Prompt Injection Defense on Jailbreak APGD
1ASRGradient-guided Token Suppression
Evaluation results
| Method | Links | |
|---|---|---|
| Gradient-guided Token SuppressionPerturbation limit (ε)=162026.05 | 1 | |
| CIDERPerturbation limit (ε)=162026.05 | 6 | |
| GUARDPerturbation limit (ε)=162026.05 | 6 | |
| GUARDPerturbation limit (ε)=322026.05 | 6 | |
| Gradient-guided Token SuppressionPerturbation limit (ε)=322026.05 | 6 | |
| ECSOPerturbation limit (ε)=322026.05 | 13 | |
| ECSOPerturbation limit (ε)=162026.05 | 16 | |
| CIDERPerturbation limit (ε)=322026.05 | 27 | |
| ASTRAPerturbation limit (ε)=162026.05 | 29 | |
| ASTRAPerturbation limit (ε)=322026.05 | 32 | |
| W/O DEFENSEPerturbation limit (ε)=162026.05 | 80 | |
| W/O DEFENSEPerturbation limit (ε)=322026.05 | 97 |