{"total":82,"rows":[{"id":"2402.06363","title":"StruQ: Defending Against Prompt Injection with Structured Queries","created":"2024-02-09","cited_by_count":375,"area":"safety"},{"id":"2504.11358","title":"DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks","created":"2025-04-15","cited_by_count":143,"area":"safety"},{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2403.04957","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","created":"2024-03-07","cited_by_count":119,"area":"safety"},{"id":"2312.17673","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","created":"2023-12-29","cited_by_count":106,"area":"safety"},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2401.07612","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","created":"2024-01-15","cited_by_count":54,"area":"safety"},{"id":"2405.19103","title":"Voice Jailbreak Attacks Against GPT-4o","created":"2024-05-29","cited_by_count":42,"area":"safety"},{"id":"2506.09443","title":"LLMs Cannot Reliably Judge (Yet?): A Comprehensive Assessment on the Robustness of LLM-as-a-Judge","created":"2025-06-11","cited_by_count":37,"area":"safety"},{"id":"2505.18333","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks","created":"2025-05-23","cited_by_count":36,"area":"safety"},{"id":"2510.19207","title":"Defending Against Prompt Injection with DataFilter","created":"2025-10-22","cited_by_count":35,"area":"safety"},{"id":"2505.04806","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","created":"2025-05-07","cited_by_count":34,"area":"safety"},{"id":"2507.07974","title":"Defending Against Prompt Injection With a Few DefensiveTokens","created":"2025-07-10","cited_by_count":33,"area":"safety"},{"id":"2510.12252","title":"PromptLocate: Localizing Prompt Injection Attacks","created":"2025-10-14","cited_by_count":28,"area":"safety"},{"id":"2511.20597","title":"BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents","created":"2025-11-25","cited_by_count":24,"area":"safety"},{"id":"2410.14827","title":"Enhancing Prompt Injection Attacks to LLMs via Poisoning Alignment","created":"2024-10-18","cited_by_count":21,"area":"safety"},{"id":"2510.14005","title":"PIShield: Detecting Prompt Injection Attacks via Intrinsic LLM Features","created":"2025-10-15","cited_by_count":20,"area":"safety"},{"id":"2510.05244","title":"Indirect Prompt Injections: Are Firewalls All You Need, or Stronger Benchmarks?","created":"2025-10-06","cited_by_count":18,"area":"safety"},{"id":"2504.20472","title":"Robustness via Referencing: Defending against Prompt Injection Attacks by Referencing the Executed Instruction","created":"2025-04-29","cited_by_count":16,"area":"safety"},{"id":"2601.07072","title":"Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems","created":"2026-01-11","cited_by_count":16,"area":"safety"},{"id":"2603.13026","title":"PISmith: Reinforcement Learning-based Red Teaming for Prompt Injection Defenses","created":"2026-03-13","cited_by_count":16,"area":"safety"},{"id":"2408.03515","title":"A Study on Prompt Injection Attack Against LLM-Integrated Mobile Robotic Systems","created":"2024-08-07","cited_by_count":15,"area":"safety"},{"id":"2503.11517","title":"Prompt Injection Detection and Mitigation via AI Multi-Agent NLP Frameworks","created":"2025-03-14","cited_by_count":15,"area":"safety"},{"id":"2507.07417","title":"May I have your Attention? Breaking Fine-Tuning based Prompt Injection Defenses using Architecture-Aware Attacks","created":"2025-07-10","cited_by_count":15,"area":"safety"},{"id":"2408.07291","title":"Evaluating LLM-based Personal Information Extraction and Countermeasures","created":"2024-08-14","cited_by_count":12,"area":"safety"},{"id":"2507.05630","title":"How Not to Detect Prompt Injections with an LLM","created":"2025-07-08","cited_by_count":12,"area":"safety"},{"id":"2402.15727","title":"LLMs Can Defend Themselves Against Jailbreaking in a Practical Manner: A Vision Paper","created":"2024-02-24","cited_by_count":10,"area":"safety"},{"id":"2505.16934","title":"In-Context Watermarks for Large Language Models","created":"2025-05-22","cited_by_count":10,"area":"safety"},{"id":"2404.04849","title":"Hidden You Malicious Goal Into Benign Narratives: Jailbreak Large Language Models through Logic Chain Injection","created":"2024-04-07","cited_by_count":9,"area":"safety"},{"id":"2511.05797","title":"When AI Meets the Web: Prompt Injection Risks