SOTA Prompt Injection Defense benchmarks and papers with code

Benchmarks

Dataset Name	SOTA Method	Metric
Inj-SQuAD	StruQ	Combined ASR0.11	123	3mo ago
AgentDojo R1–R3	RETA	Attack Success Rate (ASR)1.76	36	1mo ago
Three Suites Aggregated 1.0 (test)	DeepSeek-v2-Flash	Clean Utility89.5	32	1mo ago
SEP		ASR0	24	1mo ago
OPI (Open-Prompt-Injection)	DataSentinel	ASR0	24	1mo ago
AgentDojo New Attack 2		Utility under Attack (UA)89.78	23	4mo ago
AgentDojo New Attack 1		Utility under Attack89.88	23	4mo ago
AgentDojo Important Instructions		Utility under Attack0.9041	23	4mo ago
AgentDojo No Attack		Benign Utility92.78	23	4mo ago
AgentDojo	PIM	Benign Utility89.99	22	1mo ago
Indirect Prompt Injection Tail 1.0	Extraction removal method	ASR Naive0.11	18	4mo ago
Indirect Prompt Injection Middle 1.0	StruQ	Naive ASR0.11	18	4mo ago
Indirect Prompt Injection Head 1.0	Segmentation removal method	ASR Naive0.11	18	4mo ago
Multi-Agent System (MAS) Topologies Average of Chain, Tree, Star, Random	SAIGuard	Accuracy94.26	16	1mo ago
WASP	Attn.Tracker	Attack Success Rate (ASR)0	16	3mo ago
CSQA	INFA-GUARD	ASR@313.4	16	4mo ago
PI (CSQA) random topology		ASR @150	16	4mo ago
GSM8K PI (Prompt Injection) (test)		ASR@13.3	16	4mo ago
Prompt Injection Attacks (test)	Ours-Ignore	Naive ASR0.9	16	4mo ago
Adaptive Prompt Injection (train)	ACT	Attack Success Rate (ASR)32	15	1mo ago
Adaptive Prompt Injection (test)	ACT	Attack Success Rate (ASR)37	15	1mo ago
Indirect Prompt Injection (IPI) Attack Suite		Total ASR0	12	18d ago
Jailbreak MI-FGSM		Attack Success Rate4	12	2mo ago
Jailbreak APGD	Gradient-guided Token Suppression	ASR1	12	2mo ago
InjecAgent	DataFilter	ASR0	12	1mo ago

Showing 25 of 58 rows