Visual Prompt Injection Defense on ImgHijack Specific String (test)
0Attack Success RateDIFFPURE
Evaluation Results
| Method | Links | |
|---|---|---|
| DIFFPURETYPE=l∞, SETTING=ϵ = 162026.05 | 0 | |
| DIFFPURETYPE=l∞, SETTING=ϵ = 322026.05 | 0 | |
| DIFFPURETYPE=l∞, SETTING=ϵ = 642026.05 | 0 | |
| DIFFPURETYPE=l∞, SETTING=ϵ = ∞2026.05 | 0 | |
| Gradient-guided Token MaskingTYPE=l∞, SETTING=ϵ = ∞2026.05 | 0 | |
| DIFFPURETYPE=STATIONARY PATCH, SETTING=SIZE = 80PX2026.05 | 0 | |
| Gradient-guided Token MaskingTYPE=STATIONARY PATCH, SETTING=SIZE = 80PX2026.05 | 0 | |
| DIFFPURETYPE=STATIONARY PATCH, SETTING=SIZE = 100PX2026.05 | 0 | |
| Gradient-guided Token MaskingTYPE=STATIONARY PATCH, SETTING=SIZE = 100PX2026.05 | 0 | |
| DIFFPURETYPE=MOVING PATCH, SETTING=SIZE = 320PX2026.05 | 0 | |
| DIFFPURETYPE=MOVING PATCH, SETTING=SIZE = 400PX2026.05 | 0 | |
| Gradient-guided Token MaskingTYPE=l∞, SETTING=ϵ = 322026.05 | 0.91 | |
| Gradient-guided Token MaskingTYPE=l∞, SETTING=ϵ = 162026.05 | 2.73 | |
| Gradient-guided Token MaskingTYPE=MOVING PATCH, SETTING=SIZE = 400PX2026.05 | 2.73 | |
| Gradient-guided Token MaskingTYPE=l∞, SETTING=ϵ = 642026.05 | 5.45 | |
| ECSOTYPE=MOVING PATCH, SETTING=SIZE = 400PX2026.05 | 8.18 | |
| W/O DEFENSETYPE=MOVING PATCH, SETTING=SIZE = 400PX2026.05 | 9.09 | |
| Gradient-guided Token MaskingTYPE=MOVING PATCH, SETTING=SIZE = 320PX2026.05 | 13.64 | |
| ECSOTYPE=MOVING PATCH, SETTING=SIZE = 320PX2026.05 | 21.82 | |
| ECSOTYPE=l∞, SETTING=ϵ = ∞2026.05 | 34.55 | |
| ECSOTYPE=STATIONARY PATCH, SETTING=SIZE = 80PX2026.05 | 34.55 | |
| ECSOTYPE=STATIONARY PATCH, SETTING=SIZE = 100PX2026.05 | 34.55 | |
| ECSOTYPE=l∞, SETTING=ϵ = 162026.05 | 35.45 | |
| ECSOTYPE=l∞, SETTING=ϵ = 322026.05 | 35.45 | |
| ECSOTYPE=l∞, SETTING=ϵ = 642026.05 | 35.45 | |
| W/O DEFENSETYPE=MOVING PATCH, SETTING=SIZE = 320PX2026.05 | 48.18 | |
| W/O DEFENSETYPE=l∞, SETTING=ϵ = 162026.05 | 100 | |
| W/O DEFENSETYPE=l∞, SETTING=ϵ = 322026.05 | 100 | |
| W/O DEFENSETYPE=l∞, SETTING=ϵ = 642026.05 | 100 | |
| W/O DEFENSETYPE=l∞, SETTING=ϵ = ∞2026.05 | 100 | |
| W/O DEFENSETYPE=STATIONARY PATCH, SETTING=SIZE = 80PX2026.05 | 100 | |
| W/O DEFENSETYPE=STATIONARY PATCH, SETTING=SIZE = 100PX2026.05 | 100 |