Reasoning-Level Denial-of-Service on OS Agent
20Delay (s)No Attack
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| No AttackModel=GPT-3.5-Turbo2026.05 | 20 | 1 | 93 | 91 | |
| No AttackModel=GPT-OSS-120B2026.05 | 34 | 1 | 95.4 | 95.8 | |
| No AttackModel=LLaMA-70B2026.05 | 38 | 1 | 94 | 95 | |
| OTora-AwareModel=GPT-3.5-Turbo2026.05 | 125 | 3.9 | 70 | 91 | |
| OTora-AgnosticModel=GPT-3.5-Turbo2026.05 | 150 | 4.6 | 58 | 89 | |
| OTora-ICL(Aware)Model=GPT-3.5-Turbo2026.05 | 155 | 5.1 | 75 | 92 | |
| OTora-ICL(Agnostic)Model=GPT-3.5-Turbo2026.05 | 185 | 6.2 | 48 | 86 | |
| OTora-Persistent (ours)Model=GPT-3.5-Turbo2026.05 | 200 | 5.7 | 73 | 91 | |
| OTora-AwareModel=GPT-OSS-120B2026.05 | 255 | 7.3 | 78 | 95.9 | |
| OTora-AwareModel=LLaMA-70B2026.05 | 265 | 7.7 | 80 | 95.3 | |
| OTora-ICL(Aware)Model=GPT-OSS-120B2026.05 | 280 | 8 | 86 | 96 | |
| OTora-AgnosticModel=GPT-OSS-120B2026.05 | 285 | 8.2 | 65 | 95.6 | |
| OTora-AgnosticModel=LLaMA-70B2026.05 | 295 | 8.6 | 68 | 94.8 | |
| OTora-ICL(Aware)Model=LLaMA-70B2026.05 | 295 | 8.5 | 88 | 95.6 | |
| OTora-ICL(Agnostic)Model=GPT-OSS-120B2026.05 | 335 | 10.8 | 50 | 95.2 | |
| OTora-Persistent (ours)Model=GPT-OSS-120B2026.05 | 345 | 10 | 84 | 96 | |
| OTora-ICL(Agnostic)Model=LLaMA-70B2026.05 | 350 | 11.2 | 52 | 94.2 | |
| OTora-Persistent (ours)Model=LLaMA-70B2026.05 | 360 | 10.8 | 86 | 95.7 |