{"id":"https://openalex.org/W7162994615","doi":"https://doi.org/10.48550/arxiv.2605.30534","title":"Strengthening Polymorphic Prompt Assembling: Dynamic Separator Generation Against Emerging Prompt Injection Attacks","display_name":"Strengthening Polymorphic Prompt Assembling: Dynamic Separator Generation Against Emerging Prompt Injection Attacks","publication_year":2026,"publication_date":"2026-05-28","ids":{"openalex":"https://openalex.org/W7162994615","doi":"https://doi.org/10.48550/arxiv.2605.30534"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.30534","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.30534","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.30534","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137560886","display_name":"Nima Dorzhiev","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dorzhiev, Nima","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137520250","display_name":"Peng Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Peng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9419000148773193,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9419000148773193,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.022299999371170998,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.008100000210106373,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.58160001039505},{"id":"https://openalex.org/keywords/separator","display_name":"Separator (oil production)","score":0.5001999735832214},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.4521999955177307},{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.33500000834465027},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.28369998931884766}],"concepts":[{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.58160001039505},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5702999830245972},{"id":"https://openalex.org/C185004128","wikidata":"https://www.wikidata.org/wiki/Q3011536","display_name":"Separator (oil production)","level":2,"score":0.5001999735832214},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.4521999955177307},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.36489999294281006},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.33500000834465027},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.303600013256073},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2906000018119812},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.28369998931884766},{"id":"https://openalex.org/C47446073","wikidata":"https://www.wikidata.org/wiki/Q5165890","display_name":"Control theory (sociology)","level":3,"score":0.28049999475479126},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.2623000144958496},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2572000026702881}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.30534","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.30534","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.30534","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.30534","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Polymorphic":[0],"Prompt":[1],"Assembling":[2],"(PPA)":[3],"defends":[4],"LLM":[5],"agents":[6],"against":[7,88],"prompt":[8,68],"injections":[9],"by":[10,129],"randomly":[11],"selecting":[12],"separator":[13,37,51,138],"pairs":[14],"from":[15,23,117],"a":[16,32,36,48,70,81,122],"fixed":[17],"pool":[18,29],"to":[19,80,119],"isolate":[20],"user":[21],"input":[22],"system":[24],"instructions.":[25],"Although":[26],"effective,":[27],"static":[28,137],"reuse":[30],"exposes":[31],"blast-radius":[33,153],"vulnerability:":[34],"once":[35],"leaks,":[38],"it":[39],"can":[40],"be":[41],"exploited":[42],"in":[43,146,155],"future":[44],"requests.":[45],"We":[46,84],"propose":[47],"dynamic":[49,109,148],"per-request":[50],"generation":[52],"using":[53],"domain-separated":[54],"SHA-256":[55],"digests":[56],"keyed":[57],"on":[58,92,97],"the":[59,101,108,112,147,152,175],"timestamp,":[60],"session":[61],"identifier,":[62],"and":[63,170],"cryptographic":[64],"nonce.":[65],"Each":[66],"assembled":[67],"receives":[69],"unique":[71],"(BEGIN,":[72],"END)":[73],"canary":[74],"pair,":[75],"thereby":[76],"limiting":[77],"leakage":[78,139],"exposure":[79],"single":[82],"request.":[83],"evaluated":[85],"our":[86],"extension":[87],"16":[89],"injection":[90],"payloads":[91],"Llama-3.3-70B-Instruct-Turbo,":[93],"with":[94,174],"cross-model":[95],"validation":[96],"DeepSeek-V4-Flash":[98],"model.":[99],"Against":[100,135],"M1":[102],"obfuscation":[103],"payload":[104],"(leetspeak":[105],"+":[106],"urgency),":[107],"mode":[110,149],"reduces":[111],"Attack":[113],"Success":[114],"Rate":[115],"(ASR)":[116],"0.88":[118],"0.38,":[120],"yielding":[121],"statistically":[123],"significant":[124],"2.3":[125],"x":[126],"mitigation":[127],"verified":[128],"non-overlapping":[130],"95%":[131],"Wilson":[132],"confidence":[133],"intervals.":[134],"format_breakout_salad,":[136],"(leak_rate":[140],"=":[141],"0.467)":[142],"is":[143,171],"eliminated":[144],"entirely":[145],"(0.000),":[150],"confirming":[151],"reduction":[154],"practice.":[156],"The":[157],"implementation":[158],"requires":[159],"no":[160],"model":[161],"fine-tuning,":[162],"adds":[163],"2.7":[164],"microseconds":[165],"prompt-assembly":[166],"overhead":[167],"per":[168],"request,":[169],"backward":[172],"compatible":[173],"existing":[176],"PPA":[177],"SDK.":[178]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-02T00:00:00"}