Paper Citation Record · LEDGER

System Prompt Extraction Attacks and Defenses in Large Language Models

As of 19 August 2026, this Paper Citation Record lists 75 of 75 outbound references and 3 inbound Pith citation observations for arXiv:2505.23817.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2505.23817 v1

Coverage vector

measured 75 of 75 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T13:28:21.836925Z

measured 78 of 78 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-19T06:32:44.657259+00:00

measured 3 of 3 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-08T04:21:30.393348Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Reference resolution

75 of 75 outbound references displayed

verified exact2
verified fuzzy28
unresolved45
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

0
arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Outbound references

Observation 904ae51b-c775-413c-b332-05ed7340ee58 · outbound

This paper cites GPT-4 Technical Report.

System Prompt Extraction Attacks and Defenses in Large Language Models GPT-4 Technical Report

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:15.868481Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3409a184-0836-489a-8886-b6fc5dffd51a · outbound

This paper cites Prompt leakage effect and mitigation strategies for multi-turn LLM applications.

System Prompt Extraction Attacks and Defenses in Large Language Models Prompt leakage effect and mitigation strategies for multi-turn LLM applications

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:29.131750Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 68f541b0-139e-495c-ad6b-6eec07333f52 · outbound

This paper cites Harmful content generation.

System Prompt Extraction Attacks and Defenses in Large Language Models Harmful content generation

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:28.982642Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation cfbd207a-b95b-4558-9006-2464ad7c8d96 · outbound

This paper cites How Susceptible are LLMs to Influence in Prompts?.

System Prompt Extraction Attacks and Defenses in Large Language Models How Susceptible are LLMs to Influence in Prompts?

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:16.031944Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7e476f65-7f2c-43a4-a050-3de0463c1a4d · outbound

This paper cites Large Language Models: A survey of their development, capabilities, and applications.

System Prompt Extraction Attacks and Defenses in Large Language Models Large Language Models: A survey of their development, capabilities, and applications

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:28.856056Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 965523e6-8e41-4123-92a5-50e4aeec9dae · outbound

This paper cites Introducing the next generation of Claude.

System Prompt Extraction Attacks and Defenses in Large Language Models Introducing the next generation of Claude

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:28.708539Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 264951e0-35c1-4b96-af56-b6c3b95f317d · outbound

This paper cites Language models are few-shot learners.

System Prompt Extraction Attacks and Defenses in Large Language Models Language models are few-shot learners

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:16.277338Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c4c3386-82fd-4c9b-854e-d5ad2a8135df · outbound

This paper cites System prompt leakage.

System Prompt Extraction Attacks and Defenses in Large Language Models System prompt leakage

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:28.495951Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation dacd04bf-49a9-4a19-93d6-1baad2ea8909 · outbound

This paper cites Security and privacy challenges of Large Language Models: A survey.

System Prompt Extraction Attacks and Defenses in Large Language Models Security and privacy challenges of Large Language Models: A survey

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:28.302234Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 18dc2fd6-bafc-438e-91d7-fb40e553749a · outbound

This paper cites google/txgemma-9b-chat.

System Prompt Extraction Attacks and Defenses in Large Language Models google/txgemma-9b-chat

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:28.192950Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation a66f8d0c-2eef-45ec-ad8b-b91a03eae4d3 · outbound

This paper cites tiiuae/falcon3-7b-instruct.

System Prompt Extraction Attacks and Defenses in Large Language Models tiiuae/falcon3-7b-instruct

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:28.100516Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7aa40db5-8083-4292-be28-58c7902b7ceb · outbound

This paper cites meta-llama/llama-3.1-8b-instruct.

System Prompt Extraction Attacks and Defenses in Large Language Models meta-llama/llama-3.1-8b-instruct

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:27.940904Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 16bd48d7-df57-4aea-b5b2-cc68ffca1bbd · outbound

This paper cites The Llama 3 Herd of Models.

