Visual Prompt Injection Defense on ImgHijack Leak Context

0Attack Success Rate

Gradient-guided Token Masking

Updated 8d ago

Evaluation Results

Method	Links
Gradient-guided Token Masking 2026.05		0
Gradient-guided Token Masking 2026.05		0
Gradient-guided Token Masking 2026.05		0
Gradient-guided Token Masking 2026.05		0
Gradient-guided Token Masking 2026.05		0
Gradient-guided Token Masking 2026.05		0
W/O Defense 2026.05		0
Gradient-guided Token Masking 2026.05		0
DIFFPURE 2026.05		0
Gradient-guided Token Masking 2026.05		0
DIFFPURE 2026.05		0
Gradient-guided Token Masking 2026.05		0
DIFFPURE 2026.05		0
Gradient-guided Token Masking 2026.05		0
DIFFPURE 2026.05		0
Gradient-guided Token Masking 2026.05		0
DIFFPURE 2026.05		0
Gradient-guided Token Masking 2026.05		0
DIFFPURE 2026.05		0
Gradient-guided Token Masking 2026.05		0
W/O DEFENSE 2026.05		0
DIFFPURE 2026.05		0
ECSO 2026.05		0
Gradient-guided Token Masking 2026.05		0
DIFFPURE 2026.05		0
Gradient-guided Token Masking 2026.05		1.82
Gradient-guided Token Masking 2026.05		1.82
ECSO 2026.05		40.91
W/O Defense 2026.05		41.82
W/O DEFENSE 2026.05		41.82
W/O Defense 2026.05		67.27
W/O DEFENSE 2026.05		67.27
ECSO 2026.05		67.27
ECSO 2026.05		95.45
W/O Defense 2026.05		97.27
ECSO 2026.05		97.27
W/O DEFENSE 2026.05		97.27
W/O Defense 2026.05		98.18
W/O DEFENSE 2026.05		98.18
ECSO 2026.05		99.09
ECSO 2026.05		99.09
ECSO 2026.05		99.09
W/O Defense 2026.05		100
W/O Defense 2026.05		100
W/O Defense 2026.05		100
W/O DEFENSE 2026.05		100
W/O DEFENSE 2026.05		100
W/O DEFENSE 2026.05		100