Visual Prompt Injection Defense on Visual Prompt Injection
3.28Inference Time (s)W/O DEFENSE
Evaluation results
| Method | Links | ||
|---|---|---|---|
| W/O DEFENSESingle Inference step=-, No Additional models/data=-, Training-free=-, Target-agnostic=-2026.05 | 3.28 | 15.66 | |
| GTMSingle Inference step=√, No Additional models/data=√, Training-free=√, Target-agnostic=√2026.05 | 3.5 | 16.96 | |
| ASTRASingle Inference step=√, No Additional models/data=√, Training-free=×, Target-agnostic=×2026.05 | 5.48 | 16.62 | |
| DIFFPURESingle Inference step=√, No Additional models/data=×, Training-free=√, Target-agnostic=√2026.05 | 7.22 | 18.33 | |
| CIDERSingle Inference step=√, No Additional models/data=√, Training-free=×, Target-agnostic=×2026.05 | 8.78 | 18.49 | |
| ECSOSingle Inference step=×, No Additional models/data=√, Training-free=√, Target-agnostic=×2026.05 | 8.87 | 15.66 | |
| GUARDSingle Inference step=×, No Additional models/data=√, Training-free=√, Target-agnostic=×2026.05 | 25.35 | 15.67 |