Pith. sign in

Paper Citation Record · LEDGER

Defending Against Prompt Injection With a Few DefensiveTokens

As of 10 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 8 inbound Pith citation observations for arXiv:2507.07974.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2507.07974 v2

Coverage vector

measured 59 of 59 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-06T18:32:44.393617Z

measured 67 of 67 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 8 of 8 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-05T15:26:33.475946Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-07-04T00:59:20.691622Z

Reference resolution

59 of 59 outbound references displayed

  • verified exact2
  • verified fuzzy5
  • unresolved50
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch1

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 70deac73-eb39-4506-8e14-af93fb311975 · outbound

This paper cites Get my drift? Catching LLM Task Drift with Activation Deltas.

Defending Against Prompt Injection With a Few DefensiveTokens Get my drift? Catching LLM Task Drift with Activation Deltas

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:38.442495Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:38.442495Z digest=sha256:85e26375ea3fe2ecab6a7d2181d20bb798ccf98a269bbd735e425b714757c594

Observation 2d84767a-0df9-4771-901c-ec6aef9c879b · outbound

This paper cites CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Models.

Defending Against Prompt Injection With a Few DefensiveTokens CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Models

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:38.557329Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:38.557329Z digest=sha256:8537b2928fe6e87222c2e057687ad2c0cb76319db5f3b6e41de79c8029531177

Observation 9ab0f8a5-2e4b-41a9-8917-1f35c561db7b · outbound

This paper cites StruQ: Defending Against Prompt Injection with Structured Queries.

Defending Against Prompt Injection With a Few DefensiveTokens StruQ: Defending Against Prompt Injection with Structured Queries

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:38.700951Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:38.700951Z digest=sha256:e25aa6afb794cc86fb009208a44d87b4f9a34e4a355767148c0ff613ea17a5b0

Observation 6ede77e6-208c-4571-8ddc-ee3fe5407b0c · outbound

This paper cites SecAlign: Defending Against Prompt Injection with Preference Optimization.

Defending Against Prompt Injection With a Few DefensiveTokens SecAlign: Defending Against Prompt Injection with Preference Optimization

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:38.828080Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:38.828080Z digest=sha256:1bf54f0603781fcbfb4f3defd6ae33d04d05ef48600caca7eb3054165153d723

Observation 20f911fd-9d68-486c-ba8b-88f71854ef2a · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:38.970617Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:38.970617Z digest=sha256:3d0f343510754cc22b4335acdd71e12f7eae6877b8da48f26ce69b46e0a59c0b

Observation 8f31587f-0f4d-49f9-bcdc-333a23327ed0 · outbound

This paper cites Angelopoulos, Tianle Li, Dacheng Li, Banghua Zhu, Hao Zhang, Michael I.

Defending Against Prompt Injection With a Few DefensiveTokens Angelopoulos, Tianle Li, Dacheng Li, Banghua Zhu, Hao Zhang, Michael I

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:39.094310Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:39.094310Z digest=sha256:ae5ccc19bf56021b7907a6e769d3a784b582e2804b1d2d2ebe4ce8588afd67d9

Observation 994bbd42-cfd1-4ab1-81a0-07436532cf7e · outbound

This paper cites Defeating Prompt Injections by Design.

Defending Against Prompt Injection With a Few DefensiveTokens Defeating Prompt Injections by Design

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:39.188120Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:39.188120Z digest=sha256:91c9867ee575ea69afc97563ed49558effcb257f3c1f9b49804a7a83fa96a81e

Observation de3f473a-91df-48b7-b18f-8f49a401832b · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 8

Resolution
metadata mismatch
raw_fallback, observed 2026-08-06T18:32:45.517328Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:39.419209Z digest=sha256:f54733b5c0504f6a86beb06b4c312394a5c326e478cb189d8726bfab51ac8288

Observation 8a34d255-a3de-41ca-87fb-87e6e020af5d · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:39.601601Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:39.601601Z digest=sha256:6acc9d1b767b5bb78a11c5f167f13d53e54b1274e34dc4b44557f1dcddf6c7d7

Observation d044c525-6379-4223-bbdb-d62c0e739627 · outbound

This paper cites LoRA: Low-Rank Adaptation of Large Language Models.

