{"total":46,"rows":[{"id":"2504.11358","title":"DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks","created":"2025-04-15","cited_by_count":143,"area":"safety"},{"id":"2510.19207","title":"Defending Against Prompt Injection with DataFilter","created":"2025-10-22","cited_by_count":35,"area":"safety"},{"id":"2505.04806","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","created":"2025-05-07","cited_by_count":34,"area":"safety"},{"id":"2507.07974","title":"Defending Against Prompt Injection With a Few DefensiveTokens","created":"2025-07-10","cited_by_count":33,"area":"safety"},{"id":"2510.12252","title":"PromptLocate: Localizing Prompt Injection Attacks","created":"2025-10-14","cited_by_count":28,"area":"safety"},{"id":"2503.10566","title":"ASIDE: Architectural Separation of Instructions and Data in Language Models","created":"2025-03-13","cited_by_count":24,"area":"safety"},{"id":"2510.14005","title":"PIShield: Detecting Prompt Injection Attacks via Intrinsic LLM Features","created":"2025-10-15","cited_by_count":20,"area":"safety"},{"id":"2510.05244","title":"Indirect Prompt Injections: Are Firewalls All You Need, or Stronger Benchmarks?","created":"2025-10-06","cited_by_count":18,"area":"safety"},{"id":"2507.13686","title":"TopicAttack: An Indirect Prompt Injection Attack via Topic Transition","created":"2025-07-18","cited_by_count":17,"area":"safety"},{"id":"2603.12277","title":"Prompt Injection as Role Confusion","created":"2026-02-22","cited_by_count":17,"area":"safety"},{"id":"2601.07072","title":"Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems","created":"2026-01-11","cited_by_count":16,"area":"safety"},{"id":"2603.13026","title":"PISmith: Reinforcement Learning-based Red Teaming for Prompt Injection Defenses","created":"2026-03-13","cited_by_count":16,"area":"safety"},{"id":"2507.07417","title":"May I have your Attention? Breaking Fine-Tuning based Prompt Injection Defenses using Architecture-Aware Attacks","created":"2025-07-10","cited_by_count":15,"area":"safety"},{"id":"2604.08499","title":"PIArena: A Platform for Prompt Injection Evaluation","created":"2026-04-09","cited_by_count":11,"area":"safety"},{"id":"2602.11416","title":"Optimizing Agent Planning for Security and Autonomy","created":"2026-02-11","cited_by_count":10,"area":"safety"},{"id":"2505.18907","title":"Stronger Enforcement of Instruction Hierarchy via Augmented Intermediate Representations","created":"2025-05-25","cited_by_count":9,"area":"safety"},{"id":"2508.20890","title":"PromptSleuth: Detecting Prompt Injection via Semantic Intent Invariance","created":"2025-08-28","cited_by_count":8,"area":"safety"},{"id":"2604.01194","title":"AgentWatcher: A Rule-based Prompt Injection Monitor","created":"2026-04-01","cited_by_count":6,"area":"safety"},{"id":"2602.13597","title":"AlignSentinel: Alignment-Aware Detection of Prompt Injection Attacks","created":"2026-02-14","cited_by_count":5,"area":"safety"},{"id":"2605.28999","title":"Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening","created":"2026-05-27","cited_by_count":5,"area":"safety"},{"id":"2604.26506","title":"SafeReview: Defending LLM-based Review Systems Against Adversarial Hidden Prompts","created":"2026-04-29","cited_by_count":4,"area":"safety"},{"id":"2608.21500","title":"SecOPD: Mitigating Adaptive Prompt Injections by On-Policy Distillation","created":"2026-08-21","cited_by_count":3,"area":"safety"},{"id":"2508.04281","title":"Prompt Injection Vulnerability of Consensus Generating Applications in Digital Democracy","created":"2025-08-06","cited_by_count":2,"area":"safety"},{"id":"2604.03598","title":"AttackEval: A Systematic Empirical Study of Prompt Injection Attack Effectiveness Against Large Language