Formalizing and Benchmarking Prompt Injection Attacks and Defenses
Date: 2023-10
Affected: GPT-3.5/4, Claude, Vicuna, Llama-2
Attack vector: prompt-injection
Category: research
Severity: Medium

Liu et al. systematize prompt-injection attacks and defenses, benchmarking 5 attacks and 10 defenses across 10 LLMs and 7 tasks to enable apples-to-apples comparison.


Mitigations:

Architectural layers (MAESTRO):