Prompt Injection Attacks in Defended Systems
On the map: LLM safety and security → Prompt injection and agent security
Abstract (arXiv)
Large language models play a crucial role in modern natural language processing technologies. However, their extensive use also introduces potential security risks, such as the possibility of black-box attacks. These attacks can embed hidden malicious features into the model, leading to adverse consequences during its deployment. This paper investigates methods for black-box attacks on large language models with a three-tiered defense mechanism. It analyzes the challenges and significance of these attacks, highlighting their potential implications for language processing system security. Existing attack and defense methods are examined, evaluating their effectiveness and applicability across various scenarios. Special attention is given to the detection algorithm for black-box attacks, identifying hazardous vulnerabilities in language models and retrieving sensitive information. This research presents a methodology for vulnerability detection and the development of defensive strategies against black-box attacks on large language models.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 14 of its 15 references that are in the map. First posted on arXiv 20 Jun 2024.
Builds on
14 of 15 references.
Closest ancestors · 1
Same direction, newest first
Other references · 13
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2022Survey of Hallucination in Natural Language Generationcited by 2,056
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2023Whose Opinions Do Language Models Reflect?cited by 759
- 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 478
- 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 434
- 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
- 2023Low-Resource Languages Jailbreak GPT-4cited by 290
- 2023Certifying LLM Safety against Adversarial Promptingcited by 248
- 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLMcited by 173
- 2023Bergeron: Combating Adversarial Attacks through a Conscience-Based Alignment Frameworkcited by 29
Built on by
Citing papers per year: 2024: 3; 2025: 0; 2026: 1.
4 papers.
- 2024Attention Tracker: Detecting Prompt Injection Attacks in LLMscited by 82
- 2024MEOW: MEMOry Supervised LLM Unlearning Via Inverted Factscited by 16
- 2024Palisade -- Prompt Injection Detection Frameworkcited by 3
- 2026Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothingcited by 0
- 2026Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothing13 May 2026
- 2024Attention Tracker: Detecting Prompt Injection Attacks in LLMs1 Nov 2024
- 2024Palisade -- Prompt Injection Detection Framework28 Oct 2024
- 2024MEOW: MEMOry Supervised LLM Unlearning Via Inverted Facts18 Sep 2024