{"id":"https://openalex.org/W7162506269","doi":"https://doi.org/10.48550/arxiv.2605.26999","title":"Prompt Injection Detection is Regime-Dependent: A Deployment-Aware Evaluation with Interpretable Structural Signals","display_name":"Prompt Injection Detection is Regime-Dependent: A Deployment-Aware Evaluation with Interpretable Structural Signals","publication_year":2026,"publication_date":"2026-05-26","ids":{"openalex":"https://openalex.org/W7162506269","doi":"https://doi.org/10.48550/arxiv.2605.26999"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.26999","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.26999","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.26999","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137129828","display_name":"Akindoyin Akinrele","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Akinrele, Akindoyin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137135464","display_name":"Shreyank N Gowda","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gowda, Shreyank N","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5340999960899353,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5340999960899353,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.12240000069141388,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.06729999929666519,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.7588000297546387},{"id":"https://openalex.org/keywords/ranking","display_name":"Ranking (information retrieval)","score":0.5730000138282776},{"id":"https://openalex.org/keywords/hierarchy","display_name":"Hierarchy","score":0.4934999942779541},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.4726000130176544},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.44209998846054077},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3880999982357025},{"id":"https://openalex.org/keywords/object-detection","display_name":"Object detection","score":0.36059999465942383},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3431999981403351}],"concepts":[{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.7588000297546387},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7013999819755554},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.5730000138282776},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5485000014305115},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.4934999942779541},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47909998893737793},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.4726000130176544},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.44209998846054077},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.43630000948905945},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3880999982357025},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.36059999465942383},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3431999981403351},{"id":"https://openalex.org/C164226766","wikidata":"https://www.wikidata.org/wiki/Q7293202","display_name":"Rank (graph theory)","level":2,"score":0.3352999985218048},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3118000030517578},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.2957000136375427},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.2937000095844269},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.28529998660087585},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.27489998936653137},{"id":"https://openalex.org/C165838908","wikidata":"https://www.wikidata.org/wiki/Q736777","display_name":"Calibration","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.26570001244544983},{"id":"https://openalex.org/C137270730","wikidata":"https://www.wikidata.org/wiki/Q120811","display_name":"Detection theory","level":3,"score":0.26460000872612},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.26420000195503235},{"id":"https://openalex.org/C126042441","wikidata":"https://www.wikidata.org/wiki/Q1324888","display_name":"Frame (networking)","level":2,"score":0.257099986076355},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.2508000135421753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.26999","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.26999","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.26999","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.26999","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5618553161621094,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Prompt":[0],"injection":[1,41,172],"poses":[2],"a":[3,36,44],"critical":[4],"threat":[5],"to":[6,115],"the":[7,129,157,167],"safe":[8],"deployment":[9,70,163],"of":[10,39,169],"large":[11],"language":[12],"models,":[13],"yet":[14],"existing":[15],"detection":[16,42,108],"approaches":[17],"are":[18],"typically":[19],"evaluated":[20],"under":[21,174],"limited":[22],"settings":[23],"that":[24,77,107],"do":[25],"not":[26],"reflect":[27],"real-world":[28],"operating":[29],"constraints.":[30,177],"In":[31],"this":[32],"work,":[33],"we":[34],"present":[35],"deployment-aware":[37],"evaluation":[38],"prompt":[40,82,171],"using":[43],"multi-model":[45],"and":[46,55,65,68,86,89,97,113,144,162,165],"multi-regime":[47],"experimental":[48],"framework.":[49],"We":[50,72],"compare":[51],"lexical,":[52],"semantic,":[53],"structural,":[54],"transformer-based":[56],"detectors":[57],"across":[58,123],"multiple":[59],"out-of-distribution":[60],"settings,":[61],"repeated":[62],"data":[63],"splits,":[64],"both":[66,93],"ranking":[67,160],"thresholded":[69],"metrics.":[71],"introduce":[73],"interpretable":[74],"structural":[75,134],"signals":[76,135],"capture":[78],"hierarchy":[79],"overrides,":[80],"system":[81],"spoofing,":[83],"role":[84],"redefinition,":[85],"evasion":[87],"patterns,":[88],"assess":[90],"their":[91],"contribution":[92],"within":[94],"sparse":[95],"models":[96,127],"in":[98,141,151],"combination":[99],"with":[100,118],"strong":[101],"encoder":[102],"baselines.":[103],"Our":[104],"results":[105],"show":[106],"performance":[109,161],"is":[110],"highly":[111],"regime-dependent":[112],"sensitive":[114],"threshold":[116],"selection,":[117],"no":[119],"single":[120],"model":[121],"dominating":[122],"all":[124],"settings.":[125],"Transformer-based":[126],"achieve":[128],"strongest":[130],"overall":[131],"performance,":[132],"while":[133],"provide":[136],"modest":[137],"but":[138],"consistent":[139],"gains":[140],"certain":[142],"regimes":[143],"improve":[145],"low":[146],"false":[147],"positive":[148],"rate":[149],"behaviour":[150],"harder":[152],"scenarios.":[153],"These":[154],"findings":[155],"highlight":[156],"gap":[158],"between":[159],"effectiveness":[164],"underscore":[166],"importance":[168],"evaluating":[170],"defences":[173],"realistic":[175],"operational":[176],"Code":[178],"will":[179],"be":[180],"released.":[181]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-28T00:00:00"}