BIPIA: Benchmarking Indirect Prompt Injection Attacks on LLMs
Date: 2023-12
Affected: 25 commercial and open-source LLMs
Attack vector: prompt-injection
Category: research
Severity: High

Yi et al. (Microsoft) release BIPIA, the first benchmark for indirect prompt injection covering Email, WebQA, TableQA, Summarization, and CodeQA. All 25 evaluated LLMs are susceptible. They propose boundary-awareness and explicit-reminder defenses.


Mitigations:

Architectural layers (MAESTRO):