Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models | Paper Citation Record

Observation 97817b41-db3e-41fd-8e9d-f58974c5f7ff · inbound

Defending Against Indirect Prompt Injection Attacks With Spotlighting cites this paper.

Defending Against Indirect Prompt Injection Attacks With Spotlighting Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 2

Resolution: verified exact; arxiv_id, observed 2026-05-14T22:28:55.424003Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 634df275-c0b3-42b6-993e-17572a6d9b11 · inbound

LLM Agents can Autonomously Exploit One-day Vulnerabilities cites this paper.

LLM Agents can Autonomously Exploit One-day Vulnerabilities Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 23

Resolution: verified exact; arxiv_id, observed 2026-05-18T04:18:27.662132Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 196cfb2e-0fa5-4054-b31e-bfa081355095 · inbound

The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions cites this paper.

The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 13

Resolution: metadata mismatch; arxiv_id, observed 2026-05-12T10:59:30.797232Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation d352e1af-4809-454a-9774-144f23f1472d · inbound

AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents cites this paper.

AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 70

Resolution: verified exact; arxiv_id, observed 2026-05-13T06:35:13.402235Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 8e27a0e4-8b48-4c9a-999d-38612545cce3 · inbound

Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents cites this paper.

Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 157

Resolution: verified exact; arxiv_id, observed 2026-05-12T13:36:57.224615Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 8bcc4d61-5791-4f0f-9293-c6aa22d3d377 · inbound

Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search cites this paper.

Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 73

Resolution: unresolved; no resolver link, observed 2026-08-08T20:57:43.602204Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 41a497e6-9ae9-4b69-bfe5-5cc3204fd3a7 · inbound

Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety cites this paper.

Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 140

Resolution: verified exact; arxiv_id, observed 2026-05-23T04:42:34.016624Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 1bec698a-1e6d-4541-b8ff-39f77ebb7b5b · inbound

IHEval: Evaluating Language Models on Following the Instruction Hierarchy cites this paper.

IHEval: Evaluating Language Models on Following the Instruction Hierarchy Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-07T23:56:00.128652Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6c012428-57fa-4c01-9a96-0fe31bc4bc35 · inbound

Robustness via Referencing: Defending against Prompt Injection Attacks by Referencing the Executed Instruction cites this paper.

Robustness via Referencing: Defending against Prompt Injection Attacks by Referencing the Executed Instruction Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 45

Resolution: verified exact; arxiv_id, observed 2026-05-22T19:11:58.044991Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation a00eec65-66f6-4758-a934-70a4f8216626 · inbound

EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks cites this paper.

EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-07T15:41:24.481852Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ed10cf18-6a79-4b5b-bef3-d9087450a1c8 · inbound

Ranking Free RAG: Replacing Re-ranking with Selection in RAG for Sensitive Domains cites this paper.

Ranking Free RAG: Replacing Re-ranking with Selection in RAG for Sensitive Domains Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-07T15:14:46.395816Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3f184b0b-621e-427d-97b3-bcef0124352b · inbound

Invisible Prompts, Visible Threats: Malicious Font Injection in External Resources for Large Language Models cites this paper.

Invisible Prompts, Visible Threats: Malicious Font Injection in External Resources for Large Language Models Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-07T14:55:02.679214Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f8bffdc9-cb67-4366-8440-8cd448565bba · inbound

A Critical Evaluation of Defenses against Prompt Injection Attacks cites this paper.

A Critical Evaluation of Defenses against Prompt Injection Attacks Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-07T14:36:12.693088Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 54353bad-a6dc-49d0-b7fd-50f97b2bc4ab · inbound

LLM Agents Should Employ Security Principles cites this paper.

LLM Agents Should Employ Security Principles Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 65

Resolution: unresolved; no resolver link, observed 2026-08-07T12:42:15.984482Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b0693264-866e-4e60-9f8e-589c4dda26a7 · inbound

JavelinGuard: Low-Cost Transformer Architectures for LLM Security cites this paper.

JavelinGuard: Low-Cost Transformer Architectures for LLM Security Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 55

Resolution: unresolved; no resolver link, observed 2026-08-07T05:41:25.529733Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3acf0b93-0149-488e-824d-e8f5aa16dca9 · inbound

Context manipulation attacks : Web agents are susceptible to corrupted memory cites this paper.

