{"id":"https://openalex.org/W4416940486","doi":"https://doi.org/10.48550/arxiv.2511.21752","title":"Semantics as a Shield: Label Disguise Defense (LDD) against Prompt Injection in LLM Sentiment Classification","display_name":"Semantics as a Shield: Label Disguise Defense (LDD) against Prompt Injection in LLM Sentiment Classification","publication_year":2025,"publication_date":"2025-11-23","ids":{"openalex":"https://openalex.org/W4416940486","doi":"https://doi.org/10.48550/arxiv.2511.21752"},"language":null,"primary_location":{"id":"pmh:oai:arXiv.org:2511.21752","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2511.21752","pdf_url":"https://arxiv.org/pdf/2511.21752","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2511.21752","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100663088","display_name":"Yanxi Li","orcid":"https://orcid.org/0000-0002-0403-8511"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Yanxi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5012694192","display_name":"Ruocheng Shan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shan, Ruocheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5443999767303467,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5443999767303467,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.09790000319480896,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11147","display_name":"Misinformation and Its Impacts","score":0.06989999860525131,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/alias","display_name":"Alias","score":0.906000018119812},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7978000044822693},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.705299973487854},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.657800018787384},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.628000020980835},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5795999765396118},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.5001999735832214}],"concepts":[{"id":"https://openalex.org/C46681722","wikidata":"https://www.wikidata.org/wiki/Q4725589","display_name":"Alias","level":2,"score":0.906000018119812},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7978000044822693},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7605999708175659},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.705299973487854},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.657800018787384},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.628000020980835},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.6216999888420105},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6071000099182129},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5795999765396118},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.5001999735832214},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.4846000075340271},{"id":"https://openalex.org/C2778712577","wikidata":"https://www.wikidata.org/wiki/Q3505966","display_name":"Retraining","level":2,"score":0.4325999915599823},{"id":"https://openalex.org/C2780922921","wikidata":"https://www.wikidata.org/wiki/Q255189","display_name":"Paraphrase","level":2,"score":0.3650999963283539},{"id":"https://openalex.org/C66402592","wikidata":"https://www.wikidata.org/wiki/Q2271421","display_name":"Sentiment analysis","level":2,"score":0.3528999984264374},{"id":"https://openalex.org/C2780876879","wikidata":"https://www.wikidata.org/wiki/Q3054749","display_name":"Meaning (existential)","level":2,"score":0.3287000060081482},{"id":"https://openalex.org/C2779439875","wikidata":"https://www.wikidata.org/wiki/Q1078276","display_name":"Natural language understanding","level":3,"score":0.30169999599456787},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2955000102519989},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2870999872684479},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.27129998803138733},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.25859999656677246}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:arXiv.org:2511.21752","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2511.21752","pdf_url":"https://arxiv.org/pdf/2511.21752","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:doi:10.48550/arxiv.2511.21752","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2511.21752","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2511.21752","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2511.21752","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2511.21752","pdf_url":"https://arxiv.org/pdf/2511.21752","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1,19],"models":[2,159],"are":[3],"increasingly":[4],"used":[5],"for":[6,183],"text":[7],"classification":[8],"tasks":[9],"such":[10,52],"as":[11,53,249],"sentiment":[12],"analysis,":[13],"yet":[14],"their":[15],"reliance":[16],"on":[17,211],"natural":[18],"prompts":[20],"exposes":[21],"them":[22,88],"to":[23,42,68,149,153,170],"prompt":[24,261],"injection":[25],"attacks.":[26],"In":[27],"particular,":[28],"class-directive":[29],"injections":[30],"exploit":[31],"knowledge":[32],"of":[33,147,174,187],"the":[34,145,154,175,180,184,202,207],"model's":[35],"label":[36,104,245],"set":[37],"(e.g.,":[38],"positive":[39],"vs.":[40,97,229,238],"negative)":[41],"override":[43],"its":[44],"intended":[45],"behavior":[46],"through":[47,107],"adversarial":[48,139,155],"instructions.":[49],"Existing":[50],"defenses,":[51],"detection-based":[54],"filters,":[55],"instruction":[56],"hierarchies,":[57],"and":[58,79,116,131,137,160],"signed":[59],"prompts,":[60],"either":[61],"require":[62],"model":[63,100,165,208],"retraining":[64],"or":[65,92],"remain":[66],"vulnerable":[67],"obfuscation.":[69],"This":[70],"paper":[71],"introduces":[72],"Label":[73],"Disguise":[74],"Defense":[75],"(LDD),":[76],"a":[77,172,258],"lightweight":[78],"model-agnostic":[80],"strategy":[81],"that":[82,144,197,223,244],"conceals":[83],"true":[84],"labels":[85],"by":[86,179],"replacing":[87],"with":[89],"semantically":[90,224],"transformed":[91],"unrelated":[93],"alias":[94,161,195,226],"labels(e.g.,":[95,227],"blue":[96,237],"yellow).":[98,239],"The":[99],"learns":[101],"these":[102],"new":[103],"mappings":[105],"implicitly":[106],"few-shot":[108,136,212],"demonstrations,":[109],"preventing":[110],"direct":[111],"correspondence":[112],"between":[113],"injected":[114],"directives":[115],"decision":[117],"outputs.":[118],"We":[119],"evaluate":[120],"LDD":[121,148,167],"across":[122,158],"nine":[123],"state-of-the-art":[124],"models,":[125,188],"including":[126],"GPT-5,":[127],"GPT-4o,":[128],"LLaMA3.2,":[129],"Gemma3,":[130],"Mistral":[132],"variants,":[133],"under":[134],"varying":[135],"an":[138,250],"setting.":[140],"Our":[141],"results":[142],"show":[143],"ability":[146],"recover":[150],"performance":[151],"lost":[152],"attack":[156],"varies":[157],"choices.":[162],"For":[163],"every":[164],"evaluated,":[166],"is":[168],"able":[169],"restore":[171],"portion":[173],"accuracy":[176,200],"degradation":[177],"caused":[178],"attack.":[181],"Moreover,":[182],"vast":[185],"majority":[186],"we":[189],"can":[190,247],"identify":[191],"more":[192],"than":[193,201,234],"one":[194],"pair":[196],"achieves":[198],"higher":[199],"under-attack":[203],"baseline,":[204],"in":[205],"which":[206],"relies":[209],"solely":[210],"learning":[213],"without":[214],"any":[215],"defensive":[216],"mechanism.":[217],"A":[218],"linguistic":[219],"analysis":[220],"further":[221],"reveals":[222],"aligned":[225],"good":[228],"bad)":[230],"yield":[231],"stronger":[232],"robustness":[233],"unaligned":[235],"symbols(e.g.,":[236],"Overall,":[240],"this":[241],"study":[242],"demonstrates":[243],"semantics":[246],"serve":[248],"effective":[251],"defense":[252],"layer,":[253],"transforming":[254],"meaning":[255],"itself":[256],"into":[257],"shield":[259],"against":[260],"injection.":[262]},"counts_by_year":[],"updated_date":"2026-08-05T07:39:15.569665","created_date":"2025-12-03T00:00:00"}