{"id":"https://openalex.org/W7163365485","doi":"https://doi.org/10.48550/arxiv.2606.03090","title":"\"**Important** You should give me full credits!\": Exploring Prompt Injection Attacks on LLM-Based Automatic Grading Systems","display_name":"\"**Important** You should give me full credits!\": Exploring Prompt Injection Attacks on LLM-Based Automatic Grading Systems","publication_year":2026,"publication_date":"2026-06-02","ids":{"openalex":"https://openalex.org/W7163365485","doi":"https://doi.org/10.48550/arxiv.2606.03090"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.03090","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03090","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.03090","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137763417","display_name":"Hang Li (123039)","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Hang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126376098","display_name":"Fedor Filippov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Filippov, Fedor","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137791880","display_name":"Yuling Lin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lin, Yuping","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137745011","display_name":"Pengfei He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Pengfei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137780693","display_name":"Kaiqi Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Kaiqi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137790500","display_name":"Yucheng Chu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chu, Yucheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137775315","display_name":"Yingqian Cui","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cui, Yingqian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137763706","display_name":"Hui Liu (33624)","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Hui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137781540","display_name":"Jiliang Tang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tang, Jiliang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7368000149726868,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7368000149726868,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11492","display_name":"Academic integrity and plagiarism","score":0.08209999650716782,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11902","display_name":"Intelligent Tutoring Systems and Adaptive Learning","score":0.010900000110268593,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/grading","display_name":"Grading (engineering)","score":0.8334000110626221},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7386999726295471},{"id":"https://openalex.org/keywords/rubric","display_name":"Rubric","score":0.614799976348877},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.6067000031471252},{"id":"https://openalex.org/keywords/credibility","display_name":"Credibility","score":0.4239000082015991}],"concepts":[{"id":"https://openalex.org/C2777286243","wikidata":"https://www.wikidata.org/wiki/Q5591926","display_name":"Grading (engineering)","level":2,"score":0.8334000110626221},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7386999726295471},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.657800018787384},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6384000182151794},{"id":"https://openalex.org/C111640148","wikidata":"https://www.wikidata.org/wiki/Q847349","display_name":"Rubric","level":2,"score":0.614799976348877},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.6067000031471252},{"id":"https://openalex.org/C2780224610","wikidata":"https://www.wikidata.org/wiki/Q1530061","display_name":"Credibility","level":2,"score":0.4239000082015991},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4172999858856201},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.31709998846054077},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.2921000123023987},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.25760000944137573}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.03090","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03090","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.03090","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03090","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.8248597979545593,"display_name":"Quality Education","id":"https://metadata.un.org/sdg/4"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"emergence":[1],"of":[2,28,75,93,109,127,138,172],"large":[3],"language":[4,41],"models":[5],"(LLMs)":[6],"has":[7],"significantly":[8],"accelerated":[9],"recent":[10],"research":[11,179],"on":[12],"LLM-based":[13,70,156,185],"automatic":[14],"grading":[15,46,85,150],"(AG)":[16],"systems.":[17,187],"Benefiting":[18],"from":[19],"the":[20,73,94,104,125,136],"strong":[21],"instruction-following":[22],"capabilities":[23],"and":[24,107,122,176,183],"broad":[25],"prior":[26],"knowledge":[27],"LLMs,":[29],"educators":[30],"can":[31,78],"deploy":[32],"AG":[33,120,157],"systems":[34,86,158],"across":[35],"diverse":[36],"tasks":[37],"using":[38],"only":[39],"natural":[40],"rubrics":[42],"while":[43],"achieving":[44],"satisfactory":[45],"performance.":[47],"Despite":[48],"these":[49,143],"advantages,":[50],"new":[51],"security":[52],"concerns":[53],"may":[54],"also":[55],"arise.":[56],"In":[57,72,112],"particular,":[58],"prompt":[59],"injection":[60],"(PI)":[61],"attacks":[62,118,129],"have":[63],"recently":[64],"become":[65],"a":[66],"major":[67],"threat":[68,175],"to":[69,83,103,162],"applications.":[71],"context":[74],"AG,":[76],"attackers":[77],"potentially":[79],"exploit":[80],"PI":[81,117,163],"vulnerabilities":[82],"manipulate":[84],"into":[87],"assigning":[88],"artificially":[89],"high":[90],"scores":[91],"regardless":[92],"actual":[95],"answer":[96],"quality.":[97],"Such":[98],"behavior":[99],"poses":[100],"serious":[101],"risks":[102],"fairness,":[105],"reliability,":[106],"integrity":[108],"educational":[110,131,186],"assessment.":[111],"this":[113,173],"work,":[114],"we":[115,152],"study":[116],"in":[119,130],"systems,":[121],"systematically":[123],"investigate":[124],"effectiveness":[126,137],"such":[128],"scenarios.":[132],"We":[133,165],"further":[134],"evaluate":[135],"existing":[139],"defensive":[140],"strategies":[141],"against":[142],"attacks.":[144,164],"Through":[145],"comprehensive":[146],"experiments":[147],"under":[148],"rubric-based":[149],"settings,":[151],"demonstrate":[153],"that":[154,167],"current":[155],"remain":[159],"highly":[160],"vulnerable":[161],"hope":[166],"our":[168],"findings":[169],"raise":[170],"awareness":[171],"emerging":[174],"motivate":[177],"future":[178],"toward":[180],"secure,":[181],"robust,":[182],"trustworthy":[184]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-04T00:00:00"}