Skip to content
Oct 12 · Monday

All papers

Found 1 paper
Filter5

Attack type

Extraction and theft1

Defense type

Inference-time intervention1

System type

Models and APIs4LLM applications1coding agent0Browser and computer use0
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 255papers have no tags yet and are not included in filtered results.
Attack type：Extraction and theftDefense type：Inference-time interventionSystem type：LLM applicationsSystem type：coding agentSystem type：Browser and computer useClear all

Another 255papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2606.18673

    Understanding and mitigating prompt leakage attacks in real-world LLM applications

    Propose soft prompt defense AREA, re-anchoring attention to mitigate system prompt leakage

    arXiv
    2606.18673
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Attacker
    Black-box
    Evaluated models
    Llama-2-7B-chat-hf, Llama-3.1-8B-Instruct, Mistral-7B-Instruct-v0.3 and others8
    AbstractThe authors measure commercial prompt leakage, propose attention drift, and use AREA to strike a trade-off between usability and leakage resistance.

    The authors study system prompt leakage in real LLM applications and propose AREA, a mitigation method that does not modify weights.

    Paper analysisRead analysis
You have reached the end