{"total":20,"rows":[{"id":"2402.06363","title":"StruQ: Defending Against Prompt Injection with Structured Queries","created":"2024-02-09","cited_by_count":375,"area":"safety"},{"id":"2310.12815","title":"Formalizing and Benchmarking Prompt Injection Attacks and Defenses","created":"2023-10-19","cited_by_count":364,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2504.11358","title":"DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks","created":"2025-04-15","cited_by_count":143,"area":"safety"},{"id":"2403.04957","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","created":"2024-03-07","cited_by_count":119,"area":"safety"},{"id":"2401.07612","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","created":"2024-01-15","cited_by_count":54,"area":"safety"},{"id":"2402.09674","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","created":"2024-02-15","cited_by_count":50,"area":"safety"},{"id":"2410.22770","title":"InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models","created":"2024-10-30","cited_by_count":42,"area":"safety"},{"id":"2506.09443","title":"LLMs Cannot Reliably Judge (Yet?): A Comprehensive Assessment on the Robustness of LLM-as-a-Judge","created":"2025-06-11","cited_by_count":37,"area":"safety"},{"id":"2505.18333","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks","created":"2025-05-23","cited_by_count":36,"area":"safety"},{"id":"2502.12197","title":"A Closer Look at System Prompt Robustness","created":"2025-02-15","cited_by_count":32,"area":"safety"},{"id":"2510.14005","title":"PIShield: Detecting Prompt Injection Attacks via Intrinsic LLM Features","created":"2025-10-15","cited_by_count":20,"area":"safety"},{"id":"2405.14189","title":"Efficient Universal Goal Hijacking with Semantics-guided Prompt Organization","created":"2024-05-23","cited_by_count":16,"area":"safety"},{"id":"2507.13169","title":"Prompt Injection 2.0: Hybrid AI Threats","created":"2025-07-17","cited_by_count":13,"area":"safety"},{"id":"2406.11007","title":"Threat Modelling and Risk Analysis for Large Language Model (LLM)-Powered Applications","created":"2024-06-16","cited_by_count":8,"area":"safety"},{"id":"2409.13331","title":"Applying Pre-trained Multilingual BERT in Embeddings for Improved Malicious Prompt Injection Attacks Detection","created":"2024-09-20","cited_by_count":7,"area":"safety"},{"id":"2406.11880","title":"Knowledge Return Oriented Prompting (KROP)","created":"2024-06-11","cited_by_count":0,"area":"safety"},{"id":"2606.19660","title":"A Layered Security Framework Against Prompt Injection in RAG-Based Chatbots","created":"2026-06-17","cited_by_count":0,"area":"safety"},{"id":"2608.07808","title":"The Anatomy of a Prompt Injection: A Component Model for Structured Analysis","created":"2026-08-07","cited_by_count":0,"area":"safety"}],"next_cursor":null}