Reasoning-Level Denial-of-Service on WebShop Agent
18Delay (s)No Attack
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| No AttackModel=GPT-3.5-Turbo2026.05 | 18 | 1 | 94 | 92 | |
| No AttackModel=GPT-OSS-120B2026.05 | 28 | 1 | 96 | 96 | |
| No AttackModel=LLaMA-70B2026.05 | 30 | 1 | 95 | 95 | |
| OTora-AwareModel=GPT-3.5-Turbo2026.05 | 105 | 3.3 | 78 | 93 | |
| OTora-AgnosticModel=GPT-3.5-Turbo2026.05 | 125 | 4 | 66 | 91 | |
| OTora-ICL(Aware)Model=GPT-3.5-Turbo2026.05 | 130 | 4.4 | 84 | 94 | |
| OTora-ICL(Agnostic)Model=GPT-3.5-Turbo2026.05 | 160 | 5.4 | 56 | 89 | |
| OTora-Persistent (ours)Model=GPT-3.5-Turbo2026.05 | 170 | 5.1 | 82 | 94 | |
| OTora-AwareModel=GPT-OSS-120B2026.05 | 230 | 6.6 | 84 | 96.1 | |
| OTora-AwareModel=LLaMA-70B2026.05 | 235 | 6.9 | 86 | 95.6 | |
| OTora-ICL(Aware)Model=GPT-OSS-120B2026.05 | 250 | 7.2 | 92 | 96.2 | |
| OTora-AgnosticModel=GPT-OSS-120B2026.05 | 255 | 7.4 | 71 | 95.8 | |
| OTora-ICL(Aware)Model=LLaMA-70B2026.05 | 260 | 7.6 | 93 | 96 | |
| OTora-AgnosticModel=LLaMA-70B2026.05 | 265 | 7.8 | 74 | 95.1 | |
| OTora-ICL(Agnostic)Model=GPT-OSS-120B2026.05 | 300 | 9.7 | 58 | 95.5 | |
| OTora-Persistent (ours)Model=GPT-OSS-120B2026.05 | 310 | 9.1 | 90 | 96.3 | |
| OTora-ICL(Agnostic)Model=LLaMA-70B2026.05 | 315 | 10.2 | 60 | 94.7 | |
| OTora-Persistent (ours)Model=LLaMA-70B2026.05 | 325 | 9.7 | 92 | 96.1 |