mlsanityData to 13 Oct 2026

GenTel-Safe: A Unified Benchmark and Shielding Framework for Defending Against Prompt Injection Attacks

arXiv 2409.19521 ↗First posted 29 Sep 2024cs.CR cs.LGcited by 7

On the map: LLM safety and security → Prompt injection and agent security

Abstract (arXiv)

Large Language Models (LLMs) like GPT-4, LLaMA, and Qwen have demonstrated remarkable success across a wide range of applications. However, these models remain inherently vulnerable to prompt injection attacks, which can bypass existing safety mechanisms, highlighting the urgent need for more robust attack detection methods and comprehensive evaluation benchmarks. To address these challenges, we introduce GenTel-Safe, a unified framework that includes a novel prompt injection attack detection method, GenTel-Shield, along with a comprehensive evaluation benchmark, GenTel-Bench, which compromises 84812 prompt injection attacks, spanning 3 major categories and 28 security scenarios. To prove the effectiveness of GenTel-Shield, we evaluate it together with vanilla safety guardrails against the GenTel-Bench dataset. Empirically, GenTel-Shield can achieve state-of-the-art attack detection success rates, which reveals the critical weakness of existing safeguarding techniques against harmful prompts. For reproducibility, we have made the code and benchmarking dataset available on the project page at https://gentellab.github.io/gentel-safe.github.io/.

Key facts. Cited by 7 papers in the map (data through 13 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 23 of its 46 references that are in the map. First posted on arXiv 29 Sep 2024.

Builds on

23 of 46 references.

Closest ancestors · 4

Same direction, newest first

  1. 2024Efficient Universal Goal Hijacking with Semantics-guided Prompt Organization23 May
  2. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal6 Feb
  3. 2023Multi-step Jailbreaking Privacy Attacks on ChatGPT11 Apr
  4. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection23 Feb

Other references · 19

  1. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,064
  2. 2020Extracting Training Data from Large Language Modelscited by 2,181
  3. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,637
  4. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,181
  5. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 817
  6. 2019EDA: Easy Data Augmentation Techniques for Boosting Performance on Text Classification Taskscited by 802
  7. 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 497
  8. 2023What Makes Good Data for Alignment? A Comprehensive Study of Automatic Data Selection in Instruction Tuningcited by 357
  9. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agentscited by 280
  10. 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 230
  11. 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
  12. 2024COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllabilitycited by 173
7 more
  1. 2023Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritizationcited by 169
  2. 2024PLeak: Prompt Leaking Attacks against Large Language Model Applicationscited by 127
  3. 2022ChatGPT Makes Medicine Easy to Swallow: An Exploratory Case Study on Simplified Radiology Reportscited by 101
  4. 2024GradSafe: Detecting Jailbreak Prompts for LLMs via Safety-Critical Gradient Analysiscited by 96
  5. 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 66
  6. 2023Robust Safety Classifier for Large Language Models: Adversarial Prompt Shieldcited by 25
  7. 2023Hijacking Context in Large Multi-modal Modelscited by 6

Built on by

Cited by year (2026 to 13 Oct)

Citing papers per year: 2025: 5; 2026: 2.

7 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025PromptShield: Deployable Detection for Prompt Injection Attacks
  2. 2025A Critical Evaluation of Defenses against Prompt Injection Attacks
  3. 2026LongPIBench: A Long-Context Benchmark for Prompt Injection
  4. 2025CAPTURE: Context-Aware Prompt Injection Testing and Robustness Enhancement
  5. 2024Systematically Analyzing Prompt Injection Vulnerabilities in Diverse LLM Architectures
  6. 2024Automatic and Universal Prompt Injection Attacks against Large Language Models
  7. 2024InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models
  8. 2025TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluations