Indirect Prompt Injection Sanitization on IPI Sanitization ChatGLM
0Naive ASR (%)RENNERVATE
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| RENNERVATE2025.12 | 0 | 0 | 0.9 | 0 | 0 | 0.1 | |
| DeepSeek-Loc2025.12 | 14.8 | 7.34 | 1.8 | 46.4 | 25.5 | 22.1 | |
| GPT-Loc2025.12 | 15.7 | 7.34 | 6.31 | 16.1 | 9.46 | 10.3 | |
| Spotlighting2025.12 | 19.4 | 22.9 | 28.8 | 60.7 | 43.2 | 38.8 | |
| Sandwich2025.12 | 38 | 33.9 | 50.5 | 50.9 | 45 | 44.3 | |
| Instructional2025.12 | 50 | 52.3 | 69.4 | 82.1 | 77.9 | 71.6 | |
| None2025.12 | 61.1 | 63.3 | 82 | 92.9 | 94.5 | 85.9 |