Bypassing Prompt Injection Detectors through Evasive Injections
paper
Fields
id
sources/sec-arxiv-2602-00750Publisher
Shows hidden-layer activation-shift injection detectors are not robust to adaptive adversaries: a multi-probe attack appends a universal adversarially-optimised suffix that jointly fools all layer-wise drift detectors while preserving the injection.
Kind
paper
Published
2026-01-31
Accessed
2026-10-04
Cross-references
This record references no other records.