4.2 | 63 | 90 | |
| OTora-ICL(Aware)Model=GPT-3.5-Turbo2026.05 | 138 | 4.6 | 81 | 93 | |
| OTora-ICL(Agnostic)Model=GPT-3.5-Turbo2026.05 | 170 | 5.7 | 53 | 88 | |
| OTora-Persistent (ours)Model=GPT-3.5-Turbo2026.05 | 182 | 5.3 | 80 | 93 | |
| OTora-AwareModel=GPT-OSS-120B2026.05 | 240 | 6.8 | 82 | 96 | |
| OTora-AwareModel=LLaMA-70B2026.05 | 245 | 7.1 | 84 | 95.5 | |
| OTora-ICL(Aware)Model=GPT-OSS-120B2026.05 | 260 | 7.4 | 91 | 96.1 | |
| OTora-AgnosticModel=GPT-OSS-120B2026.05 | 265 | 7.6 | 69 | 95.7 | |
| OTora-ICL(Aware)Model=LLaMA-70B2026.05 | 270 | 7.8 | 92 | 95.9 | |
| OTora-AgnosticModel=LLaMA-70B2026.05 | 275 | 8 | 72 | 95 | |
| OTora-ICL(Agnostic)Model=GPT-OSS-120B2026.05 | 310 | 10 | 56 | 95.4 | |
| OTora-Persistent (ours)Model=GPT-OSS-120B2026.05 | 320 | 9.3 | 89 | 96.2 | |
| OTora-ICL(Agnostic)Model=LLaMA-70B2026.05 | 325 | 10.5 | 58 | 94.6 | |
| OTora-Persistent (ours)Model=LLaMA-70B2026.05 | 335 | 9.9 | 91 | 96 |