{"id":"https://openalex.org/W4411119880","doi":"https://doi.org/10.18653/v1/2025.findings-naacl.395","title":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","display_name":"Adaptive Attacks Break Defenses Against Indirect Prompt Injection Attacks on LLM Agents","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4411119880","doi":"https://doi.org/10.18653/v1/2025.findings-naacl.395"},"language":"en","primary_location":{"id":"doi:10.18653/v1/2025.findings-naacl.395","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-naacl.395","pdf_url":"https://aclanthology.org/2025.findings-naacl.395.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: NAACL 2025","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2025.findings-naacl.395.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093241707","display_name":"Qiusi Zhan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qiusi Zhan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104281614","display_name":"Richard Fang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Richard Fang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5094010263","display_name":"Henil Shalin Panchal","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Henil Shalin Panchal","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5072348548","display_name":"Daniel Kang","orcid":"https://orcid.org/0000-0001-9860-9938"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Daniel Kang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":15.0571,"has_fulltext":true,"cited_by_count":9,"citation_normalized_percentile":{"value":0.9914001,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"7101","last_page":"7117"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.972100019454956,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.972100019454956,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9490000009536743,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9370999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5781972408294678},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5279880166053772}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5781972408294678},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5279880166053772}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2025.findings-naacl.395","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-naacl.395","pdf_url":"https://aclanthology.org/2025.findings-naacl.395.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: NAACL 2025","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2025.findings-naacl.395","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-naacl.395","pdf_url":"https://aclanthology.org/2025.findings-naacl.395.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: NAACL 2025","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320315389","display_name":"Open Philanthropy Project","ror":"https://ror.org/004d1k391"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4411119880.pdf","grobid_xml":"https://content.openalex.org/works/W4411119880.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Large":[0],"Language":[1],"Model":[2],"(LLM)":[3],"agents":[4],"exhibit":[5],"remarkable":[6],"performance":[7],"across":[8],"diverse":[9],"applications":[10],"by":[11],"using":[12,60],"external":[13,20],"tools":[14,21],"to":[15,42,89],"interact":[16],"with":[17],"environments.However,":[18],"integrating":[19],"introduces":[22],"security":[23],"risks,":[24],"such":[25],"as":[26],"indirect":[27],"prompt":[28],"injection":[29],"(IPI)":[30],"attacks.Despite":[31],"defenses":[32,54,88],"designed":[33],"for":[34,82],"IPI":[35],"attacks,":[36,62],"their":[37],"robustness":[38,91],"remains":[39],"questionable":[40],"due":[41],"insufficient":[43],"testing":[44],"against":[45],"adaptive":[46,61,83],"attacks.In":[47],"this":[48],"paper,":[49],"we":[50],"evaluate":[51],"eight":[52],"different":[53],"and":[55,92],"bypass":[56],"all":[57],"of":[58,69],"them":[59],"consistently":[63],"achieving":[64],"an":[65],"attack":[66,84],"success":[67],"rate":[68],"over":[70],"50%.This":[71],"reveals":[72],"critical":[73],"vulnerabilities":[74],"in":[75],"current":[76],"defenses.Our":[77],"research":[78],"underscores":[79],"the":[80],"need":[81],"evaluation":[85],"when":[86],"designing":[87],"ensure":[90],"reliability.":[93]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}