Image de couverture de livre

VortexPIA: Indirect Prompt Injection Attack against LLMs for Efficient Extraction of User Privacy

Fuente: arXiv

Enregistré dans:

Détails bibliographiques
Auteurs principaux:	Cui, Yu, Pan, Sicheng, Liu, Yifei, Zhang, Haibin, Zuo, Cong
Format:	Preprint
Publié:	2025
Sujets:	Cryptography and Security
Accès en ligne:	Acceder al recurso
Tags:	Ajouter un tag Pas de tags, Soyez le premier à ajouter un tag!

Documents similaires

Spore: Efficient and Training-Free Privacy Extraction Attack on LLMs via Inference-Time Hybrid Probing
par: Cui, Yu, et autres
Publié: (2026)

Can LLMs Threaten Human Survival? Benchmarking Potential Existential Threats from LLMs via Prefix Completion
par: Cui, Yu, et autres
Publié: (2025)

Can Indirect Prompt Injection Attacks Be Detected and Removed?
par: Chen, Yulin, et autres
Publié: (2025)

TopicAttack: An Indirect Prompt Injection Attack via Topic Transition
par: Chen, Yulin, et autres
Publié: (2025)

FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks
par: Wang, Jiongxiao, et autres
Publié: (2024)

Attention is All You Need to Defend Against Indirect Prompt Injection Attacks in LLMs
par: Zhong, Yinan, et autres
Publié: (2025)

System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspective
par: Wu, Fangzhou, et autres
Publié: (2024)

AdapTools: Adaptive Tool-based Indirect Prompt Injection Attacks on Agentic LLMs
par: Wang, Che, et autres
Publié: (2026)

PINA: Prompt Injection Attack against Navigation Agents
par: Liu, Jiani, et autres
Publié: (2026)

Defending against Indirect Prompt Injection by Instruction Detection
par: Wen, Tongyu, et autres
Publié: (2025)

Practical Reasoning Interruption Attacks on Reasoning Large Language Models
par: Cui, Yu, et autres
Publié: (2025)

Towards Provably Secure Generative AI: Reliable Consensus Sampling
par: Cui, Yu, et autres
Publié: (2025)

ProxyPrompt: Securing System Prompts against Prompt Extraction Attacks
par: Zhuang, Zhixiong, et autres
Publié: (2025)

Defending Against Indirect Prompt Injection Attacks With Spotlighting
par: Hines, Keegan, et autres
Publié: (2024)

Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents
par: Zhan, Qiusi, et autres
Publié: (2025)

ShadowCode: Towards (Automatic) External Prompt Injection Attack against Code LLMs
par: Yang, Yuchen, et autres
Publié: (2024)

PlanGuard: Defending Agents against Indirect Prompt Injection via Planning-based Consistency Verification
par: Gong, Guangyu, et autres
Publié: (2026)

MAD-Spear: A Conformity-Driven Prompt Injection Attack on Multi-Agent Debate Systems
par: Cui, Yu, et autres
Publié: (2025)

MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents
par: Zhu, Kaijie, et autres
Publié: (2025)

Indirect Prompt Injection in the Wild: An Empirical Study of Prevalence, Techniques, and Objectives
par: Khodayari, Soheil, et autres
Publié: (2026)

A Critical Evaluation of Defenses against Prompt Injection Attacks
par: Jia, Yuqi, et autres
Publié: (2025)

Robustness via Referencing: Defending against Prompt Injection Attacks by Referencing the Executed Instruction
par: Chen, Yulin, et autres
Publié: (2025)

The Vulnerability of LLM Rankers to Prompt Injection Attacks
par: Yin, Yu, et autres
Publié: (2026)

Prompt Injection Attack to Tool Selection in LLM Agents
par: Shi, Jiawen, et autres
Publié: (2025)

Token-Efficient Prompt Injection Attack: Provoking Cessation in LLM Reasoning via Adaptive Token Compression
par: Cui, Yu, et autres
Publié: (2025)

Indirect Prompt Injections: Are Firewalls All You Need, or Stronger Benchmarks?
par: Bhagwatkar, Rishika, et autres
Publié: (2025)

External Data Extraction Attacks against Retrieval-Augmented Large Language Models
par: He, Yu, et autres
Publié: (2025)

Analysis of LLMs Against Prompt Injection and Jailbreak Attacks
par: Jaiswal, Piyush, et autres
Publié: (2026)

Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree
par: Johnson, Sam, et autres
Publié: (2025)

MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks
par: Syros, Georgios, et autres
Publié: (2026)

AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations
par: He, Yu, et autres
Publié: (2026)

PromptShield: Deployable Detection for Prompt Injection Attacks
par: Jacob, Dennis, et autres
Publié: (2025)

QueryIPI: Query-agnostic Indirect Prompt Injection on Coding Agents
par: Xie, Yuchong, et autres
Publié: (2025)

Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems
par: Chang, Hongyan, et autres
Publié: (2026)

Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks
par: Xiong, Chen, et autres
Publié: (2024)

AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents
par: Wang, Zhun, et autres
Publié: (2025)

PromptLocate: Localizing Prompt Injection Attacks
par: Jia, Yuqi, et autres
Publié: (2025)

Architecting Secure AI Agents: Perspectives on System-Level Defenses Against Indirect Prompt Injection Attacks
par: Xiang, Chong, et autres
Publié: (2026)

Multimodal Prompt Injection Attacks: Risks and Defenses for Modern LLMs
par: Yeo, Andrew, et autres
Publié: (2025)

Free-MAD: Consensus-Free Multi-Agent Debate
par: Cui, Yu, et autres
Publié: (2025)