Type: url
Original: https://arxiv.org/abs/2302.12173
Status: generated
Summary
The arXiv abstract page for “Not what you’ve signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection” (Greshake et al., 2023), the paper that introduced Indirect Prompt Injection — remotely attacking an LLM-integrated application by planting adversarial instructions in data the application is likely to retrieve — deriving a security taxonomy of impacts (data theft, worming, information-ecosystem contamination) and demonstrating the attack against real systems including Bing’s GPT-4-powered Chat and code-completion engines.