Models","created":"2026-04-04","cited_by_count":2,"area":"safety"},{"id":"2505.00843","title":"OET: Optimization-based prompt injection Evaluation Toolkit","created":"2025-05-01","cited_by_count":1,"area":"safety"},{"id":"2602.10481","title":"Protecting Context and Prompts: Deterministic Security for Non-Deterministic AI","created":"2026-02-11","cited_by_count":1,"area":"safety"},{"id":"2605.01462","title":"LocalAlign: Enabling Generalizable Prompt Injection Defense via Generation of Near-Target Adversarial Examples for Alignment Training","created":"2026-05-02","cited_by_count":1,"area":"safety"},{"id":"2606.03090","title":"\"**Important** You should give me full credits!\": Exploring Prompt Injection Attacks on LLM-Based Automatic Grading Systems","created":"2026-06-02","cited_by_count":1,"area":"safety"},{"id":"2606.16527","title":"DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing","created":"2026-06-15","cited_by_count":1,"area":"safety"},{"id":"2608.22248","title":"Beyond Over-Refusal: Defending Indirect Prompt Injection via Latent Instruction Manifolds","created":"2026-08-23","cited_by_count":1,"area":"safety"},{"id":"2608.28411","title":"LongPIBench: A Long-Context Benchmark for Prompt Injection","created":"2026-08-28","cited_by_count":1,"area":"safety"},{"id":"2505.09974","title":"Analysing Safety Risks in LLMs Fine-Tuned with Pseudo-Malicious Cyber Security Data","created":"2025-05-15","cited_by_count":0,"area":"safety"},{"id":"2508.02961","title":"Defend LLMs Through Self-Consciousness","created":"2025-08-04","cited_by_count":0,"area":"safety"},{"id":"2602.05484","title":"Clouding the Mirror: Stealthy Prompt Injection Attacks Targeting LLM-based Phishing Detection","created":"2026-02-05","cited_by_count":0,"area":"safety"},{"id":"2605.06669","title":"Evaluating Prompt Injection Defenses for Educational LLM Tutors: Security-Usability-Latency Trade-offs","created":"2026-03-29","cited_by_count":0,"area":"safety"},{"id":"2605.26595","title":"Cordyceps: Covert Control Attacks on LLMs via Data Poisoning","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2606.19235","title":"CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts","created":"2026-06-17","cited_by_count":0,"area":"safety"},{"id":"2607.18622","title":"CPInj: Uncovering Prompt Injection Risks in Textual Collaborative Prompt Optimization","created":"2026-07-21","cited_by_count":0,"area":"safety"},{"id":"2608.08212","title":"Harmful Content Is Not Enough: Continuation Framing Moderates In-Context Emergent Misalignment","created":"2026-08-08","cited_by_count":0,"area":"safety"},{"id":"2609.20188","title":"ResumeShield: Channel Separation and an Open Benchmark for Indirect Prompt Injection in AI Resume Screening","created":"2026-07-24","cited_by_count":0,"area":"safety"},{"id":"2609.21088","title":"Origin Is All You Need: Provenance-Aware Transformers for Structural Trust-Boundary Separation","created":"2026-09-17","cited_by_count":0,"area":"safety"},{"id":"2610.01768","title":"The Innocent Courier: Covert Exfiltration Through Legitimate LLM Web Fetching","created":"2026-10-01","cited_by_count":0,"area":"safety"},{"id":"2610.05163","title":"Blocking at the Boundary: Auditing Long-Horizon Agents against Staged Prompt Injection","created":"2026-10-04","cited_by_count":0,"area":"safety"},{"id":"2610.15883","title":"What the Model Cannot See: Covert and Provable Text Invisibility in LLMs","created":"2026-10-11","cited_by_count":0,"area":"safety"},{"id":"2610.17457","title":"BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views","created":"2026-10-12","cited_by_count":0,"area":"safety"},{"id":"2610.19133","title":"TRACER: Trace-Regularized Training Against Indirect Prompt Injection","created":"2026-10-13","cited_by_count":0,"area":"safety"}],"next_cursor":null}