Prompt Injection Defense on Indirect Prompt Injection Head 1.0 benchmark leaderboard · SOTA2 Research

Prompt Injection Defense on Indirect Prompt Injection Head 1.0

0.11ASR NaiveSegmentation removal method

Evaluation Results

Method
Segmentation removal method2025.02	0.11	0.11	0.11	7.44	0.11
Extraction removal method2025.02	0.22	8.22	1.44	19.77	16
Extraction removal method2025.02	0.33	6.77	1	12.66	13.88
Segmentation removal method2025.02	0.33	0.11	0.22	14.11	0.11
StruQ2025.02	0.44	2.33	0.22	0.22	1.77
Segmentation removal method2025.02	0.44	0.22	0.33	10.88	0.11
Extraction removal method2025.02	1.66	8.33	1.77	26.11	17.22
Instructional2025.02	2.22	12	6	8.11	18.33
Sandwich2025.02	2.77	8.22	8.22	12.44	11.33
StruQ2025.02	3.33	3.44	0.77	0.77	1.77
StruQ2025.02	3.55	0.55	1.66	9.11	12.77
None2025.02	4	45.11	14	50.22	63.77
None2025.02	4.11	38.77	12.66	33.33	54.44
Instructional2025.02	4.44	18.44	10.44	6	23.11
Sandwich2025.02	5.33	8.66	12.55	11.77	11.55
Sandwich2025.02	19	19.77	19.33	15.22	13.66
Instructional2025.02	24.44	28.22	24.55	46.55	34.11
None2025.02	26.77	42.11	27.88	63.44	59.55