Pith. sign in

Paper Citation Record · LEDGER

Defending Against Prompt Injection With a Few DefensiveTokens

As of 8 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 8 inbound Pith citation observations for arXiv:2507.07974.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2507.07974 v2

Coverage vector

measured 59 of 59 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-06T18:32:44.393617Z

measured 67 of 67 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00

measured 8 of 8 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-05T15:26:33.475946Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-07-04T00:59:20.691622Z

Reference resolution

59 of 59 outbound references displayed

  • verified exact2
  • verified fuzzy5
  • unresolved50
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch1

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 70deac73-eb39-4506-8e14-af93fb311975 · outbound

This paper cites Get my drift? Catching LLM Task Drift with Activation Deltas.

Defending Against Prompt Injection With a Few DefensiveTokens Get my drift? Catching LLM Task Drift with Activation Deltas

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:38.442495Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:38.442495Z digest=sha256:34544b00471129ed326ca41d75e19683ab24428d20d965e687cd4b01bfa30e47

Observation 2d84767a-0df9-4771-901c-ec6aef9c879b · outbound

This paper cites CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Models.

Defending Against Prompt Injection With a Few DefensiveTokens CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Models

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:38.557329Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:38.557329Z digest=sha256:dd8cc3a98351a53528bbc8ec78c3c30aad21fe34e0a97e59d338ce8ee33acdbb

Observation 9ab0f8a5-2e4b-41a9-8917-1f35c561db7b · outbound

This paper cites StruQ: Defending Against Prompt Injection with Structured Queries.

Defending Against Prompt Injection With a Few DefensiveTokens StruQ: Defending Against Prompt Injection with Structured Queries

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:38.700951Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:38.700951Z digest=sha256:423cb26d17698de30b0c3f69998188654769abe99604a9d4bad468e49cc8d5f5

Observation 6ede77e6-208c-4571-8ddc-ee3fe5407b0c · outbound

This paper cites SecAlign: Defending Against Prompt Injection with Preference Optimization.

Defending Against Prompt Injection With a Few DefensiveTokens SecAlign: Defending Against Prompt Injection with Preference Optimization

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:38.828080Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:38.828080Z digest=sha256:383501f64618613c9c8684e82d47a941f92b5df54f5ed7a106b895970bad92cb

Observation 20f911fd-9d68-486c-ba8b-88f71854ef2a · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:38.970617Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:38.970617Z digest=sha256:ece51cf0c03784e70e88e4fc771f1bfcfd0aadef74acf84a4c3f25094d10027f

Observation 8f31587f-0f4d-49f9-bcdc-333a23327ed0 · outbound

This paper cites Angelopoulos, Tianle Li, Dacheng Li, Banghua Zhu, Hao Zhang, Michael I.

Defending Against Prompt Injection With a Few DefensiveTokens Angelopoulos, Tianle Li, Dacheng Li, Banghua Zhu, Hao Zhang, Michael I

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:39.094310Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:39.094310Z digest=sha256:eb4cf64b4390eb36d02e9410a0d14f27e0e62afbfc9403a4dceccc4eb55ade1b

Observation 994bbd42-cfd1-4ab1-81a0-07436532cf7e · outbound

This paper cites Defeating Prompt Injections by Design.

Defending Against Prompt Injection With a Few DefensiveTokens Defeating Prompt Injections by Design

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:39.188120Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:39.188120Z digest=sha256:719a14bd49ca9b2e64a0d167df9737e464639a6e45b3ef3893c1ba7525b20749

Observation de3f473a-91df-48b7-b18f-8f49a401832b · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 8

Resolution
metadata mismatch
raw_fallback, observed 2026-08-06T18:32:45.517328Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:39.419209Z digest=sha256:8dc77f346a747f2fdaa980131b5db3f544d92a5d71e5976db63f871adb3f3779

Observation 8a34d255-a3de-41ca-87fb-87e6e020af5d · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:39.601601Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:39.601601Z digest=sha256:d07c8805255c845cd810d2a0bcbbbd94996284c28717e34f59337de809d939db

Observation d044c525-6379-4223-bbdb-d62c0e739627 · outbound

This paper cites LoRA: Low-Rank Adaptation of Large Language Models.

