List your company
ResearchFormerly WizWand

Visual Prompt Injection Defense on ImgHijack Specific String (test)

0Attack Success RateDIFFPURE
-4235077May 24, 2026
Updated 5mo ago

Evaluation results

MethodLinks
DIFFPURETYPE=l∞, SETTING=ϵ = 162026.050
DIFFPURETYPE=l∞, SETTING=ϵ = 322026.050
DIFFPURETYPE=l∞, SETTING=ϵ = 642026.050
DIFFPURETYPE=l∞, SETTING=ϵ = ∞2026.050
Gradient-guided Token MaskingTYPE=l∞, SETTING=ϵ = ∞2026.050
DIFFPURETYPE=STATIONARY PATCH, SETTING=SIZE = 80PX2026.050
Gradient-guided Token MaskingTYPE=STATIONARY PATCH, SETTING=SIZE = 80PX2026.050
DIFFPURETYPE=STATIONARY PATCH, SETTING=SIZE = 100PX2026.050
Gradient-guided Token MaskingTYPE=STATIONARY PATCH, SETTING=SIZE = 100PX2026.050
DIFFPURETYPE=MOVING PATCH, SETTING=SIZE = 320PX2026.050
DIFFPURETYPE=MOVING PATCH, SETTING=SIZE = 400PX2026.050
Gradient-guided Token MaskingTYPE=l∞, SETTING=ϵ = 322026.050.91
Gradient-guided Token MaskingTYPE=l∞, SETTING=ϵ = 162026.052.73
Gradient-guided Token MaskingTYPE=MOVING PATCH, SETTING=SIZE = 400PX2026.052.73
Gradient-guided Token MaskingTYPE=l∞, SETTING=ϵ = 642026.055.45
ECSOTYPE=MOVING PATCH, SETTING=SIZE = 400PX2026.058.18
W/O DEFENSETYPE=MOVING PATCH, SETTING=SIZE = 400PX2026.059.09
Gradient-guided Token MaskingTYPE=MOVING PATCH, SETTING=SIZE = 320PX2026.0513.64
ECSOTYPE=MOVING PATCH, SETTING=SIZE = 320PX2026.0521.82
ECSOTYPE=l∞, SETTING=ϵ = ∞2026.0534.55
ECSOTYPE=STATIONARY PATCH, SETTING=SIZE = 80PX2026.0534.55
ECSOTYPE=STATIONARY PATCH, SETTING=SIZE = 100PX2026.0534.55
ECSOTYPE=l∞, SETTING=ϵ = 162026.0535.45
ECSOTYPE=l∞, SETTING=ϵ = 322026.0535.45
ECSOTYPE=l∞, SETTING=ϵ = 642026.0535.45
W/O DEFENSETYPE=MOVING PATCH, SETTING=SIZE = 320PX2026.0548.18
W/O DEFENSETYPE=l∞, SETTING=ϵ = 162026.05100
W/O DEFENSETYPE=l∞, SETTING=ϵ = 322026.05100
W/O DEFENSETYPE=l∞, SETTING=ϵ = 642026.05100
W/O DEFENSETYPE=l∞, SETTING=ϵ = ∞2026.05100
W/O DEFENSETYPE=STATIONARY PATCH, SETTING=SIZE = 80PX2026.05100
W/O DEFENSETYPE=STATIONARY PATCH, SETTING=SIZE = 100PX2026.05100