Visual Prompt Injection Defense on ImgHijack Specific String
0Attack Success RateGradient-guided Token Masking
Evaluation results
| Method | Links | |
|---|---|---|
| Gradient-guided Token MaskingType=l∞, Setting=ϵ = ∞2026.05 | 0 | |
| Gradient-guided Token MaskingType=STATIONARY PATCH, Setting=SIZE = 80PX2026.05 | 0 | |
| Gradient-guided Token MaskingType=STATIONARY PATCH, Setting=SIZE = 100PX2026.05 | 0 | |
| Gradient-guided Token MaskingType=l∞, Setting=ϵ = 322026.05 | 0.91 | |
| Gradient-guided Token MaskingType=l∞, Setting=ϵ = 162026.05 | 2.73 | |
| Gradient-guided Token MaskingType=MOVING PATCH, Setting=SIZE = 400PX2026.05 | 2.73 | |
| Gradient-guided Token MaskingType=l∞, Setting=ϵ = 642026.05 | 5.45 | |
| W/O DefenseType=MOVING PATCH, Setting=SIZE = 400PX2026.05 | 9.09 | |
| Gradient-guided Token MaskingType=MOVING PATCH, Setting=SIZE = 320PX2026.05 | 13.64 | |
| W/O DefenseType=MOVING PATCH, Setting=SIZE = 320PX2026.05 | 48.18 | |
| W/O DefenseType=l∞, Setting=ϵ = 162026.05 | 100 | |
| W/O DefenseType=l∞, Setting=ϵ = 322026.05 | 100 | |
| W/O DefenseType=l∞, Setting=ϵ = 642026.05 | 100 | |
| W/O DefenseType=l∞, Setting=ϵ = ∞2026.05 | 100 | |
| W/O DefenseType=STATIONARY PATCH, Setting=SIZE = 80PX2026.05 | 100 | |
| W/O DefenseType=STATIONARY PATCH, Setting=SIZE = 100PX2026.05 | 100 |