Defending Against Prompt Injection With a Few DefensiveTokens LoRA: Low-Rank Adaptation of Large Language Models

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:39.724332Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:39.724332Z digest=sha256:46f12924ed2f69251f122de85c59f34f8fe0cd00c02e769f4efb5e69d5c34f66

Observation b3b16656-f545-49ea-8283-cec467f7fd34 · outbound

This paper cites Hsu, and Pin-Yu Chen.

Defending Against Prompt Injection With a Few DefensiveTokens Hsu, and Pin-Yu Chen

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:32:50.101732Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:39.919502Z digest=sha256:009824d0280580e2bf94d1b12c9e59c1fd8ad2bcea291261c7fee5314581db04

Observation c9248236-d609-4c9f-bd72-043c1d0accf3 · outbound

This paper cites Joshi, Hanna Moazam, Heather Miller, Matei Zaharia, and Christopher Potts.

Defending Against Prompt Injection With a Few DefensiveTokens Joshi, Hanna Moazam, Heather Miller, Matei Zaharia, and Christopher Potts

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:32:49.825978Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:40.067620Z digest=sha256:4baad752360a998bc5c035efc6c369ec91b68b21a85df2bceaa75ffb18561ea8

Observation 428da68c-ebbc-4bca-8f4f-fa741a3ee5aa · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 13

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:49.707217Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:40.147230Z digest=sha256:3104dd47025ab4fa0e6e028ecb551b440962f941d1df0efe135c89e5a679d102

Observation 355fe044-1d97-405f-9b69-d24229d21e0a · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:40.224826Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:40.224826Z digest=sha256:1fc105d318a42307514730bd437f91819f208dca6f952cb2a7e09aec0f1dc63a

Observation b9b7a7aa-011d-4fed-8ba1-a1590d9eedfe · outbound

This paper cites Hashimoto.

Defending Against Prompt Injection With a Few DefensiveTokens Hashimoto

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:32:49.575464Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:40.344624Z digest=sha256:069ffc86afabf1c9bb519d47df9443f42edbb316aff33404f3dc680140f4fec6

Observation d4fc5046-9194-4df1-bf95-869d2c8a54fe · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 16

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:49.420803Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:40.439968Z digest=sha256:9f4b875205b2f78598af03353f6814be77b085fa60cc9a90986b5e0b9741b7f6

Observation 190efc79-74f7-4d83-a635-89f5c2bcb68a · outbound

This paper cites UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models.

Defending Against Prompt Injection With a Few DefensiveTokens UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:40.613792Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:40.613792Z digest=sha256:c840f438b882c41ef8c918ae34713b78ac7b3b12e9ece0c70ff3e91280e78854

Observation 98b6a98b-c918-43b7-83b6-5e56d436e594 · outbound

This paper cites Automatic and Universal Prompt Injection Attacks against Large Language Models.

Defending Against Prompt Injection With a Few DefensiveTokens Automatic and Universal Prompt Injection Attacks against Large Language Models

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:40.695022Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:40.695022Z digest=sha256:84ecf82e3a8a8aca0ccad0037390dc7241d12ad63d9738c22146d2b0c0d3c118

Observation 97f5d211-58eb-4eed-8bc9-2559a5cbf1b7 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:40.780835Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:40.780835Z digest=sha256:3ac1b239de29ced0f41952cd939b81939f37923db16709348a3de0b52d370b25

Observation 348a0822-5451-4ee3-a4e0-cd7ace13e17c · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:40.944988Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:40.944988Z digest=sha256:2a984aac7a42da5923dc022e47133617f421509ba08b24de309604a91d09525d

Observation 18e0109c-fb7f-4ce8-851a-86edff0d087d · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 21

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:49.145765Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:41.026529Z digest=sha256:65513c545610eec344059ac161dd220e9b61bee7da7d17f737f8ff188a7eb775