Defending Against Prompt Injection With a Few DefensiveTokens LoRA: Low-Rank Adaptation of Large Language Models

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:39.724332Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:39.724332Z digest=sha256:facd873115e3bbd3ce979a84fc3d2197a9664ca4b55b71766bdede187b20ad4a

Observation b3b16656-f545-49ea-8283-cec467f7fd34 · outbound

This paper cites Hsu, and Pin-Yu Chen.

Defending Against Prompt Injection With a Few DefensiveTokens Hsu, and Pin-Yu Chen

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:32:50.101732Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:39.919502Z digest=sha256:f1240385cb0b88f335c9e23edf5b742de3be5e7952fbda4cf25068fb403e8668

Observation c9248236-d609-4c9f-bd72-043c1d0accf3 · outbound

This paper cites Joshi, Hanna Moazam, Heather Miller, Matei Zaharia, and Christopher Potts.

Defending Against Prompt Injection With a Few DefensiveTokens Joshi, Hanna Moazam, Heather Miller, Matei Zaharia, and Christopher Potts

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:32:49.825978Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:40.067620Z digest=sha256:62e0b04991edbde8f43813957bde9ba743e166e7df22bb5f064f862173851993

Observation 428da68c-ebbc-4bca-8f4f-fa741a3ee5aa · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 13

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:49.707217Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:40.147230Z digest=sha256:fcf1006ce03eedaa79f0865599f4676b0f75d9de84cc064734aaff7f081a5749

Observation 355fe044-1d97-405f-9b69-d24229d21e0a · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:40.224826Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:40.224826Z digest=sha256:70942677de1f4682f5c1b2d6d595149dce01210189cddf0ee10c505fa6ad6132

Observation b9b7a7aa-011d-4fed-8ba1-a1590d9eedfe · outbound

This paper cites Hashimoto.

Defending Against Prompt Injection With a Few DefensiveTokens Hashimoto

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:32:49.575464Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:40.344624Z digest=sha256:dd421dc23a082ed2a773b53bdad1f4d467074e10a953f5f2aa19773aec49540b

Observation d4fc5046-9194-4df1-bf95-869d2c8a54fe · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 16

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:49.420803Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:40.439968Z digest=sha256:88051fa34523e40d796b9df2ca69a1d7d447586eda94dbf17f009c91b0c0a3bd

Observation 190efc79-74f7-4d83-a635-89f5c2bcb68a · outbound

This paper cites UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models.

Defending Against Prompt Injection With a Few DefensiveTokens UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:40.613792Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:40.613792Z digest=sha256:850338f75f62b12b10ea957c6888351089874827795ce23abae71e224adef59d

Observation 98b6a98b-c918-43b7-83b6-5e56d436e594 · outbound

This paper cites Automatic and Universal Prompt Injection Attacks against Large Language Models.

Defending Against Prompt Injection With a Few DefensiveTokens Automatic and Universal Prompt Injection Attacks against Large Language Models

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:40.695022Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:40.695022Z digest=sha256:7a19789c16c4ad5fb82b4c57bb6ea16ba7fad9a64aefe80ef574a8b878232132

Observation 97f5d211-58eb-4eed-8bc9-2559a5cbf1b7 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:40.780835Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:40.780835Z digest=sha256:abe975029b4d4080ab012e8f7695f2e5284fc498cbd93ca06f450aa742fd0d19

Observation 348a0822-5451-4ee3-a4e0-cd7ace13e17c · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:40.944988Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:40.944988Z digest=sha256:a9d3c48258a69afc7deb4f4b62a0fcc27ed1a8744c7f92b4e1cfb054de7649d5

