Skip to content
Oct 13 · Tuesday

All papers

Found 1 paper
Filter4

Attack type

Jailbreaks40Prompt injection4Poisoning and backdoors3Extraction and theft1Detection evasion7

Attack technique

Automated search4Encoding and obfuscation1Role-play and persuasion3

Attack surface / entry point

User input1Memory writes0
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 213papers have no tags yet and are not included in filtered results.
Attack type：Extraction and theftAttack technique：Encoding and obfuscationAttack surface / entry point：User inputAttack surface / entry point：Memory writesClear all

Another 213papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2604.01039

    Evaluating and hardening LLM system instructions against encoding attack extraction

    Extract system instructions with encoding and structured requests, and harden them by rewriting with CoT

    arXiv
    2604.01039
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    GPT-4.1-mini, GPT-3.5-turbo, Gemini-2.5-flash and others7
    AbstractEncoded requests can elicit system instructions after a direct refusal.

    This work evaluates and hardens the confidentiality of LLM system instructions under encoded extraction. The authors are concerned with: when direct extraction has been rejected, whether the model still surrenders protected content when the same request is rewritten as a formatting or encoding task.

    Paper analysisRead analysis
You have reached the end