Observation 2003e6b8-6a4b-4646-b29a-455760a2f4d7 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 22

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:49.019498Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:41.095949Z digest=sha256:f8277117b655e5a2fb23900e24eaf768535a66a8a0c8a05b08f6349b8431e80d

Observation 7c37b11c-8886-413a-a66a-787f707d5dfc · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 23

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:48.886048Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:41.159789Z digest=sha256:62d4c6a9f2a3d6f53b842621f095ec0eae2ac15be0b6d95db27f6e600485138a

Observation feb7ba66-ef8a-4906-9e5c-95035cfd8844 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 24

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:48.768104Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:41.262034Z digest=sha256:59155dcfc24783c93dec0f99ee0e30b27e9146fc6b3008e28d359aaf9f1e2034

Observation facda6f5-75d6-452c-a9d7-52b43619f143 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 25

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:48.644595Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:41.321261Z digest=sha256:3f831e10e3da45e90ac8b9b32e9f8f9a8673978ee0b2ccdf35b2fcbb21221c94

Observation 05afec08-e036-489e-8b5e-63d70c2e5a72 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 26

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:48.490841Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:41.399597Z digest=sha256:d44d942abdcb95d78a6a9554947d1fa41ca3f3a602054e67d77f6d1b02785d43

Observation 88ad8792-c823-40ff-99cc-0c4d3320fd9f · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 27

Resolution
malformed identifier
no resolver link, observed 2026-08-06T18:32:41.457013Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:41.457013Z digest=sha256:24219d65e21d48e7292e7ba570c12cde178923758ca9dbdad5d73bfe4c83591f

Observation b56f6ca4-1ac9-4bde-aa6b-6b39ed4d4a73 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:41.570906Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:41.570906Z digest=sha256:0833ed4cc1e7418d817d10e93d7d46b923533653171bc51b8812ef99dbecc98d

Observation efbb61b7-605f-4de8-a0ac-9fa53b136c3d · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 29

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:48.360671Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:41.669619Z digest=sha256:4307449cb5398335aa8b6aabba19481d2a72e9bc7a2860fab4877d6820dae407

Observation 96e9f6bf-ed86-4970-86bc-a6a86a19c3a0 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:41.740788Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:41.740788Z digest=sha256:7ebfaa615960c52fdec5ffc034ce19976d10e8a159e0b8aaec8e05c20e51547b

Observation 000820f1-964e-4176-a142-a1133e6a5280 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 31

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:48.092532Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:41.888137Z digest=sha256:0b9f426cfb1e0b7243d44a6a208b0fb6af1399f3e03ddf3152639b6d6d0292f2

Observation 1da3d644-8260-4e79-bc79-24662ce8a970 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 32

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:47.843438Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:41.945512Z digest=sha256:6300c8c812ddace2bbf95dad5ad665abcdc71ca6cd69a3036d03243548ab4b38

Observation c389744f-a32a-419c-a020-dcaa75a4e240 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 33

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:47.615215Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:42.036261Z digest=sha256:16c23d1522c910dc859c6db8c455dfc7cef9a68cad7a7fb629306925b495219c

Observation 8afa656f-67a0-4830-852e-bc6aadb1f529 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:42.150644Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:42.150644Z digest=sha256:d54c082977c415c8f0eb9459d828e1bf06a52a04ea1774711fd5acb164c9f7f6

Observation 8f93350a-a74b-442c-979f-f06fbf61e616 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 35

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:47.469220Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:42.232639Z digest=sha256:585cd52e4d83dc3aaa379c0e8408f5036411f3e3f2f5b138d9a01c00c34bdc14

Observation 7e49a9ca-1ddb-4af1-8f21-c4a43cb49d7c · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 36

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:47.299636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:42.331638Z digest=sha256:1af7e412c9637692adc3a422bf1ce667dd4e22fb5bc1bb37784f2016539239b0

Observation 4d236274-ed7b-42ed-88a6-8e8dc36937c9 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 37

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:47.095842Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:42.408237Z digest=sha256:7530bd89d22a3b9d5b1eec8fae0ca49dff1d828b058ce0b5cf10e78227e68f07

Observation 867c4399-a773-4c4f-b547-b044dae7e006 · outbound

This paper cites The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions.

