BASIS uses two linear probes on prefill attention to separately detect injection presence and predict whether the injection would actually compromise the model, refusing only when both fire.
Instruction defense,
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2026 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes
BASIS uses two linear probes on prefill attention to separately detect injection presence and predict whether the injection would actually compromise the model, refusing only when both fire.