in Third-Party AI Chatbot Plugins","created":"2025-11-08","cited_by_count":9,"area":"safety"},{"id":"2406.11007","title":"Threat Modelling and Risk Analysis for Large Language Model (LLM)-Powered Applications","created":"2024-06-16","cited_by_count":8,"area":"safety"},{"id":"2508.20890","title":"PromptSleuth: Detecting Prompt Injection via Semantic Intent Invariance","created":"2025-08-28","cited_by_count":8,"area":"safety"},{"id":"2509.25448","title":"Fingerprinting LLMs via Prompt Injection","created":"2025-09-29","cited_by_count":8,"area":"safety"},{"id":"2609.29429","title":"Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failures","created":"2026-09-24","cited_by_count":8,"area":"safety"},{"id":"2412.20412","title":"Multi-Objective Large Language Model Unlearning","created":"2024-12-29","cited_by_count":7,"area":"safety"},{"id":"2505.14368","title":"From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMs","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2507.04531","title":"DP-Fusion: Token-Level Differentially Private Inference for Large Language Models","created":"2025-07-06","cited_by_count":6,"area":"safety"},{"id":"2404.02532","title":"Learn to Disguise: Avoid Refusal Responses in LLM's Defense via a Multi-agent Attacker-Disguiser Game","created":"2024-04-03","cited_by_count":5,"area":"safety"},{"id":"2502.01241","title":"Peering Behind the Shield: Guardrail Identification in Large Language Models","created":"2025-02-03","cited_by_count":5,"area":"safety"},{"id":"2503.11185","title":"Bleeding Pathways: Vanishing Discriminability in LLM Hidden States Fuels Jailbreak Attacks","created":"2025-03-14","cited_by_count":5,"area":"safety"},{"id":"2506.06384","title":"Detection Method for Prompt Injection by Integrating Pre-trained Model and Heuristic Feature Engineering","created":"2025-06-05","cited_by_count":5,"area":"safety"},{"id":"2602.13597","title":"AlignSentinel: Alignment-Aware Detection of Prompt Injection Attacks","created":"2026-02-14","cited_by_count":5,"area":"safety"},{"id":"2605.28999","title":"Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening","created":"2026-05-27","cited_by_count":5,"area":"safety"},{"id":"2510.05025","title":"Imperceptible Jailbreaking against Large Language Models","created":"2025-10-06","cited_by_count":4,"area":"safety"},{"id":"2604.14604","title":"Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection","created":"2026-04-16","cited_by_count":3,"area":"safety"},{"id":"2607.14493","title":"Context Contamination in LLM Analysis of Network Security Logs: Poison with Passive Prompt Injection and Mitigation Evaluation","created":"2026-07-16","cited_by_count":3,"area":"safety"},{"id":"2510.10271","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","created":"2025-10-11","cited_by_count":2,"area":"safety"},{"id":"2604.15579","title":"Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents","created":"2026-04-16","cited_by_count":2,"area":"safety"},{"id":"2608.08027","title":"BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes","created":"2026-08-08","cited_by_count":2,"area":"safety"},{"id":"2505.00843","title":"OET: Optimization-based prompt injection Evaluation Toolkit","created":"2025-05-01","cited_by_count":1,"area":"safety"},{"id":"2506.19109","title":"Enhancing Security in LLM Applications: A Performance Evaluation of Early Detection Systems","created":"2025-06-23","cited_by_count":1,"area":"safety"},{"id":"2509.16870","title":"DecipherGuard: Understanding and Deciphering Jailbreak Prompts for a Safer Deployment of Intelligent Software Systems","created":"2025-09-21","cited_by_count":1,"area":"safety"},{"id":"2602.00750","title":"Bypassing Prompt Injection Detectors through Evasive Injections","created":"2026-01-31","cited_by_count":1,"area":"safety"},{"id":"2602.05401","title":"BadTemplate: A Training-Free Backdoor Attack via Chat Template Against Large Language Models","created":"2026-02-05","cited_by_count":1,"area":"safety"},{"id":"2603.05772","title":"Depth Charge: Jailbreak Large Language Models from Deep Safety Attention Heads","created":"2026-03-06","cited_by_count":1,"area":"safety"},{"id":"2603.18433","title":"Prompt Control-Flow Integrity: A Priority-Aware Runtime Defense Against Prompt Injection in LLM Systems","created":"2026-03-19","cited_by_count":1,"area":"safety"},{"id":"2603.25176","title":"Prompt Attack Detection with LLM-as-a-Judge