Visual Prompt Injection Defense on ImgHijack Specific String (test)

0Attack Success Rate

DIFFPURE

Updated 8d ago

Evaluation Results

Method	Links
DIFFPURE 2026.05		0
DIFFPURE 2026.05		0
DIFFPURE 2026.05		0
DIFFPURE 2026.05		0
Gradient-guided Token Masking 2026.05		0
DIFFPURE 2026.05		0
Gradient-guided Token Masking 2026.05		0
DIFFPURE 2026.05		0
Gradient-guided Token Masking 2026.05		0
DIFFPURE 2026.05		0
DIFFPURE 2026.05		0
Gradient-guided Token Masking 2026.05		0.91
Gradient-guided Token Masking 2026.05		2.73
Gradient-guided Token Masking 2026.05		2.73
Gradient-guided Token Masking 2026.05		5.45
ECSO 2026.05		8.18
W/O DEFENSE 2026.05		9.09
Gradient-guided Token Masking 2026.05		13.64
ECSO 2026.05		21.82
ECSO 2026.05		34.55
ECSO 2026.05		34.55
ECSO 2026.05		34.55
ECSO 2026.05		35.45
ECSO 2026.05		35.45
ECSO 2026.05		35.45
W/O DEFENSE 2026.05		48.18
W/O DEFENSE 2026.05		100
W/O DEFENSE 2026.05		100
W/O DEFENSE 2026.05		100
W/O DEFENSE 2026.05		100
W/O DEFENSE 2026.05		100
W/O DEFENSE 2026.05		100