Concealment of Intent: A Game-Theoretic Analysis
On the map: LLM safety and security → Prompt injection and agent security
Abstract (arXiv)
As large language models (LLMs) grow more capable, concerns about their safe deployment have also grown. Although alignment mechanisms have been introduced to deter misuse, they remain vulnerable to carefully designed adversarial prompts. In this work, we present a scalable attack strategy: intent-hiding adversarial prompting, which conceals malicious intent through the composition of skills. We develop a game-theoretic framework to model the interaction between such attacks and defense systems that apply both prompt and response filtering. Our analysis identifies equilibrium points and reveals structural advantages for the attacker. To counter these threats, we propose and analyze a defense mechanism tailored to intent-hiding attacks. Empirically, we validate the attack's effectiveness on multiple real-world LLMs across a range of malicious behaviors, demonstrating clear advantages over existing adversarial prompting techniques.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 18 of its 32 references that are in the map. First posted on arXiv 27 May 2025.
Builds on
18 of 32 references.
Closest ancestors · 1
Same direction, newest first
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal6 Feb
Other references · 17
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
- 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
- 2024Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attackscited by 156
- 2023A Theory for Emergence of Complex Skills in Language Modelscited by 113
- 2023Skill-Mix: a Flexible and Expandable Family of Evaluations for AI modelscited by 64
5 more
- 2024Query-Based Adversarial Prompt Generationcited by 62
- 2024JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Frameworkcited by 47
- 2024Granite Guardiancited by 25
- 2024Mission Impossible: A Statistical Perspective on Jailbreaking LLMscited by 24
- 2023Secure Semantic Communications: Fundamentals and Challengescited by 10
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026A Theoretical Game of Attacks via Compositional Skills
- 2026Verifying Intent and Harm: A Unified Defense Against LLM-Generated Threats
- 2025Mitigating Indirect Prompt Injection via Instruction-Following Intent Analysis
- 2025Mitigating Jailbreaks with Intent-Aware LLMs
- 2025Breaking to Build: A Threat Model of Prompt-Based Attacks for Securing LLMs
- 2025Friend or Foe: How LLMs' Safety Mind Gets Fooled by Intent Shift Attack
- 2025PromptSleuth: Detecting Prompt Injection via Semantic Intent Invariance
- 2026Adversarial Reframing: A Framework for Targeted Generation in Language Models