Context manipulation attacks : Web agents are susceptible to corrupted memory Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-06T23:59:59.158675Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 089d26cc-1fdc-429c-99e4-2da7b551d9a5 · inbound

BLOCKS: Blockchain-supported Cross-Silo Knowledge Sharing for Efficient LLM Services cites this paper.

BLOCKS: Blockchain-supported Cross-Silo Knowledge Sharing for Efficient LLM Services Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-06T22:40:38.187097Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2783b487-2406-40aa-aff0-c2ebdf3fd4ae · inbound

Prompt Injection 2.0: Hybrid AI Threats cites this paper.

Prompt Injection 2.0: Hybrid AI Threats Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-06T16:34:04.277916Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 176dae2d-28d1-42fe-8986-b5645525b5c9 · inbound

WebGuard: Building a Generalizable Guardrail for Web Agents cites this paper.

WebGuard: Building a Generalizable Guardrail for Web Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 51

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:51.333428Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1bc81062-1a6c-4fe0-9237-9da26b29fbe2 · inbound

Lexical Hints of Accuracy in LLM Reasoning Chains cites this paper.

Lexical Hints of Accuracy in LLM Reasoning Chains Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-05T18:48:50.863975Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f3cba737-1295-4552-94ac-1eadc91f1413 · inbound

Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior cites this paper.

Prompt-in-Content Attacks: Exploiting Uploaded Inputs to Hijack LLM Behavior Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-05T16:50:29.954752Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 538c7225-0d0a-4c6b-ac48-d2634878d9c3 · inbound

When Benchmarks Lie: Evaluating Malicious Prompt Classifiers Under True Distribution Shift cites this paper.

When Benchmarks Lie: Evaluating Malicious Prompt Classifiers Under True Distribution Shift Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-02T23:22:38.844788Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 35a8932a-22a3-494c-81c9-d86984fec96d · inbound

Many-Tier Instruction Hierarchy in LLM Agents cites this paper.

Many-Tier Instruction Hierarchy in LLM Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 31

Resolution: verified exact; arxiv_id, observed 2026-05-11T07:16:01.976213Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 21110f35-c167-4750-b0ab-02728ebe78ad · inbound

An AI Agent Execution Environment to Safeguard User Data cites this paper.

An AI Agent Execution Environment to Safeguard User Data Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 82

Resolution: verified exact; arxiv_id, observed 2026-05-11T13:11:05.750535Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation ddf3556a-3549-46ad-a5f2-bdcf15b60da8 · inbound

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents cites this paper.

Ghost in the Agent: Redefining Information Flow Tracking for LLM Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 36

Resolution: verified exact; arxiv_id, observed 2026-05-08T22:39:20.577096Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 6f2a28f4-9667-48d1-9ac0-280daa79c69f · inbound

Evaluation of Prompt Injection Defenses in Large Language Models cites this paper.

Evaluation of Prompt Injection Defenses in Large Language Models Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-05-11T21:21:12.079621Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 5cea8fcf-d59d-48f1-89e0-2a4697a3e2a9 · inbound

Evaluation of Prompt Injection Defenses in Large Language Models cites this paper.

Evaluation of Prompt Injection Defenses in Large Language Models Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-05-14T21:19:28.460702Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 5deca162-d313-4484-9760-fe45fbd8fd38 · inbound

Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills cites this paper.

Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 25

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T23:46:15.850426Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 4df578a0-c781-4de1-b581-4a218ecc0751 · inbound

Perturbation Dose Responses in Recursive LLM Loops: Raw Switching, Stochastic Floors, and Persistent Escape under Append, Replace, and Dialog Updates cites this paper.

Perturbation Dose Responses in Recursive LLM Loops: Raw Switching, Stochastic Floors, and Persistent Escape under Append, Replace, and Dialog Updates Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 5

Resolution: verified exact; arxiv_id, observed 2026-05-09T05:55:31.844341Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 5ed01e6b-6fc6-47c6-a027-c680e263f2dc · inbound

MIPIAD: Multilingual Indirect Prompt Injection Attack Defense with Qwen -- TF-IDF Hybrid and Meta-Ensemble Learning cites this paper.

