Multimodal Jailbreak Defense on MIS-Hard
2.68ASRPRISM
Evaluation Results
| Method | Links | |
|---|---|---|
| PRISMBackbone Model=Qwen3-VL2025.08 | 2.68 | |
| PRISMModel=Qwen3-VL2025.08 | 2.68 | |
| PRISMBackbone Model=Qwen2.5-VL2025.08 | 6.34 | |
| PRISMModel=Qwen2.5-VL2025.08 | 6.34 | |
| NDBackbone Model=Qwen3-VL2025.08 | 12.78 | |
| NDModel=Qwen3-VL, Note=no-defense baseline2025.08 | 12.78 | |
| PRISMBackbone Model=LLaVA-1.62025.08 | 16.02 | |
| PRISMModel=LLaVA-1.62025.08 | 16.02 | |
| NDBackbone Model=LLaVA-1.62025.08 | 62.97 | |
| NDModel=LLaVA-1.6, Note=no-defense baseline2025.08 | 62.97 | |
| NDBackbone Model=Qwen2.5-VL2025.08 | 64.16 | |
| NDModel=Qwen2.5-VL, Note=no-defense baseline2025.08 | 64.16 |