Observation 18e0109c-fb7f-4ce8-851a-86edff0d087d · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 21

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:49.145765Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:41.026529Z digest=sha256:d7d64de2d30c13016cd9cdd3b4024f402afb29d76fe184968c8fcc9092a5b9f2

Observation 2003e6b8-6a4b-4646-b29a-455760a2f4d7 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 22

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:49.019498Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:41.095949Z digest=sha256:a79b7acfcda6eac5fc9614d088dfef125e343d7c5383dbe61be2be3904872b0b

Observation 7c37b11c-8886-413a-a66a-787f707d5dfc · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 23

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:48.886048Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:41.159789Z digest=sha256:faa1c8381f1a700f0a69f04ab567be8bbc9213021f39bf47ad3080fa5cd6755f

Observation feb7ba66-ef8a-4906-9e5c-95035cfd8844 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 24

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:48.768104Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:41.262034Z digest=sha256:4bd45ee46e19bf3898ac2aed08a8dc02c79384202da8625c868afb7b639e3997

Observation facda6f5-75d6-452c-a9d7-52b43619f143 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 25

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:48.644595Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:41.321261Z digest=sha256:6142636f320935d68326ae8de5bd27401238927dc60ae10534e7e7a5762eb875

Observation 05afec08-e036-489e-8b5e-63d70c2e5a72 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 26

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:48.490841Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:41.399597Z digest=sha256:9d464c293b0ab730688c8728fe27a1e1c56af1255a1a78d4d6d33e96ed874a4e

Observation 88ad8792-c823-40ff-99cc-0c4d3320fd9f · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 27

Resolution
malformed identifier
no resolver link, observed 2026-08-06T18:32:41.457013Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:41.457013Z digest=sha256:2d9dbde72bad55a1953370a2acff59c8c58c539d37e3f8336cc8c2c4e4ca65da

Observation b56f6ca4-1ac9-4bde-aa6b-6b39ed4d4a73 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:41.570906Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:41.570906Z digest=sha256:a2a9fce83fdfe6532c01801bed9fd74120ef66a48db29c802246c964ca063da1

Observation efbb61b7-605f-4de8-a0ac-9fa53b136c3d · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 29

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:48.360671Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:41.669619Z digest=sha256:a6fb54d13e09bf2fbd22241830895f3d417c41724bdc00978683c9c35b3d2fbd

Observation 96e9f6bf-ed86-4970-86bc-a6a86a19c3a0 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:41.740788Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:41.740788Z digest=sha256:cf6a220dce43a7839fa00a4bf6976fd533e16bf6d591527c2a07049c98bcb372

Observation 000820f1-964e-4176-a142-a1133e6a5280 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 31

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:48.092532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:41.888137Z digest=sha256:2b36f6627d36314ec7375b57e5ced1b38901307ea6f9da0d19bb6c03bdad79f1

Observation 1da3d644-8260-4e79-bc79-24662ce8a970 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 32

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:47.843438Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:41.945512Z digest=sha256:b980c387e1177dacc557df149d7ea799f91ab365742b3d0d0eeeb3638012d654

Observation c389744f-a32a-419c-a020-dcaa75a4e240 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 33

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:47.615215Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:42.036261Z digest=sha256:c0b1ebe50cc2567c2ebd5394723ffc89524fecfdfd83af68f51994d7e22d893c

Observation 8afa656f-67a0-4830-852e-bc6aadb1f529 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:42.150644Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:42.150644Z digest=sha256:d671bbc20af14cc3cf95c5acaeff71656837a608197ab93dda5fa94a1d633e82

Observation 8f93350a-a74b-442c-979f-f06fbf61e616 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 35

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:47.469220Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:42.232639Z digest=sha256:0d15644996e1c2ae350cd2e5e9f2fe165ad3fdae32c6356ddf16885e0be26e1b

