SPE-LLM: System Prompt Extraction Attacks and Defenses
Date: 2025-05
Affected: GPT-4, Claude, Gemini, deployed LLM products
Attack vector: prompt-injection
Category: research
Severity: Medium

Systematic framework for evaluating prompt-extraction attacks against state-of-the-art LLMs, releasing adversarial queries that reliably extract system prompts and benchmarking defenses.


Mitigations:

Architectural layers (MAESTRO):