InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models
(-- look at that perf/latency pareto frontier. game on!)
"State-of-the-art models suffer from over-defense issues, with accuracy dropping close to random guessing levels (60%). We propose InjecGuard, a novel prompt guard model that incorporates a new training strategy, Mitigating Over-defense for Free (MOF). InjecGuard demonstrates state-of-the-art performance on diverse benchmarks, surpassing the existing best model by 30.8%"
code:
paper: (not peer reviewed)