Observation 7e49a9ca-1ddb-4af1-8f21-c4a43cb49d7c · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 36

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:47.299636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:42.331638Z digest=sha256:667233a87efb4ff4835485689ebc74358ba866c5d47d9d77d25a87659e2160a7

Observation 4d236274-ed7b-42ed-88a6-8e8dc36937c9 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 37

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:47.095842Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:42.408237Z digest=sha256:6fd58781db4fced5147d74d6b61f126538a04957a20c08718708b9853e12976c

Observation 867c4399-a773-4c4f-b547-b044dae7e006 · outbound

This paper cites The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions.

Defending Against Prompt Injection With a Few DefensiveTokens The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:42.689401Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:42.689401Z digest=sha256:8105ffb7c17478e9b8b265cf69c81b54469c6000212f6df06d28fc2ea72164b2

Observation f83284f0-90e2-4a1a-ba17-078112756859 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 39

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:46.853657Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:42.758508Z digest=sha256:af646ae573da28c0812478bb4ac64d8100f452a4a0637c724fa0e4981c7cd854

Observation c9e12c66-942d-4f13-b196-686c4bf8756d · outbound

This paper cites Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations.

Defending Against Prompt Injection With a Few DefensiveTokens Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:42.838856Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:42.838856Z digest=sha256:59353ded321ff439dbbbabce0f832c28e0c1490b500fb41eda9b726f971611d2

Observation a864402b-0509-43ec-81c8-2df92e7213b2 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 41

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:46.641626Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:42.934138Z digest=sha256:d8a61d4671ed5d37980222eccf3021ab352fd15102f606f4fb5334f763d4fa81

Observation a5d52f40-3e11-4152-9fb8-299456b639b5 · outbound

This paper cites Effectively Controlling Reasoning Models through Thinking Intervention.

Defending Against Prompt Injection With a Few DefensiveTokens Effectively Controlling Reasoning Models through Thinking Intervention

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:43.052649Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:43.052649Z digest=sha256:3ccfbf836ce4fba28c75de140e65213ae63fa3609949a8fb82d16ece7fbb464d

Observation d4a4b962-fc63-4324-a86c-92b825238805 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 43

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:46.454818Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:43.161456Z digest=sha256:01ba54477c461e35226863b1f6ca07ecf33607db7a7566e975dc83739b505fcb

Observation 4cc98494-dc94-4d14-93b6-57ebe08457f8 · outbound

This paper cites Parameter-Efficient Fine-Tuning Methods for Pretrained Language Models: A Critical Review and Assessment.

Defending Against Prompt Injection With a Few DefensiveTokens Parameter-Efficient Fine-Tuning Methods for Pretrained Language Models: A Critical Review and Assessment

Reference 44

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:43.351303Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:43.351303Z digest=sha256:7f7b2f8b7d7ef5de393b5074359b26376175161aa98ec2e4431e4f97e2923574

Observation 44091a2a-b161-497a-9274-e95abd611087 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 45

Resolution
verified exact
raw_fallback, observed 2026-08-06T18:32:44.934779Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:43.484876Z digest=sha256:49d8389e55bb846ffaf10856140b15009f092073990d346d3fbbe767d9451f69

Observation 4300d97a-a3de-4ba7-8848-02d04f2f26a3 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:43.568449Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:43.568449Z digest=sha256:2598e527027576c31fc7ac7150996b38ce866d79fb95940a261dca573d0b84df

Observation 3b493c9e-0051-4249-a6c6-ed4abde381fe · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 47

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:46.272189Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:43.659972Z digest=sha256:4b669d4dc2ec44920e849dbf9879dab1c6ca6c884602241b13a6608ba1843855

Observation 801daeeb-141b-498e-8cb4-1a6a8f010be0 · outbound

This paper cites Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy.