System Prompt Extraction Attacks and Defenses in Large Language Models The Llama 3 Herd of Models

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:16.664623Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 75d57d93-2ec7-4c25-8b8f-99fa28be6c03 · outbound

This paper cites Do LLMs "know" internally when they follow instructions?.

System Prompt Extraction Attacks and Defenses in Large Language Models Do LLMs "know" internally when they follow instructions?

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:16.754755Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b5911f80-068c-4bc2-abf7-15e1af6fae08 · outbound

This paper cites LLM System Prompt Leakage: Prevention Strategies.

System Prompt Extraction Attacks and Defenses in Large Language Models LLM System Prompt Leakage: Prevention Strategies

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:27.768943Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 76c02757-bf5a-488a-ac44-e9e1ae5c7dae · outbound

This paper cites Pleak: Prompt Leaking Attacks against Large Language Model Applications.

System Prompt Extraction Attacks and Defenses in Large Language Models Pleak: Prompt Leaking Attacks against Large Language Model Applications

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:27.638262Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 2af08ee1-16db-402e-8136-758dd48bcbdc · outbound

This paper cites ChatGPT roles.

System Prompt Extraction Attacks and Defenses in Large Language Models ChatGPT roles

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:27.513060Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation a8932f52-8035-46bd-9b9c-30d2957f624b · outbound

This paper cites Exploiting programmatic behavior of LLMs: Dual-use through standard security attacks.

System Prompt Extraction Attacks and Defenses in Large Language Models Exploiting programmatic behavior of LLMs: Dual-use through standard security attacks

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:27.376292Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 9c6d2e89-f6f6-4b7a-b19b-2e82c88b1d99 · outbound

This paper cites What is a prompt injection attack? https://www.ibm.com/ think/topics/prompt-injection, 2024.

System Prompt Extraction Attacks and Defenses in Large Language Models What is a prompt injection attack? https://www.ibm.com/ think/topics/prompt-injection, 2024

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:27.204619Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7179ff40-a2b6-4f0f-8ae0-b42c81278ced · outbound

This paper cites Cosine similarity to determine similarity measure: Study case in online essay assessment.

System Prompt Extraction Attacks and Defenses in Large Language Models Cosine similarity to determine similarity measure: Study case in online essay assessment

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:27.067011Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 227d56cf-4a72-4ca8-954f-adc32a8a8f80 · outbound

This paper cites Multi-step Jailbreaking Privacy Attacks on ChatGPT.

System Prompt Extraction Attacks and Defenses in Large Language Models Multi-step Jailbreaking Privacy Attacks on ChatGPT

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:17.454592Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 04c296ac-4f0e-4b54-8c69-ca54abaae151 · outbound

This paper cites Rouge: A package for automatic evaluation of summaries.

System Prompt Extraction Attacks and Defenses in Large Language Models Rouge: A package for automatic evaluation of summaries

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:17.502752Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 30a345e2-d63f-489f-b53b-e898990292be · outbound

This paper cites AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models.

System Prompt Extraction Attacks and Defenses in Large Language Models AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:17.560475Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation df8f36f9-83c9-4aec-85a8-5af897699b7f · outbound

This paper cites Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities.

System Prompt Extraction Attacks and Defenses in Large Language Models Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:17.621783Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 24a3a16c-7ad3-457e-9e14-52f68f6040bb · outbound

This paper cites Adversarial Fine-Tuning of Language Models: An Iterative Optimisation Approach for the Generation and Detection of Problematic Content.

System Prompt Extraction Attacks and Defenses in Large Language Models Adversarial Fine-Tuning of Language Models: An Iterative Optimisation Approach for the Generation and Detection of Problematic Content

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:17.670309Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c3d2a8e-a1ec-4e24-a3a3-2a45f0f9b91d · outbound

This paper cites GPT-4 System Card.

System Prompt Extraction Attacks and Defenses in Large Language Models GPT-4 System Card

Reference 26

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:26.876274Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation bcdb0479-0497-4716-ac7c-f434048734fc · outbound

This paper cites Introducing GPT-4.1 in the API.

