Indirect Prompt Injection Defense on Video Modality (test)
38.5UIAinjectARGUS
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| ARGUSpost-filtering=disabled2025.12 | 38.5 | 37.6 | 0.8 | 0.9 | 6 | |
| ARGUSadaptive intervention=disabled2025.12 | 38 | 37.6 | 0.1 | 0.1 | 3 | |
| ARGUSvariant=full2025.12 | 37.8 | 37.6 | 0.1 | 0.1 | 6 | |
| ARGUSsearch=disabled2025.12 | 36.4 | 37.6 | 0.1 | 0.1 | 6 | |
| AT2025.12 | 35.9 | 37.2 | 1.6 | 1.8 | 0 | |
| Removal2025.12 | 32.5 | 32.9 | 1.5 | 1.7 | 574,121 | |
| No Defense2025.12 | 25.4 | 37.6 | 28.2 | 29.9 | 0 | |
| System Prompt2025.12 | 25.4 | 37 | 26.9 | 28.9 | 15 | |
| Ignore Prompt2025.12 | 21.8 | 36.1 | 32.9 | 35.1 | 3 | |
| Noise2025.12 | 18.7 | 23.3 | 9.6 | 12.8 | 2 |