MIPIAD: Multilingual Indirect Prompt Injection Attack Defense with Qwen -- TF-IDF Hybrid and Meta-Ensemble Learning Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 13

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T02:30:55.043183Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 94dece42-48ac-4aa4-9809-3eabdf2dff25 · inbound

Designing Intelligent Enterprise Agents: A Capability-Aligned Multi-Agent Architecture cites this paper.

Designing Intelligent Enterprise Agents: A Capability-Aligned Multi-Agent Architecture Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 24

Resolution: verified exact; arxiv_id, observed 2026-05-12T07:56:31.056812Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 9ecdb9c3-bf96-487c-82c8-3cb9a3d65a2a · inbound

IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection cites this paper.

IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 9

Resolution: verified exact; arxiv_id, observed 2026-05-13T05:47:21.316847Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation d7ea9cee-c29a-424c-a1fc-95159a7899e7 · inbound

Web Agents Should Adopt the Plan-Then-Execute Paradigm cites this paper.

Web Agents Should Adopt the Plan-Then-Execute Paradigm Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 34

Resolution: verified exact; arxiv_id, observed 2026-05-15T02:49:41.559958Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 6d920e85-e211-42f2-9b1c-b84621608982 · inbound

An Empirical Study of Privacy Leakage Chains via Prompt Injection in Black-Box Chatbot Environments cites this paper.

An Empirical Study of Privacy Leakage Chains via Prompt Injection in Black-Box Chatbot Environments Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 8

Resolution: verified exact; arxiv_id, observed 2026-05-20T09:58:10.879410Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 96d1112b-1e1f-4495-906d-adc3117086d0 · inbound

Hallucination as Exploit: Evidence-Carrying Multimodal Agents cites this paper.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 14

Resolution: metadata mismatch; arxiv_id, observed 2026-05-20T09:48:11.595740Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 9ba8124f-19fb-4857-8068-ac007779b074 · inbound

Hallucination as Exploit: Evidence-Carrying Multimodal Agents cites this paper.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 14

Resolution: metadata mismatch; arxiv_id, observed 2026-05-22T09:01:20.110761Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation f181d1bb-35c0-4a36-a207-e8d540d349f4 · inbound

From Prompt Injection to Persistent Control: Defending Agentic Harness Against Trojan Backdoors cites this paper.

From Prompt Injection to Persistent Control: Defending Agentic Harness Against Trojan Backdoors Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 29

Resolution: verified exact; arxiv_id, observed 2026-06-28T22:12:41.463500Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 555d4ea9-e22d-4319-b0a9-e4c6f1242427 · inbound

Gate AI: LLM Security Benchmark Evaluation Methodology and Results cites this paper.

Gate AI: LLM Security Benchmark Evaluation Methodology and Results Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 16

Resolution: verified exact; arxiv_id, observed 2026-07-01T22:46:19.188961Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 3e4c895e-cfc9-4a55-9b54-7af85df3f8db · inbound

Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Models cites this paper.

Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Models Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 13

Resolution: metadata mismatch; arxiv_id, observed 2026-07-02T03:16:33.675784Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 38171ffc-1869-4d10-8738-4d7cc4d694bb · inbound

Caught in the Act(ivation): Toward Pre-Output and Multi-Turn Detection of Credential Exfiltration by LLM Agents cites this paper.

Caught in the Act(ivation): Toward Pre-Output and Multi-Turn Detection of Credential Exfiltration by LLM Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 19

Resolution: verified exact; arxiv_id, observed 2026-07-02T04:16:36.037768Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation b33c16d6-51a3-4269-abf3-cd2c764d9730 · inbound

Semantic Quorum Assurance: Collective Certification for Non-Deterministic AI Infrastructure cites this paper.

Semantic Quorum Assurance: Collective Certification for Non-Deterministic AI Infrastructure Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 33

Resolution: verified exact; arxiv_id, observed 2026-07-02T20:47:22.530818Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 39a76038-c48d-4c09-89e8-23658ccc3593 · inbound

Brain-Prompt Injection: A Route-Safety Audit for BCI-LLM Agents cites this paper.

Brain-Prompt Injection: A Route-Safety Audit for BCI-LLM Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 22

Resolution: verified exact; arxiv_id, observed 2026-07-03T01:47:31.928375Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation a20cd9a1-eef5-4e8f-8222-55fe1691cca6 · inbound

MIRAGE: A Polarity-Flipping Encoding Subspace in LLM Agents cites this paper.

