Rerouting Detection on MMLU (test)
100AccuracyRerouteGuard
Evaluation results
| Method | Links | ||
|---|---|---|---|
| RerouteGuardAttack Scenario=Gray-box2026.01 | 100 | 100 | |
| RerouteGuardAttack Scenario=Box-free2026.01 | 100 | 100 | |
| RerouteGuardAttack Scenario=White-box2026.01 | 100 | 100 | |
| RerouteGuardAttack Scenario=Average2026.01 | 100 | 100 | |
| LlamaGuardAttack Scenario=Box-free2026.01 | 54 | 53 | |
| LlamaGuardAttack Scenario=White-box2026.01 | 54 | 54 | |
| PPLAttack Scenario=Gray-box2026.01 | 50 | 0 | |
| PPLAttack Scenario=Box-free2026.01 | 50 | 0 | |
| PPLAttack Scenario=White-box2026.01 | 50 | 0 | |
| PPLAttack Scenario=Average2026.01 | 50 | 0 | |
| PromptGuardAttack Scenario=Gray-box2026.01 | 50 | 67 | |
| PromptGuardAttack Scenario=Box-free2026.01 | 50 | 67 | |
| PromptGuardAttack Scenario=White-box2026.01 | 50 | 67 | |
| PromptGuardAttack Scenario=Average2026.01 | 50 | 67 | |
| LlamaGuardAttack Scenario=Average2026.01 | 50 | 51 | |
| LlamaGuardAttack Scenario=Gray-box2026.01 | 44 | 46 |