and Mixture-of-Models","created":"2026-03-26","cited_by_count":1,"area":"safety"},{"id":"2606.27567","title":"On the Inseparability of Instructions and Data in Shared-Embedding Sequence Models","created":"2026-06-25","cited_by_count":1,"area":"safety"},{"id":"2610.04985","title":"Hidden Risks of Jev: An Empirical Study of Security, Privacy, and Dual Use","created":"2026-10-04","cited_by_count":1,"area":"safety"},{"id":"2512.10104","title":"Phishing Email Detection Using Large Language Models","created":"2025-12-10","cited_by_count":0,"area":"safety"},{"id":"2602.05484","title":"Clouding the Mirror: Stealthy Prompt Injection Attacks Targeting LLM-based Phishing Detection","created":"2026-02-05","cited_by_count":0,"area":"safety"},{"id":"2604.18248","title":"Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection","created":"2026-04-20","cited_by_count":0,"area":"safety"},{"id":"2604.24700","title":"Green Shielding: A User-Centric Approach Towards Trustworthy AI","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2605.06669","title":"Evaluating Prompt Injection Defenses for Educational LLM Tutors: Security-Usability-Latency Trade-offs","created":"2026-03-29","cited_by_count":0,"area":"safety"},{"id":"2605.10176","title":"When Prompts Become Payloads: A Framework for Mitigating SQL Injection Attacks in Large Language Model-Driven Applications","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2605.11996","title":"BadSKP: Backdoor Attacks on Knowledge Graph-Enhanced LLMs with Soft Prompts","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2605.13471","title":"Sleeper Channels and Provenance Gates: Persistent Prompt Injection in Always-on Autonomous AI Agents","created":"2026-05-13","cited_by_count":0,"area":"safety"},{"id":"2605.24421","title":"Poisoning the Watchtower: Prompt Injection Attacks Against LLM-Augmented Security Operations Through Adversarial Log Content","created":"2026-05-23","cited_by_count":0,"area":"safety"},{"id":"2605.26595","title":"Cordyceps: Covert Control Attacks on LLMs via Data Poisoning","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2606.20746","title":"Amplify, Don't Create: Temporal Accumulation for Slow-Burn Prompt Injection","created":"2026-06-17","cited_by_count":0,"area":"safety"},{"id":"2607.18622","title":"CPInj: Uncovering Prompt Injection Risks in Textual Collaborative Prompt Optimization","created":"2026-07-21","cited_by_count":0,"area":"safety"},{"id":"2608.08212","title":"Harmful Content Is Not Enough: Continuation Framing Moderates In-Context Emergent Misalignment","created":"2026-08-08","cited_by_count":0,"area":"safety"},{"id":"2608.26423","title":"The Latent Diagnostic Taxonomy: A Framework for Constructing Classifiers and Diagnosing Their Decisions, Applied to Prompt Injection Detection","created":"2026-08-26","cited_by_count":0,"area":"safety"},{"id":"2608.30362","title":"Will the User Ever Know? Covert Indirect Prompt Injection Attacks on Tool-Using LLM Agents","created":"2026-08-31","cited_by_count":0,"area":"safety"},{"id":"2609.03247","title":"Trust Me, I'm Your Developer: Self-Issued Authentication in Large Language Models","created":"2026-09-03","cited_by_count":0,"area":"safety"},{"id":"2609.15013","title":"Overflip: Repetition-Induced Label Flips in Guardrail Models","created":"2026-09-14","cited_by_count":0,"area":"safety"},{"id":"2609.21088","title":"Origin Is All You Need: Provenance-Aware Transformers for Structural Trust-Boundary Separation","created":"2026-09-17","cited_by_count":0,"area":"safety"},{"id":"2609.33628","title":"Climbing the Hill: Prompt Injection Red-Teaming Against Frontier Models with Curriculum Reinforcement Learning","created":"2026-09-27","cited_by_count":0,"area":"safety"},{"id":"2610.01768","title":"The Innocent Courier: Covert Exfiltration Through Legitimate LLM Web Fetching","created":"2026-10-01","cited_by_count":0,"area":"safety"},{"id":"2610.03857","title":"Beware EviLLM: Enabling Vulnerability Injection via Large Language Models","created":"2026-10-02","cited_by_count":0,"area":"safety"},{"id":"2610.05163","title":"Blocking at the Boundary: Auditing Long-Horizon Agents against Staged Prompt Injection","created":"2026-10-04","cited_by_count":0,"area":"safety"},{"id":"2610.17457","title":"BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views","created":"2026-10-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}