18 citations · 43 across the 9 of their papers we have counts for
Showing 2025Show all
2 papers · 1 filter
cs.CL2025
Many-Turn Jailbreaking
Xianjun Yang, Liqiang Xiao, Shiyang Li +5
Current jailbreaking work on large language models (LLMs) aims to elicit unsafe outputs from given prompts. However, it only focuses on single-turn jailbreaking targeting one speci…
cs.CR2025
MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents
Kaijie Zhu, Xianjun Yang, Jindong Wang +2
Recent research has explored that LLM agents are vulnerable to indirect prompt injection (IPI) attacks, where malicious tasks embedded in tool-retrieved information can redirect th…