Safeguarding Crowdsourcing Surveys from ChatGPT with Prompt Injection
On the map: LLM safety and security → Prompt injection and agent security
Abstract (arXiv)
ChatGPT and other large language models (LLMs) have proven useful in crowdsourcing tasks, where they can effectively annotate machine learning training data. However, this means that they also have the potential for misuse, specifically to automatically answer surveys. LLMs can potentially circumvent quality assurance measures, thereby threatening the integrity of methodologies that rely on crowdsourcing surveys. In this paper, we propose a mechanism to detect LLM-generated responses to surveys. The mechanism uses "prompt injection", such as directions that can mislead LLMs into giving predictable responses. We evaluate our technique against a range of question scenarios, types, and positions, and find that it can reliably detect LLM-generated responses with more than 93% effectiveness. We also provide an open-source software to help survey designers use our technique to detect LLM responses. Our work is a step in ensuring that survey methodologies remain rigorous vis-a-vis LLMs.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. First posted on arXiv 15 Jun 2023.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2024: 3; 2025: 4; 2026: 1.
8 papers.
- 2024Automatic and Universal Prompt Injection Attacks against Large Language Modelscited by 112
- 2024A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systemscited by 74
- 2024InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Modelscited by 36
- 2025JavelinGuard: Low-Cost Transformer Architectures for LLM Securitycited by 4
- 2025Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behaviorcited by 1
- 2025Multi-Agent Framework for Threat Mitigation and Resilience in AI-Based Systemscited by 1
- 2025Software Vulnerability Management in the Era of Artificial Intelligence: An Industry Perspectivecited by 0
- 2026Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forwardcited by 0
- 2026Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forward19 Jan 2026
- 2025Multi-Agent Framework for Threat Mitigation and Resilience in AI-Based Systems29 Dec 2025
- 2025Software Vulnerability Management in the Era of Artificial Intelligence: An Industry Perspective20 Dec 2025
- 2025Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior25 Aug 2025
- 2025JavelinGuard: Low-Cost Transformer Architectures for LLM Security9 Jun 2025
- 2024InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models30 Oct 2024
- 2024Automatic and Universal Prompt Injection Attacks against Large Language Models7 Mar 2024
- 2024A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems28 Feb 2024