MIRAGE: A Polarity-Flipping Encoding Subspace in LLM Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 5

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T04:57:38.192366Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 8d9d6654-035b-4a06-81d5-39432b32e719 · inbound

Game-Theoretic Multi-Agent Control for Robust Contextual Reasoning in LLMs cites this paper.

Game-Theoretic Multi-Agent Control for Robust Contextual Reasoning in LLMs Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 15

Resolution: verified exact; arxiv_id, observed 2026-07-03T05:47:41.229355Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 317cc991-7106-429f-8973-67bdeb1617af · inbound

PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents cites this paper.

PARSE: Provenance-Aware Retrieval Sanitization for Professional Domain LLM Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 2024

Resolution: unresolved; no resolver link, observed 2026-08-02T11:07:07.442032Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 33fe266d-6331-498b-95b6-950f61ab31a0 · inbound

Evaluating Prompting-Based Defenses Against Domain-Camouflaged Injection Attacks cites this paper.

Evaluating Prompting-Based Defenses Against Domain-Camouflaged Injection Attacks Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 4

Resolution: verified exact; arxiv_id, observed 2026-07-03T22:08:59.310448Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 850b25ab-2f1e-4164-817f-87a33240546e · inbound

A Layered Security Framework Against Prompt Injection in RAG-Based Chatbots cites this paper.

A Layered Security Framework Against Prompt Injection in RAG-Based Chatbots Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 16

Resolution: verified exact; arxiv_id, observed 2026-07-04T02:09:22.497299Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation c2abf31c-073e-42f1-a60a-a9089c3a6ac8 · inbound

Confidently Wrong: Severity-Aware Calibration of Prompt-Injection Detectors under Attack Shift cites this paper.

Confidently Wrong: Severity-Aware Calibration of Prompt-Injection Detectors under Attack Shift Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 7

Resolution: verified exact; arxiv_id, observed 2026-07-04T09:29:44.070733Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation a47829da-290b-4947-a457-56cd4adcb915 · inbound

Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense cites this paper.

Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 78

Resolution: metadata mismatch; arxiv_id, observed 2026-07-01T12:45:44.893169Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 882da221-d8ed-4050-bd80-7898a459ec4b · inbound

DualView: Preventing Indirect Prompt Injection in Personal AI Agents cites this paper.

DualView: Preventing Indirect Prompt Injection in Personal AI Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 18

Resolution: unresolved; no resolver link, observed 2026-07-11T23:43:28.649948Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 322d5c44-c7ab-417d-9221-8c2d96b559fe · inbound

Information Discernment in Large Language Models cites this paper.

Information Discernment in Large Language Models Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-02T13:26:27.643188Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation db4457de-bbd2-4963-a793-ecef3e38fac2 · inbound

ContainmentBench: Trace-Based Evaluation of Post-Injection Containment in Tool-Using LLM Agents cites this paper.

ContainmentBench: Trace-Based Evaluation of Post-Injection Containment in Tool-Using LLM Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 30

Resolution: unresolved; no resolver link, observed 2026-07-31T23:24:19.576853Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 755f590a-9840-4bb8-8040-56b56c73a6aa · inbound

Beyond Aggregate Risk: Role-Stratified Conformal Risk Control for LLM Tool Calls cites this paper.

Beyond Aggregate Risk: Role-Stratified Conformal Risk Control for LLM Tool Calls Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-03T01:25:30.766287Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6e8d9b35-c683-43d6-a186-a5732b86ad10 · inbound

Chain-of-Models: Cross-Model Auditing for Bias-Robust LLM Judges cites this paper.

Chain-of-Models: Cross-Model Auditing for Bias-Robust LLM Judges Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 51

Resolution: unresolved; no resolver link, observed 2026-08-03T00:55:23.831248Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4e0f8e47-dc08-487c-af06-d08f1e1e2669 · inbound

MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication cites this paper.

MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-04T22:13:21.497262Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6bc4f208-44ae-4ffd-991b-98915cc36574 · inbound

Robust Context-Aware Detection of Malicious Instructions in Text cites this paper.

Robust Context-Aware Detection of Malicious Instructions in Text Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-08T13:19:01.961178Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Coverage vector

Reference resolution

Outbound references

Pith citing papers