Defending Against Prompt Injection With a Few DefensiveTokens The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:42.689401Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:42.689401Z digest=sha256:22aed32cfae207e74bb3af66ec8cc12cee2e48a6bfe72c6cbe015f326eeff6b2

Observation f83284f0-90e2-4a1a-ba17-078112756859 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 39

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:46.853657Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:42.758508Z digest=sha256:4f417b3810df29da6852758b1a01456757b635f425362671a8b73957a2ca100b

Observation c9e12c66-942d-4f13-b196-686c4bf8756d · outbound

This paper cites Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations.

Defending Against Prompt Injection With a Few DefensiveTokens Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:42.838856Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:42.838856Z digest=sha256:b83500a8b419166a217210b32b4d833d0f4798cd7c86516d7186c059297abb9b

Observation a864402b-0509-43ec-81c8-2df92e7213b2 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 41

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:46.641626Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:42.934138Z digest=sha256:7e5f753afb38b05475d9efaebadfc1dd48058768beeb3c80134778f04fcdb93d

Observation a5d52f40-3e11-4152-9fb8-299456b639b5 · outbound

This paper cites Effectively Controlling Reasoning Models through Thinking Intervention.

Defending Against Prompt Injection With a Few DefensiveTokens Effectively Controlling Reasoning Models through Thinking Intervention

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:43.052649Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:43.052649Z digest=sha256:18bfc7cde207f02c26d5514b2749c7177095106968c54eb280a25d86253390f9

Observation d4a4b962-fc63-4324-a86c-92b825238805 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 43

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:46.454818Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:43.161456Z digest=sha256:64984248d6eb4c30e1676ba4c06138317382d4d61e866891ea518de93b3304ee

Observation 4cc98494-dc94-4d14-93b6-57ebe08457f8 · outbound

This paper cites Parameter-Efficient Fine-Tuning Methods for Pretrained Language Models: A Critical Review and Assessment.

Defending Against Prompt Injection With a Few DefensiveTokens Parameter-Efficient Fine-Tuning Methods for Pretrained Language Models: A Critical Review and Assessment

Reference 44

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:43.351303Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:43.351303Z digest=sha256:e48bf39c9b2aa4a05bc08c7fa923597acde7ed6a3b10290ee378c4d69bdaabcf

Observation 44091a2a-b161-497a-9274-e95abd611087 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 45

Resolution
verified exact
raw_fallback, observed 2026-08-06T18:32:44.934779Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:43.484876Z digest=sha256:df60550fba13f5ac99f631e17f91fa0c57ed88b6175ae8c803eff23d103ba62d

Observation 4300d97a-a3de-4ba7-8848-02d04f2f26a3 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:43.568449Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:43.568449Z digest=sha256:e65d3412289265ec5aaa9ff6b2190a5cc850b1bccfe627cae7f73bee64ef55a5

Observation 3b493c9e-0051-4249-a6c6-ed4abde381fe · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 47

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:46.272189Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:43.659972Z digest=sha256:1f5c84b4f0acf0a328d7f0f56d0962f4d9fa87956ada28a339e2065cb3dc3261

Observation 801daeeb-141b-498e-8cb4-1a6a8f010be0 · outbound

This paper cites Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy.

Defending Against Prompt Injection With a Few DefensiveTokens Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy

Reference 48

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:43.260092Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:43.260092Z digest=sha256:c1d4cf01a82db5ff85771bc0439cd3ff10e3b99cf6d6a19bd4cb1792bbae2e85

Observation 88fb5da2-d55e-4fa5-ab23-6409cdd89dd6 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 49

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:43.883708Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:43.883708Z digest=sha256:fbcac599a47062834332b80a6ba65948b731ad77e2390348bb3d6e2f3a54edb2

Observation cc820dbf-8668-48ed-9fb4-e5843a2f0afc · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 50

Resolution
verified exact
doi, observed 2026-08-06T18:32:44.628903Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:44.005067Z digest=sha256:ef58262878948caf0c43e35af4817071c6a2d04a5e43abc790b4383b4baf4737

Observation c46fd5ac-48fa-416e-9127-e34bc783e919 · outbound

This paper cites On Prompt-Driven Safeguarding for Large Language Models.