System Prompt Extraction Attacks and Defenses in Large Language Models Introducing GPT-4.1 in the API

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:26.760865Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 5c86a944-cd53-4906-8dde-a15a4c7d60d9 · outbound

This paper cites Prompt Obfuscation for Large Language Models.

System Prompt Extraction Attacks and Defenses in Large Language Models Prompt Obfuscation for Large Language Models

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:17.822643Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9b6fa092-b653-4055-9006-2a6a0a5eca04 · outbound

This paper cites Ignore Previous Prompt: Attack Techniques For Language Models.

System Prompt Extraction Attacks and Defenses in Large Language Models Ignore Previous Prompt: Attack Techniques For Language Models

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:17.896064Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 38ed03f7-5671-439e-9928-0906af6f2d3a · outbound

This paper cites Instruction defense.

System Prompt Extraction Attacks and Defenses in Large Language Models Instruction defense

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:26.607229Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 677e49f2-382d-49d0-a7f4-736a24f30952 · outbound

This paper cites Chatgpt roles.

System Prompt Extraction Attacks and Defenses in Large Language Models Chatgpt roles

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:26.472795Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e5ae70ec-8c69-4734-8707-9998edb73825 · outbound

This paper cites Prompt Stealing Attacks Against Large Language Models.

System Prompt Extraction Attacks and Defenses in Large Language Models Prompt Stealing Attacks Against Large Language Models

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:18.063710Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation af023c88-0c17-4978-99fc-96cd4461ca92 · outbound

This paper cites Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models.

System Prompt Extraction Attacks and Defenses in Large Language Models Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:18.153671Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2023e019-f348-4999-b99f-971ea631d18e · outbound

This paper cites Do Anything Now.

System Prompt Extraction Attacks and Defenses in Large Language Models Do Anything Now

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:26.323022Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation deeb8f5a-a1c3-4b84-b42c-c29b0de78707 · outbound

This paper cites AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts.

System Prompt Extraction Attacks and Defenses in Large Language Models AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:18.283491Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f332e495-a5e7-459f-b185-e37b3f13fa49 · outbound

This paper cites ChunkRAG: Novel LLM-Chunk Filtering Method for RAG Systems.

System Prompt Extraction Attacks and Defenses in Large Language Models ChunkRAG: Novel LLM-Chunk Filtering Method for RAG Systems

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:18.325891Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 733cf314-bd1b-42d2-887d-7732eb270e68 · outbound

This paper cites Gemini: A Family of Highly Capable Multimodal Models.

System Prompt Extraction Attacks and Defenses in Large Language Models Gemini: A Family of Highly Capable Multimodal Models

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:18.392685Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a49f65a8-ab1e-4156-97c4-1d7f848a4cff · outbound

This paper cites Falcon 3 family of open foundation models, December 2024.

System Prompt Extraction Attacks and Defenses in Large Language Models Falcon 3 family of open foundation models, December 2024

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:26.207476Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 161fb040-ee28-4bec-9480-cd9a8c4f7b3b · outbound

This paper cites Sandwich attack: Multi-language Mixture Adaptive Attack on LLMs.

System Prompt Extraction Attacks and Defenses in Large Language Models Sandwich attack: Multi-language Mixture Adaptive Attack on LLMs

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:18.519058Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f905274b-f7b1-4004-95f6-a38bce22d580 · outbound

This paper cites Synthetic Multilingual LLM Prompts: A synthetic multilingual prompt dataset for prompting llms.

System Prompt Extraction Attacks and Defenses in Large Language Models Synthetic Multilingual LLM Prompts: A synthetic multilingual prompt dataset for prompting llms

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:26.124131Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 20202f5c-7b09-449a-bf81-997ce875bb6f · outbound

This paper cites The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness.

System Prompt Extraction Attacks and Defenses in Large Language Models The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness

Reference 41

Resolution: verified exact; local_arxiv, observed 2026-08-07T13:28:22.318470Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation c697ad06-cd63-4715-b734-3431039dbec4 · outbound

This paper cites Attention is all you need.

