{"id":"https://openalex.org/W4412944922","doi":"https://doi.org/10.18653/v1/2025.acl-long.897","title":"Defense Against Prompt Injection Attack by Leveraging Attack Techniques","display_name":"Defense Against Prompt Injection Attack by Leveraging Attack Techniques","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4412944922","doi":"https://doi.org/10.18653/v1/2025.acl-long.897"},"language":"en","primary_location":{"id":"doi:10.18653/v1/2025.acl-long.897","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.acl-long.897","pdf_url":"https://aclanthology.org/2025.acl-long.897.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2025.acl-long.897.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100398890","display_name":"Yulin Chen","orcid":"https://orcid.org/0000-0001-5679-4055"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yulin Chen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086448068","display_name":"Haoran Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Haoran Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106403892","display_name":"Zihao Zheng","orcid":"https://orcid.org/0009-0005-7191-4656"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zihao Zheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076984427","display_name":"Dongya Wu","orcid":"https://orcid.org/0000-0002-2310-3243"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dekai Wu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020880385","display_name":"Yangqiu Song","orcid":"https://orcid.org/0000-0002-7818-6090"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yangqiu Song","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5065675832","display_name":"Bryan Hooi","orcid":"https://orcid.org/0000-0002-5645-1754"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bryan Hooi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":10,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"18331","last_page":"18347"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9853000044822693,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9853000044822693,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9747999906539917,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9362999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6844545602798462},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5374186038970947}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6844545602798462},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5374186038970947}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.18653/v1/2025.acl-long.897","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.acl-long.897","pdf_url":"https://aclanthology.org/2025.acl-long.897.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-169116","is_oa":false,"landing_page_url":"http://repository.hkust.edu.hk/ir/Record/1783.1-169116","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference paper"}],"best_oa_location":{"id":"doi:10.18653/v1/2025.acl-long.897","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.acl-long.897","pdf_url":"https://aclanthology.org/2025.acl-long.897.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412944922.pdf","grobid_xml":"https://content.openalex.org/works/W4412944922.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"With":[0],"the":[1,44,50,75,87,103,133,152,157,163],"advancement":[2],"of":[3,101,135],"technology,":[4],"large":[5],"language":[6,16],"models":[7],"(LLMs)":[8],"have":[9],"achieved":[10],"remarkable":[11],"performance":[12],"across":[13],"various":[14],"natural":[15],"processing":[17],"(NLP)":[18],"tasks,":[19],"powering":[20],"LLMintegrated":[21],"applications":[22],"like":[23],"Microsoft":[24],"Copilot.However,":[25],"as":[26,58],"LLMs":[27,40],"continue":[28],"to":[29,70,105,111,139],"evolve,":[30],"new":[31],"vulnerabilities,":[32],"especially":[33],"prompt":[34,136],"injection":[35,137],"attacks":[36,38],"arise.These":[37],"trick":[39],"into":[41],"deviating":[42],"from":[43],"original":[45,158],"input":[46,159],"instructions":[47,52,72,108],"and":[48,67,78,89,109],"executing":[49],"attacker's":[51],"injected":[53,73,164],"in":[54,74],"data":[55,76],"content,":[56,77],"such":[57],"retrieved":[59],"results.Recent":[60],"attack":[61,82,88,122,148,153],"methods":[62,138,143],"leverage":[63],"LLMs'":[64],"instruction-following":[65],"abilities":[66],"their":[68],"inabilities":[69],"distinguish":[71],"achieve":[79],"a":[80],"high":[81],"success":[83],"rate":[84],"(ASR).When":[85],"comparing":[86],"defense":[90,142,171,175],"methods,":[91,149],"we":[92,115,131],"interestingly":[93],"find":[94],"that":[95,169],"they":[96],"share":[97],"similar":[98],"design":[99],"goals,":[100],"inducing":[102],"model":[104],"ignore":[106],"unwanted":[107],"instead":[110],"execute":[112],"wanted":[113],"instructions.Therefore,":[114],"raise":[116],"an":[117],"intuitive":[118],"question:":[119],"Could":[120],"these":[121],"techniques":[123,172],"be":[124],"utilized":[125],"for":[126],"defensive":[127],"purposes?In":[128],"this":[129],"paper,":[130],"invert":[132],"intention":[134],"develop":[140],"novel":[141],"based":[144],"on":[145],"previous":[146],"trainingfree":[147],"by":[150],"repeating":[151],"process":[154],"but":[155],"with":[156],"instruction":[160],"rather":[161],"than":[162],"instruction.Our":[165],"comprehensive":[166],"experiments":[167],"demonstrate":[168],"our":[170],"outperform":[173],"existing":[174],"approaches,":[176],"achieving":[177],"state-of-the-art":[178],"results.":[179],"1":[180],"User":[181],"Instruction":[182],"What":[183],"is":[184],"ChatGPT?":[185]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}