{"total":35,"rows":[{"id":"2501.15145","title":"PromptShield: Deployable Detection for Prompt Injection Attacks","created":"2025-01-25","cited_by_count":50,"area":"safety"},{"id":"2505.18333","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks","created":"2025-05-23","cited_by_count":36,"area":"safety"},{"id":"2505.04806","title":"Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMs","created":"2025-05-07","cited_by_count":34,"area":"safety"},{"id":"2507.07974","title":"Defending Against Prompt Injection With a Few DefensiveTokens","created":"2025-07-10","cited_by_count":33,"area":"safety"},{"id":"2510.14005","title":"PIShield: Detecting Prompt Injection Attacks via Intrinsic LLM Features","created":"2025-10-15","cited_by_count":20,"area":"safety"},{"id":"2512.12594","title":"ceLLMate: Sandboxing Browser AI Agents","created":"2025-12-14","cited_by_count":16,"area":"safety"},{"id":"2603.13026","title":"PISmith: Reinforcement Learning-based Red Teaming for Prompt Injection Defenses","created":"2026-03-13","cited_by_count":16,"area":"safety"},{"id":"2506.12880","title":"Universal Jailbreak Suffixes Are Strong Attention Hijackers","created":"2025-06-15","cited_by_count":10,"area":"safety"},{"id":"2511.12710","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","created":"2025-11-16","cited_by_count":8,"area":"safety"},{"id":"2505.14368","title":"From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMs","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2604.01194","title":"AgentWatcher: A Rule-based Prompt Injection Monitor","created":"2026-04-01","cited_by_count":6,"area":"safety"},{"id":"2412.13435","title":"Lightweight Safety Classification Using Pruned Language Models","created":"2024-12-18","cited_by_count":5,"area":"safety"},{"id":"2602.13597","title":"AlignSentinel: Alignment-Aware Detection of Prompt Injection Attacks","created":"2026-02-14","cited_by_count":5,"area":"safety"},{"id":"2603.06588","title":"vLLM Hook v0: A Plug-in for Programming Model Internals on vLLM","created":"2026-02-02","cited_by_count":4,"area":"safety"},{"id":"2506.07356","title":"Safety-Aligned Weights Are Not Enough: Refusal-Teacher-Guided Finetuning Enhances Safety and Downstream Performance under Harmful Finetuning Attacks","created":"2025-06-09","cited_by_count":2,"area":"safety"},{"id":"2606.30783","title":"Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense","created":"2026-06-29","cited_by_count":2,"area":"safety"},{"id":"2608.08027","title":"BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes","created":"2026-08-08","cited_by_count":2,"area":"safety"},{"id":"2608.08029","title":"Do All LLMs Know When They're Being Harmful? A Reproducibility Study of Latent-Space Safety Probes Across Model Families","created":"2026-08-08","cited_by_count":2,"area":"safety"},{"id":"2510.04528","title":"Unified Threat Detection and Mitigation Framework (UTDMF): Combating Prompt Injection, Deception, and Bias in Enterprise-Scale Transformers","created":"2025-10-06","cited_by_count":1,"area":"safety"},{"id":"2601.10294","title":"Reasoning Hijacking: The Fragility of Reasoning Alignment in Large Language Models","created":"2026-01-15","cited_by_count":1,"area":"safety"},{"id":"2602.10481","title":"Protecting Context and Prompts: Deterministic Security for Non-Deterministic AI","created":"2026-02-11","cited_by_count":1,"area":"safety"},{"id":"2608.05430","title":"Robust Context-Aware Detection of Malicious Instructions in Text","created":"2026-08-05","cited_by_count":1,"area":"safety"},{"id":"2608.22248","title":"Beyond Over-Refusal: Defending Indirect Prompt Injection via Latent Instruction Manifolds","created":"2026-08-23","cited_by_count":1,"area":"safety"},{"id":"2609.19472","title":"Safety Beyond the Interface: Detecting Harm via Latent States in Large Language Models","created":"2026-09-16","cited_by_count":1,"area":"safety"},{"id":"2511.21752","title":"Semantics as a Shield: Label Disguise Defense (LDD) against Prompt Injection in LLM Sentiment Classification","created":"2025-11-23","cited_by_count":0,"area":"safety"},{"id":"2601.15801","title":"Attributing and Exploiting Safety Vectors through Global Optimization in Large Language Models","created":"2026-01-22","cited_by_count":0,"area":"safety"},{"id":"2605.19159","title":"On the Geometric Limits of Transformer Defenses against Obfuscation Attacks: Latent Embedding Collapse & Performance Robustness Gap","created":"2026-05-18","cited_by_count":0,"area":"safety"},{"id":"2607.18622","title":"CPInj: Uncovering Prompt Injection Risks in Textual Collaborative Prompt Optimization","created":"2026-07-21","cited_by_count":0,"area":"safety"},{"id":"2607.19396","title":"CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs","created":"2026-07-03","cited_by_count":0,"area":"safety"},{"id":"2608.09624","title":"Measuring the Wrong Thing: Internal Harmfulness Scores Anti-Rank Successful Jailbreaks","created":"2026-08-10","cited_by_count":0,"area":"safety"},{"id":"2609.21515","title":"ServeGuard: Verifiable, Bounded-Residual Confinement of Operator-Invisible Channels Without Revealing the Certified Read Factor","created":"2026-09-18","cited_by_count":0,"area":"safety"},{"id":"2610.05163","title":"Blocking at the Boundary: Auditing Long-Horizon Agents against Staged Prompt Injection","created":"2026-10-04","cited_by_count":0,"area":"safety"},{"id":"2610.15883","title":"What the Model Cannot See: Covert and Provable Text Invisibility in LLMs","created":"2026-10-11","cited_by_count":0,"area":"safety"},{"id":"2610.18408","title":"Prompt-Injection Probes Learn the Conversation, Not Just the Injection","created":"2026-10-13","cited_by_count":0,"area":"safety"},{"id":"2610.19452","title":"Are You Reading the Right Thing? Rethinking Internal Signals for Prompt-Injection Detection","created":"2026-10-14","cited_by_count":0,"area":"safety"}],"next_cursor":null}