System Prompt Extraction Attacks and Defenses in Large Language Models Attention is all you need

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:18.744733Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5e5ac694-5ff5-46f1-86c1-ab14a96b5bb0 · outbound

This paper cites Jaeger, Fan Zhang, Rory Pilgrim, Yossi Matias, Joelle Barral, David Fleet, and Shekoofeh Azizi.

System Prompt Extraction Attacks and Defenses in Large Language Models Jaeger, Fan Zhang, Rory Pilgrim, Yossi Matias, Joelle Barral, David Fleet, and Shekoofeh Azizi

Reference 43

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:25.969480Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b11abeee-d132-4cfb-aee1-84801f49987e · outbound

This paper cites A Tutorial on LLM Reasoning: Relevant Methods behind ChatGPT o1.

System Prompt Extraction Attacks and Defenses in Large Language Models A Tutorial on LLM Reasoning: Relevant Methods behind ChatGPT o1

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:18.865072Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a17c2539-2ea3-4a32-a41f-8417f4da89e1 · outbound

This paper cites Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications.

System Prompt Extraction Attacks and Defenses in Large Language Models Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications

Reference 45

Resolution: verified exact; local_arxiv, observed 2026-08-07T13:28:22.086452Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 46e94282-c291-43c0-9f6e-3e25aec7761d · outbound

This paper cites PromptAgent: Strategic Planning with Language Models Enables Expert-level Prompt Optimization.

System Prompt Extraction Attacks and Defenses in Large Language Models PromptAgent: Strategic Planning with Language Models Enables Expert-level Prompt Optimization

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:18.947368Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8b21fa52-71b6-4c68-adae-8f664e50b043 · outbound

This paper cites Jailbroken: How does LLM safety training fail? Advances in Neural Information Processing Systems, 36:80079–80110, 2023.

System Prompt Extraction Attacks and Defenses in Large Language Models Jailbroken: How does LLM safety training fail? Advances in Neural Information Processing Systems, 36:80079–80110, 2023

Reference 47

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:25.824465Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 0ab4e036-2bb9-4db0-9aea-4e8a469bce3f · outbound

This paper cites Chi, Quoc V.

System Prompt Extraction Attacks and Defenses in Large Language Models Chi, Quoc V

Reference 48

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:19.026388Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e5db517b-63b3-4ad3-afef-fe7ff873368e · outbound

This paper cites PRSA: Prompt Stealing Attacks against Real-World Prompt Services.

System Prompt Extraction Attacks and Defenses in Large Language Models PRSA: Prompt Stealing Attacks against Real-World Prompt Services

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:19.070717Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 124fb2d1-84b4-4e2c-85d1-5f8a13c7549b · outbound

This paper cites Assessing Prompt Injection Risks in 200+ Custom GPTs.

System Prompt Extraction Attacks and Defenses in Large Language Models Assessing Prompt Injection Risks in 200+ Custom GPTs

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:19.116843Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 781d88b3-dd71-4560-9cef-d771f702c936 · outbound

This paper cites Effective Prompt Extraction from Language Models.

System Prompt Extraction Attacks and Defenses in Large Language Models Effective Prompt Extraction from Language Models

Reference 51

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:19.348303Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 96a6d877-eb7d-4835-b925-670b7a99df8b · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

System Prompt Extraction Attacks and Defenses in Large Language Models Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 52

Resolution: unresolved; no resolver link, observed 2026-08-07T13:28:19.412839Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ad724349-2791-4445-a72a-bba6b4973ef2 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 53

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:25.684677Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 4b7f047d-32cb-4252-b07d-17108b202edd · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 54

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:25.481335Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f1d80ebf-f31f-4434-9239-cda6326d87f2 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 55

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:25.352312Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e5efa0c1-a192-4d91-9ca1-b2c4bdcea925 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 56

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:25.240899Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 112a6624-9438-4064-9c8d-1242c9606e33 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 57

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:25.004742Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 0e24d379-fe6c-4048-8617-3882ca4d789a · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 62

