{"id":"https://openalex.org/W7163057773","doi":"https://doi.org/10.48550/arxiv.2605.30837","title":"Send a SCOUT First: Pre-hoc Reasoning for Adaptive Detector Allocation in Prompt-Injection Defense","display_name":"Send a SCOUT First: Pre-hoc Reasoning for Adaptive Detector Allocation in Prompt-Injection Defense","publication_year":2026,"publication_date":"2026-05-29","ids":{"openalex":"https://openalex.org/W7163057773","doi":"https://doi.org/10.48550/arxiv.2605.30837"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.30837","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.30837","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.30837","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137593257","display_name":"Shuhao Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Shuhao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137514197","display_name":"Jiarui Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Jiarui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137536355","display_name":"qi cao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cao, Qi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137547339","display_name":"Ruiyi Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Ruiyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137585875","display_name":"Pengtao Xie","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xie, Pengtao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.48919999599456787,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.48919999599456787,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.31839999556541443,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.048500001430511475,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.7391999959945679},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.6326000094413757},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.5116999745368958},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4848000109195709},{"id":"https://openalex.org/keywords/operator","display_name":"Operator (biology)","score":0.45559999346733093},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.44369998574256897}],"concepts":[{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.7391999959945679},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.6326000094413757},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5863999724388123},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.5440000295639038},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.5116999745368958},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4848000109195709},{"id":"https://openalex.org/C17020691","wikidata":"https://www.wikidata.org/wiki/Q139677","display_name":"Operator (biology)","level":5,"score":0.45559999346733093},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.44369998574256897},{"id":"https://openalex.org/C2779110517","wikidata":"https://www.wikidata.org/wiki/Q1240788","display_name":"Supervisor","level":2,"score":0.37540000677108765},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3610999882221222},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.3305000066757202},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.3190000057220459},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.29179999232292175},{"id":"https://openalex.org/C28901747","wikidata":"https://www.wikidata.org/wiki/Q177571","display_name":"Decision theory","level":2,"score":0.2621000111103058}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.30837","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.30837","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.30837","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.30837","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Prompt-injection":[0],"detectors":[1,51],"are":[2],"heterogeneous:":[3],"each":[4,78],"is":[5,15],"strong":[6],"on":[7,88],"a":[8,25,44,94,115,131,152],"different":[9],"slice":[10],"of":[11],"attacks,":[12],"and":[13,54,66,82,92,106,140,165],"none":[14],"always":[16],"reliable.":[17],"Yet":[18],"existing":[19],"systems":[20],"still":[21],"treat":[22],"detection":[23],"as":[24,40],"fixed":[26],"single-detector":[27],"pipeline,":[28],"committing":[29],"every":[30],"request":[31,49],"to":[32,52,56,58,98,146,159],"one":[33],"detector's":[34,79],"blind":[35],"spots.":[36],"We":[37],"reframe":[38],"defense":[39],"detector":[41],"allocation:":[42],"given":[43],"heterogeneous":[45],"pool,":[46],"decide":[47],"per":[48],"which":[50],"run":[53],"whether":[55],"escalate":[57],"an":[59,147],"LLM":[60],"judge.":[61],"Our":[62],"framework":[63],"SCOUT":[64,156],"(Scalable":[65],"Controllable":[67],"Outcome-prediction":[68],"for":[69],"Uncertainty-aware":[70],"Triage)":[71],"makes":[72],"this":[73,110],"decision":[74],"dynamic":[75],"by":[76,138,143],"predicting":[77],"per-sample":[80],"reliability":[81],"latency":[83],"from":[84],"how":[85],"it":[86],"behaved":[87],"similar":[89],"past":[90],"inputs,":[91],"exposes":[93],"single":[95],"safety-utility":[96,169],"threshold":[97],"the":[99,119,168],"operator":[100],"(where":[101],"utility":[102],"bundles":[103],"benign-pass":[104],"rate":[105,137],"wall-clock).":[107],"To":[108],"evaluate":[109],"setting,":[111],"we":[112],"build":[113],"SCOUT-450,":[114,130],"benchmark":[116],"that":[117,124],"captures":[118],"structurally":[120],"complex,":[121],"agent-facing":[122],"injections":[123],"older":[125],"prompt-injection":[126],"sets":[127],"under-represent.":[128],"On":[129],"safety-oriented":[132],"operating":[133],"point":[134],"reduces":[135],"attack-success":[136],"46%":[139],"total":[141],"wall-clock":[142],"40%":[144],"relative":[145],"always-on":[148],"GPT-4o":[149],"judge,":[150],"at":[151],"5.1-point":[153],"benign-utility":[154],"drop.":[155],"also":[157],"transfers":[158],"three":[160],"external":[161],"benchmarks":[162],"(BIPIA,":[163],"IPI,":[164],"IHEval),":[166],"improving":[167],"frontier.":[170]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-02T00:00:00"}