{"id":"https://openalex.org/W7225225613","doi":"https://doi.org/10.22214/ijraset.2026.85566","title":"An Explainable Graph Attention Network for Indirect Prompt Injection Detection in RAG Systems","display_name":"An Explainable Graph Attention Network for Indirect Prompt Injection Detection in RAG Systems","publication_year":2026,"publication_date":"2026-11-04","ids":{"openalex":"https://openalex.org/W7225225613","doi":"https://doi.org/10.22214/ijraset.2026.85566"},"language":"en","primary_location":{"id":"doi:10.22214/ijraset.2026.85566","doi":"https://doi.org/10.22214/ijraset.2026.85566","is_oa":true,"landing_page_url":"https://doi.org/10.22214/ijraset.2026.85566","pdf_url":"https://doi.org/10.22214/ijraset.2026.85566","source":{"id":"https://openalex.org/S2764566388","display_name":"International Journal for Research in Applied Science and Engineering Technology","issn_l":"2321-9653","issn":["2321-9653"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4322614460","host_organization_name":"International Journal for Research in Applied Science and Engineering Technology (IJRASET)","host_organization_lineage":["https://openalex.org/P4322614460"],"host_organization_lineage_names":["International Journal for Research in Applied Science and Engineering Technology (IJRASET)"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal for Research in Applied Science and Engineering Technology","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.22214/ijraset.2026.85566","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160666167","display_name":"V. Rudrani","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I170558118","display_name":"Sri Venkateswara University","ror":"https://ror.org/05weahn72","country_code":"IN","type":"education","lineage":["https://openalex.org/I170558118"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"V. Rudrani","raw_affiliation_strings":["Department of Computer Science and Engineering , S V U College of Engineering , Sri Venkateswara University , Tirupati , India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering , S V U College of Engineering , Sri Venkateswara University , Tirupati , India","institution_ids":["https://openalex.org/I170558118"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062230168","display_name":"Ch. D. V. Subba Rao","orcid":"https://orcid.org/0000-0003-3173-7817","observed_orcids":["https://orcid.org/0000-0003-3173-7817"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ch. D V Subba Rao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.83151623,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":"11","first_page":"99","last_page":"109"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.989300012588501,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.989300012588501,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.007799999788403511,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.0013000000035390258,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/indirect-prompt-injection","display_name":"indirect prompt injection","score":0.9319999814033508},{"id":"https://openalex.org/keywords/retrieval-augmented-generation","display_name":"retrieval-augmented generation","score":0.9769999980926514},{"id":"https://openalex.org/keywords/graph-attention-networks","display_name":"graph attention networks","score":0.7749999761581421},{"id":"https://openalex.org/keywords/explainable-ai","display_name":"explainable AI","score":0.7879999876022339},{"id":"https://openalex.org/keywords/document-classification","display_name":"document classification","score":0.4429999887943268},{"id":"https://openalex.org/keywords/large-language-model-security","display_name":"large language model security","score":0.7329999804496765},{"id":"https://openalex.org/keywords/financial-records","display_name":"financial records","score":0.4339999854564667}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.763700008392334},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.6434999704360962},{"id":"https://openalex.org/C2777530160","wikidata":"https://www.wikidata.org/wiki/Q41796","display_name":"Sentence","level":2,"score":0.6089000105857849},{"id":"https://openalex.org/C2780762811","wikidata":"https://www.wikidata.org/wiki/Q1784941","display_name":"Cosine