Prompt Injection Defense on OpenPromptInjection Direct Injection
100BUSandwich
Evaluation Results
| Method | Links | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| SandwichBackbone=GPT-4o2026.04 | 100 | 93.88 | 91 | 90.29 | 56.37 | 98.1 | 93.18 | 72.4 | 91.27 | 20.15 | 51.44 | 94.76 | 94.37 | 94.92 | 93.24 | |
| No DefenseBackbone=GPT-4o2026.04 | 94.25 | 96.25 | 97 | 71.12 | 83.28 | 98.27 | 97 | 46.27 | 91 | 0 | 88.26 | 98.63 | 91.95 | 88.97 | 95.98 | |
| InstructionalBackbone=GPT-4o2026.04 | 93.75 | 89.28 | 84 | 43.14 | 81.19 | 94.28 | 87.29 | 30.16 | 86.09 | 0 | 68.34 | 96.98 | 82.2 | 88.16 | 74.97 | |
| ReminderBackbone=GPT-4o2026.04 | 93.25 | 98.19 | 91 | 87.29 | 85.56 | 96.09 | 93.95 | 82.08 | 90.52 | 0 | 85.09 | 95.08 | 76.79 | 74.38 | 54.24 | |
| IsolationBackbone=GPT-4o2026.04 | 93.16 | 100 | 62 | 40.95 | 83.29 | 98.18 | 83 | 57.78 | 85.2 | 0.01 | 67.1 | 95.66 | 21.95 | 90.07 | 88.3 | |
| AgentVisorBackbone=GPT-4o2026.04 | 91.35 | 87.56 | 0 | 74.38 | 0 | 93.15 | 0 | 90 | 0 | 76 | 0 | 83.14 | 0 | 88.24 | 0 | |
| DeBERTaBackbone=GPT-4o2026.04 | 91.25 | 84.28 | 86.35 | 86.96 | 82 | 98.31 | 94.95 | 62.2 | 96.75 | 0 | 88.87 | 95.75 | 93.78 | 92.3 | 86.37 | |
| DataSentinelBackbone=GPT-4o2026.04 | 89.17 | 0 | 0 | 0.15 | 3.1 | 0 | 0 | 0 | 1 | 0 | 3 | 3.25 | 3.64 | 0 | 0 | |
| SpotlightBackbone=GPT-4o2026.04 | 87.35 | 85 | 2 | 90.05 | 7.16 | 92.08 | 0 | 63.2 | 0 | 71.08 | 0.12 | 88.85 | 4.16 | 77.16 | 6.08 |