Defending Against Prompt Injection With a Few DefensiveTokens Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy

Reference 48

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:43.260092Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:43.260092Z digest=sha256:91ad0d4436b671f25fa0cfd0a596ea5cdb64d4acc1ba2379efe43d9758353583

Observation 88fb5da2-d55e-4fa5-ab23-6409cdd89dd6 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 49

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:43.883708Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:43.883708Z digest=sha256:a985d45cb1161cb587d5bf383acc5aab33cd0ea17744b78bbef15a4cf8dcac83

Observation cc820dbf-8668-48ed-9fb4-e5843a2f0afc · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 50

Resolution
verified exact
doi, observed 2026-08-06T18:32:44.628903Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:44.005067Z digest=sha256:4c83edec7382ac1f561f106e049be52cd3377012cd4edcac9938a9eef92978a3

Observation c46fd5ac-48fa-416e-9127-e34bc783e919 · outbound

This paper cites On Prompt-Driven Safeguarding for Large Language Models.

Defending Against Prompt Injection With a Few DefensiveTokens On Prompt-Driven Safeguarding for Large Language Models

Reference 51

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:44.096157Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:44.096157Z digest=sha256:7feca284d86c515f63b693bd74decea4914e93291b4989a48c70e826c7f1efe8

Observation b16a4cff-df7b-45c4-b353-ac8a73dbace6 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 52

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:45.998508Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:44.205547Z digest=sha256:57493ea4642dae18a19e7e1edfd38735cc889e1a512a4b2eb11d819b744deab3

Observation 9a8b2c99-4ef4-43db-a997-d9e4e979a834 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 53

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:43.769570Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:43.769570Z digest=sha256:e935253fec6be4fe5346568e65485aa6dedb082da42598a5aaa9c361bd0311a9

Observation 1426ba8a-b9b4-4876-9c84-1f51bfb9f8b0 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 54

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:45.802563Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:44.393617Z digest=sha256:613f3f9195890b217e85e8b3bcdf072532802e447894f0d5fe5d51eb0b70bd22

Observation aad169b6-04a0-46ca-8be5-38d353ad6935 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

Defending Against Prompt Injection With a Few DefensiveTokens Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 58

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:44.285307Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:44.285307Z digest=sha256:7da7a0dbb163a837895ecf6e01d795a96057a4c7c3ff610c05cf51fe27571eb0

Observation 6c142056-0b66-43b3-823d-5cbd2bcf3fdf · outbound

This paper cites Gradient Descent.

Defending Against Prompt Injection With a Few DefensiveTokens Gradient Descent

Reference 2023

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:32:48.260383Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:41.817195Z digest=sha256:da5b9698cddd284815b139c1692e3397cd4e1af9d8e2553d4f613466074734e0

Observation 7ee63721-9ed8-45a9-9bac-9df37a85cb02 · outbound

This paper cites In USENIX Security Symposium.

Defending Against Prompt Injection With a Few DefensiveTokens In USENIX Security Symposium

Reference 2024

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:32:49.277372Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-08-06T18:32:40.851785Z digest=sha256:d95966262b10637acd700b1ec1315adb2bb9ab3a254ced649ecfb4d4a911772a

Observation c58efc40-5b68-4eab-a800-cf3ad0497923 · outbound

This paper cites Lessons from Defending Gemini Against Indirect Prompt Injections.

Defending Against Prompt Injection With a Few DefensiveTokens Lessons from Defending Gemini Against Indirect Prompt Injections

Reference 2025

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:42.517641Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:42.517641Z digest=sha256:753b6f1404f949c422825f2c78eb5cc41fa7da94cbfee6a46c017519cb397539

Observation d1664658-9e36-4c25-b524-7ff79a2ecfcc · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 4597

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:40.529016Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:40.529016Z digest=sha256:61483a430008bded60489b06456f8fd278cead90eab3151f782515a1eb30f70f

Pith citing papers

Observation 00efaf60-b293-480a-b774-31e490f8f738 · inbound

Secure Multi-LLM Agentic AI and Agentification for Edge General Intelligence by Zero-Trust: A Survey cites this paper.