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:24.368087Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 05b4b0ec-1184-4dbe-a6e6-16df576fa242 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 67

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:24.249124Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 4636bb8f-0887-4d16-b81b-7481343fe74b · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 68

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:24.754740Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 0f419749-771d-4eb5-88b1-45a926006581 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 69

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:24.652428Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 206ea9a2-8a80-4f34-8ce8-f9a2219720f3 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 70

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:24.567738Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e2d401d4-ed19-4ca2-b78f-c2ba443c1373 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 71

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:24.481390Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 9db4b0c9-d81d-43a2-b158-2ce8661f3a8b · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 72

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:24.138677Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation fec12599-a0f0-42d3-8239-3ff42fe44287 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 75

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:23.743851Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 26ae3c3f-e162-4bf5-8978-e41add032e12 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 78

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:23.620538Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 38312853-8305-4986-adf4-2b02e19d0cff · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 79

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:23.972893Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 2217e8b5-27fa-4bc7-a6b4-75dea27232f5 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 80

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:23.883772Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 4901a84e-f253-4d88-8547-5d1f6f88807f · outbound

This paper cites I am a travel assistant, I share travel tips, destination ……….

System Prompt Extraction Attacks and Defenses in Large Language Models I am a travel assistant, I share travel tips, destination ………

Reference 81

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:23.499537Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 690fcd5e-5a83-476e-82ac-e922141c337c · outbound

This paper cites I am a travel assistant, I share travel tips, destination ……….

System Prompt Extraction Attacks and Defenses in Large Language Models I am a travel assistant, I share travel tips, destination ………

Reference 85

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:22.963529Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 6701a554-ac23-4d94-ad4b-aee539d2b8b9 · outbound

This paper cites I am a travel assistant, I share travel tips, destination ……….

System Prompt Extraction Attacks and Defenses in Large Language Models I am a travel assistant, I share travel tips, destination ………

Reference 89

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:22.895554Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 6f5257d0-2f65-4810-a6e7-52e4ab7c0740 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 90

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:23.396384Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 8dca8632-4df4-4356-b763-d7e41c1a45dd · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 91

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:23.239059Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 2fc0da6c-d258-43ce-ab8c-6d84c8c6faa8 · outbound

This paper cites an unresolved cited work.

System Prompt Extraction Attacks and Defenses in Large Language Models Unresolved cited work

Reference 92

Resolution: unresolved; raw_fallback, observed 2026-08-07T13:28:23.100624Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 50491108-12ad-4053-90d3-10d70fe146bb · outbound

This paper cites I am a travel assistant, I share travel tips, destination ……….

System Prompt Extraction Attacks and Defenses in Large Language Models I am a travel assistant, I share travel tips, destination ………

Reference 93

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T13:28:22.787794Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Pith citing papers

Observation 251d89f7-920e-41a7-afd9-9004fc6ad39a · inbound

Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening cites this paper.

Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening System Prompt Extraction Attacks and Defenses in Large Language Models

Reference 6

Resolution: metadata mismatch; arxiv_id, observed 2026-06-29T11:23:21.304322Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation ca5f4bdd-cfe1-4b76-bd04-129b61282dfa · inbound

Prompt Governance? On Governing Technologies Governed by Natural Language cites this paper.

Prompt Governance? On Governing Technologies Governed by Natural Language System Prompt Extraction Attacks and Defenses in Large Language Models

Reference 77

Resolution: verified exact; arxiv_id, observed 2026-07-01T08:25:32.638976Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation bd1c589c-65c5-4ad4-a46f-386c73719985 · inbound

SparSEEty: Extracting Tokens from Sparsity-Exploiting LLM Serving Systems via Deterministic Side Channels cites this paper.

SparSEEty: Extracting Tokens from Sparsity-Exploiting LLM Serving Systems via Deterministic Side Channels System Prompt Extraction Attacks and Defenses in Large Language Models

Reference 75

Resolution: unresolved; no resolver link, observed 2026-08-08T04:21:30.393348Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.