-
Notifications
You must be signed in to change notification settings - Fork 1
/
eval_run.sh
executable file
·120 lines (93 loc) · 13.3 KB
/
eval_run.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# EIA
# Objective: Leak user specific PII
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# Mirror Injection
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_copy_most_top"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_copy_most_bot"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_copy_near_top_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_copy_near_top_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_copy_near_top_2"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_copy_near_bot_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_copy_near_bot_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_copy_near_bot_2"
# Form Injection (aria)
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type1_most_top"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type1_most_bot"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type1_near_top_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type1_near_top_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type1_near_top_2"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type1_near_bot_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type1_near_bot_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type1_near_bot_2"
# Form Injection (text)
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type0_most_top"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type0_most_bot"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type0_near_top_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type0_near_top_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type0_near_top_2"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type0_near_bot_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type0_near_bot_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type0_near_bot_2"
# Mirror Injection + Systemsive defensive prompt
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_grounding_copy_most_top"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_grounding_copy_most_bot"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_grounding_copy_near_top_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_grounding_copy_near_top_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_grounding_copy_near_top_2"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_grounding_copy_near_bot_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_grounding_copy_near_bot_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_grounding_copy_near_bot_2"
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# EIA
# Objective: Leak full user request
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# evaluate the ASR
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_most_top"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_most_bot"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_near_top_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_near_top_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_near_top_2"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_near_bot_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_near_bot_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_near_bot_2"
# evaluate the ASR_o
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_most_top" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_most_bot" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_near_top_0" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_near_top_1" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_near_top_2" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_near_bot_0" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_near_bot_1" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_grounding_form_type2_near_bot_2" --injected_element_only
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# Relaxed-EIA
# Objective: Leak full user request
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# Evaluate the ASR
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_most_top"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_most_bot"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_near_top_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_near_top_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_near_top_2"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_near_bot_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_near_bot_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_near_bot_2"
# evaluate the ASR_o
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_most_top" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_most_bot" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_near_top_0" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_near_top_1" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_near_top_2" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_near_bot_0" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_near_bot_1" --injected_element_only
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results/gpt4v/action_generation_form_type1_near_bot_2" --injected_element_only
# Evaluate the ASR + Defensive System Prompt
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_generation_form_type1_most_top"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_generation_form_type1_most_bot"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_generation_form_type1_near_top_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_generation_form_type1_near_top_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_generation_form_type1_near_top_2"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_generation_form_type1_near_bot_0"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_generation_form_type1_near_bot_1"
python eval.py --eval_dir_benign "eval_results/eval_results/gpt4v/benign" --eval_dir "eval_results/eval_results_with_system_defense/gpt4v/action_generation_form_type1_near_bot_2"