Secure Multi-LLM Agentic AI and Agentification for Edge General Intelligence by Zero-Trust: A Survey Defending Against Prompt Injection With a Few DefensiveTokens

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-05T15:26:33.475946Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:26:33.475946Z digest=sha256:696b99f8d90d8e45b45d93db048c3bc1c220af1f7db50bc0c9a8442791929495

Observation 3759cf91-e76f-435b-a7b1-a60fb611481f · inbound

Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain cites this paper.

Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain Defending Against Prompt Injection With a Few DefensiveTokens

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-05T10:44:10.395605Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T10:44:10.395605Z digest=sha256:125c52130d1a6c22e44b82c7bf5712fd5d60e9c37d92bb12828c314b639a473f

Observation 38648840-d053-4eb0-be8d-b05dcf8a8c4b · inbound

AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization cites this paper.

AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization Defending Against Prompt Injection With a Few DefensiveTokens

Reference 1

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T22:16:31.049398Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-05-08T03:07:21.524834Z digest=sha256:2653787b0c524eb073fd8f6d3ffd51cd907fc45ddbda44fd75fd0d4835b98550

Observation 8e49ae19-fc24-43d5-b9b2-3450b671cc89 · inbound

Self-Adaptive Multi-Agent LLM-Based Security Pattern Selection for IoT Systems cites this paper.

Self-Adaptive Multi-Agent LLM-Based Security Pattern Selection for IoT Systems Defending Against Prompt Injection With a Few DefensiveTokens

Reference 40

Resolution
verified exact
arxiv_id, observed 2026-05-11T15:51:44.325861Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-05-09T19:04:48.453055Z digest=sha256:4db68c0fad77cbd69150254994ddcc43eacf39565d5e4ef7d43730ce99ce25c3

Observation 987c7af2-19bf-4a4d-864e-313c699e9eff · inbound

Agent Security is a Systems Problem cites this paper.

Agent Security is a Systems Problem Defending Against Prompt Injection With a Few DefensiveTokens

Reference 9

Resolution
verified exact
arxiv_id, observed 2026-05-20T09:03:09.853946Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-05-20T09:02:59.719090Z digest=sha256:304884754c7ecdb49d711e713fb775e7429a97a634fed66fb95eb1c70f932d2d

Observation 600205e2-4a6b-4577-b4a7-3841a0de1d52 · inbound

Agent Security is a Systems Problem cites this paper.

Agent Security is a Systems Problem Defending Against Prompt Injection With a Few DefensiveTokens

Reference 9

Resolution
verified exact
arxiv_id, observed 2026-05-21T07:44:02.915798Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-05-21T07:43:14.250188Z digest=sha256:1122b414e6d1a07cee5ab38943bf2b4ef0268d8f1da474391802c9b5b9b0f061

Observation 11510c15-b9e1-4dc5-8a0a-736bce17a901 · inbound

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications cites this paper.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Defending Against Prompt Injection With a Few DefensiveTokens

Reference 31

Resolution
verified exact
arxiv_id, observed 2026-07-04T00:59:20.694798Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:2138a0e703bb56d4016105be1c99701f12232387b3e2bac3cdfdb0872c43e0c6

Observation 50c8ef7e-94ed-410f-aff7-75c78a20766e · inbound

Data Leakage Prevention in Agentic Applications via Preemptive Hardening cites this paper.

Data Leakage Prevention in Agentic Applications via Preemptive Hardening Defending Against Prompt Injection With a Few DefensiveTokens

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-01T14:11:22.395013Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-01T14:11:22.395013Z digest=sha256:cf063b7ed20d3a7e66769ebd413e16433abae11d811b17209e1e7b1856d03eeb