Rerouting Mitigation on D (test)
100Gray-box ASRNo-defense
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| No-defenseRouter=R_CLS2026.01 | 100 | 100 | 100 | 100 | |
| Multi-RouterRouter=R_CLS2026.01 | 99 | 100 | 100 | 100 | |
| Multi-RouterRouter=R_MF2026.01 | 99 | 100 | 100 | 100 | |
| Multi-RouterRouter=R_SW2026.01 | 99 | 100 | 100 | 100 | |
| Multi-RouterRouter=R_LLM2026.01 | 99 | 100 | 100 | 100 | |
| No-defenseRouter=R_SW2026.01 | 96 | 100 | 99 | 98 | |
| No-defenseRouter=R_MF2026.01 | 92 | 98 | 88 | 93 | |
| No-defenseRouter=R_LLM2026.01 | 86 | 93 | 100 | 93 | |
| LlamaGuardRouter=R_SW2026.01 | 50 | 48 | 47 | 48 | |
| LlamaGuardRouter=R_MF2026.01 | 49 | 47 | 41 | 46 | |
| LlamaGuardRouter=R_CLS2026.01 | 48 | 47 | 55 | 50 | |
| LlamaGuardRouter=R_LLM2026.01 | 45 | 44 | 49 | 46 | |
| PPLRouter=R_CLS2026.01 | 34 | 100 | 6 | 47 | |
| PPLRouter=R_SW2026.01 | 34 | 100 | 7 | 47 | |
| PPLRouter=R_MF2026.01 | 33 | 98 | 9 | 47 | |
| PPLRouter=R_LLM2026.01 | 27 | 93 | 8 | 43 | |
| PromptGuardRouter=R_SW2026.01 | 4 | 0 | 11 | 5 | |
| PromptGuardRouter=R_MF2026.01 | 3 | 0 | 9 | 4 | |
| PromptGuardRouter=R_LLM2026.01 | 3 | 0 | 10 | 4 | |
| PromptGuardRouter=R_CLS2026.01 | 2 | 0 | 9 | 4 | |
| RerouteGuardRouter=R_CLS2026.01 | 0 | 0 | 0 | 0 | |
| RerouteGuardRouter=R_MF2026.01 | 0 | 0 | 0 | 0 | |
| RerouteGuardRouter=R_SW2026.01 | 0 | 0 | 0 | 0 | |
| RerouteGuardRouter=R_LLM2026.01 | 0 | 0 | 0 | 0 |