similarity","level":3,"score":0.6060000061988831},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.4968000054359436},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47870001196861267},{"id":"https://openalex.org/C2993807640","wikidata":"https://www.wikidata.org/wiki/Q103709453","display_name":"Attention network","level":2,"score":0.46070000529289246},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.45980000495910645},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.4343000054359436},{"id":"https://openalex.org/C163716315","wikidata":"https://www.wikidata.org/wiki/Q901177","display_name":"Gaussian","level":2,"score":0.4296000003814697},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.4244000017642975},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3779999911785126},{"id":"https://openalex.org/C117220453","wikidata":"https://www.wikidata.org/wiki/Q5172842","display_name":"Correlation","level":2,"score":0.3617999851703644},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.35199999809265137},{"id":"https://openalex.org/C2778067643","wikidata":"https://www.wikidata.org/wiki/Q166507","display_name":"Interval (graph theory)","level":2,"score":0.3391999900341034},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.3305000066757202},{"id":"https://openalex.org/C4199805","wikidata":"https://www.wikidata.org/wiki/Q2725903","display_name":"Gaussian noise","level":2,"score":0.3244999945163727},{"id":"https://openalex.org/C2780092901","wikidata":"https://www.wikidata.org/wiki/Q3433612","display_name":"Correlation coefficient","level":2,"score":0.32429999113082886},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32260000705718994},{"id":"https://openalex.org/C44249647","wikidata":"https://www.wikidata.org/wiki/Q208498","display_name":"Confidence interval","level":2,"score":0.30550000071525574},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2892000079154968},{"id":"https://openalex.org/C166550679","wikidata":"https://www.wikidata.org/wiki/Q263400","display_name":"Gaussian network model","level":3,"score":0.28209999203681946},{"id":"https://openalex.org/C16910744","wikidata":"https://www.wikidata.org/wiki/Q7705759","display_name":"Test data","level":2,"score":0.2802000045776367},{"id":"https://openalex.org/C55078378","wikidata":"https://www.wikidata.org/wiki/Q1136628","display_name":"Pearson product-moment correlation coefficient","level":2,"score":0.2533000111579895},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.25220000743865967}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.22214/ijraset.2026.85566","doi":"https://doi.org/10.22214/ijraset.2026.85566","is_oa":true,"landing_page_url":"https://doi.org/10.22214/ijraset.2026.85566","pdf_url":"https://doi.org/10.22214/ijraset.2026.85566","source":{"id":"https://openalex.org/S2764566388","display_name":"International Journal for Research in Applied Science and Engineering Technology","issn_l":"2321-9653","issn":["2321-9653"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4322614460","host_organization_name":"International Journal for Research in Applied Science and Engineering Technology (IJRASET)","host_organization_lineage":["https://openalex.org/P4322614460"],"host_organization_lineage_names":["International Journal for Research in Applied Science and Engineering Technology (IJRASET)"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal for Research in Applied Science and Engineering Technology","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.22214/ijraset.2026.85566","doi":"https://doi.org/10.22214/ijraset.2026.85566","is_oa":true,"landing_page_url":"https://doi.org/10.22214/ijraset.2026.85566","pdf_url":"https://doi.org/10.22214/ijraset.2026.85566","source":{"id":"https://openalex.org/S2764566388","display_name":"International Journal for Research in Applied Science and Engineering Technology","issn_l":"2321-9653","issn":["2321-9653"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4322614460","host_organization_name":"International Journal for Research in Applied Science and Engineering Technology (IJRASET)","host_organization_lineage":["https://openalex.org/P4322614460"],"host_organization_lineage_names":["International Journal for Research in Applied Science and Engineering Technology (IJRASET)"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal for Research in Applied Science and Engineering Technology","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7225225613.pdf","grobid_xml":"https://content.openalex.org/works/W7225225613.grobid-xml"},"referenced_works_count":7,"referenced_works":["https://openalex.org/W4399354120","https://openalex.org/W4403884175","https://openalex.org/W4404341789","https://openalex.org/W4404342689","https://openalex.org/W4405267222","https://openalex.org/W4410809880","https://openalex.org/W4416840250"],"related_works":["https://openalex.org/W7211892134","https://openalex.org/W7222723944","https://openalex.org/W7223081833","https://openalex.org/W7221794325","https://openalex.org/W7167592244","https://openalex.org/W7221059439","https://openalex.org/W7220694173","https://openalex.org/W4402717393","https://openalex.org/W7128090118","https://openalex.org/W7160190670"],"abstract_inverted_index":{"Retrieval-Augmented":[0],"Generation":[1],"(RAG)":[2],"enables":[3],"large":[4],"language":[5,55],"models":[6],"(LLMs)":[7],"to":[8,25,44,107,155,186,215],"answer":[9],"queries":[10],"using":[11,67,119],"information":[12],"obtained":[13,161],"from":[14,76,123,184,232],"external":[15],"documents.":[16,128],"However,":[17],"retrieved":[18,49],"content":[19],"may":[20],"contain":[21],"concealed":[22],"commands":[23],"intended":[24],"influence":[26],"the":[27,54,77,105,109,149,156,159,199,233],"model's":[28],"behaviour,":[29],"creating":[30],"a":[31,41,68,86,170],"security":[32],"risk":[33],"called":[34],"indirect":[35],"prompt":[36],"injection.":[37],"This":[38],"research":[39],"develops":[40],"GAT-based":[42],"approach":[43,190],"identify":[45],"harmful":[46],"instructions":[47],"in":[48],"documents":[50],"before":[51],"they":[52],"reach":[53],"model.":[56,71],"Each":[57],"document":[58,110],"is":[59,74],"split":[60],"into":[61],"individual":[62],"sentences,":[63],"which":[64],"are":[65],"encoded":[66],"frozen":[69],"DeBERTa-v3-base":[70],"A":[72,92],"graph":[73,106],"constructed":[75],"sentence":[78],"embeddings,":[79],"linking":[80],"adjacent":[81],"sentences":[82],"and":[83,125,138,169,228],"pairs":[84],"with":[85,142],"cosine":[87],"similarity":[88],"score":[89],"above":[90],"0.7.":[91],"two-layer":[93],"Graph":[94],"Attention":[95],"Network":[96],"(GAT),":[97],"comprising":[98],"approximately":[99],"0.4":[100],"million":[101],"trainable":[102],"parameters,":[103],"processes":[104],"classify":[108],"as":[111],"benign":[112],"or":[113],"malicious.":[114],"The":[115,129,188],"model":[116,160],"was":[117],"evaluated":[118],"10,000":[120],"samples":[121,201],"collected":[122,223],"financial":[124],"corporate":[126],"policy":[127],"dataset":[130],"contains":[131],"6,400":[132],"training":[133],"samples,":[134,137,141],"1,600":[135],"validation":[136],"2,000":[139],"testing":[140],"equal":[143],"representation":[144],"of":[145,151,167,174,194,198,204],"both":[146],"classes.":[147],"Following":[148],"addition":[150],"calibrated":[152],"Gaussian":[153],"noise":[154],"input":[157],"features,":[158],"99.80%":[162],"test":[163],"accuracy,":[164],"an":[165,192],"F1-score":[166],"0.998,":[168],"Matthews":[171],"correlation":[172],"coefficient":[173],"0.996.":[175],"Its":[176,209],"95%":[177],"Wilson":[178],"confidence":[179],"interval":[180],"for":[181],"accuracy":[182,193],"ranged":[183],"99.49%":[185],"99.92%.":[187],"keyword-based":[189],"recorded":[191],"87.93%,":[195],"but":[196],"24.1%":[197],"malicious":[200],"contained":[202],"none":[203],"its":[205],"specified":[206],"trigger":[207],"terms.":[208],"performance":[210],"on":[211],"unseen":[212],"data":[213],"remains":[214],"be":[216],"established":[217],"through":[218],"further":[219],"experiments":[220],"involving":[221],"independently":[222],"datasets,":[224],"additional":[225],"application":[226],"domains,":[227],"attack":[229],"techniques":[230],"excluded":[231],"original":[234],"evaluation.":[235]},"counts_by_year":[],"updated_date":"2026-11-06T12:05:46.655746","created_date":"2026-11-05T00:00:00"}