Defending Against Prompt Injection With a Few DefensiveTokens On Prompt-Driven Safeguarding for Large Language Models

Reference 51

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:44.096157Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:44.096157Z digest=sha256:0360daae7b98d47a9fc63829abe3857a563fac9babfcd6ac1da92f748de166f8

Observation b16a4cff-df7b-45c4-b353-ac8a73dbace6 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 52

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:45.998508Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:44.205547Z digest=sha256:7fd27443efa33473c33e997b99e237e2cda3199629d0f48dce8fa926426c29dc

Observation 9a8b2c99-4ef4-43db-a997-d9e4e979a834 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 53

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:43.769570Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:43.769570Z digest=sha256:8cd60e372608b621a14bb323a11818091636029ae24161826f2374016efdc779

Observation 1426ba8a-b9b4-4876-9c84-1f51bfb9f8b0 · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 54

Resolution
unresolved
raw_fallback, observed 2026-08-06T18:32:45.802563Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:44.393617Z digest=sha256:b8442b548e42501a39f60f89715d09dc244cd963dbae5a85bfa2e49e932678d6

Observation aad169b6-04a0-46ca-8be5-38d353ad6935 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

Defending Against Prompt Injection With a Few DefensiveTokens Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 58

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:44.285307Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:44.285307Z digest=sha256:cc1b9ac38f2b75529e51bd578b7b8a8212bf529a9ee581147409887e294c3070

Observation 6c142056-0b66-43b3-823d-5cbd2bcf3fdf · outbound

This paper cites Gradient Descent.

Defending Against Prompt Injection With a Few DefensiveTokens Gradient Descent

Reference 2023

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:32:48.260383Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:41.817195Z digest=sha256:6ddf10c63ceee9d6bf3c4a38754cc03ccd710f548473881b6a9ba936d97eb0bf

Observation 7ee63721-9ed8-45a9-9bac-9df37a85cb02 · outbound

This paper cites In USENIX Security Symposium.

Defending Against Prompt Injection With a Few DefensiveTokens In USENIX Security Symposium

Reference 2024

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T18:32:49.277372Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T18:32:40.851785Z digest=sha256:1f505d97ac5d9d07619bbaba0842762035319125914e928df354ed15390e8044

Observation c58efc40-5b68-4eab-a800-cf3ad0497923 · outbound

This paper cites Lessons from Defending Gemini Against Indirect Prompt Injections.

Defending Against Prompt Injection With a Few DefensiveTokens Lessons from Defending Gemini Against Indirect Prompt Injections

Reference 2025

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:42.517641Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:42.517641Z digest=sha256:5be2208497affd2829497306ef08a3181b068152245eef077cd2dd200db68f13

Observation d1664658-9e36-4c25-b524-7ff79a2ecfcc · outbound

This paper cites an unresolved cited work.

Defending Against Prompt Injection With a Few DefensiveTokens Unresolved cited work

Reference 4597

Resolution
unresolved
no resolver link, observed 2026-08-06T18:32:40.529016Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T18:32:40.529016Z digest=sha256:972bde778974f49724e655994a7cc49b742e384f130429b25819fdca716d2ad2

Pith citing papers

Observation 00efaf60-b293-480a-b774-31e490f8f738 · inbound

Secure Multi-LLM Agentic AI and Agentification for Edge General Intelligence by Zero-Trust: A Survey cites this paper.

Secure Multi-LLM Agentic AI and Agentification for Edge General Intelligence by Zero-Trust: A Survey Defending Against Prompt Injection With a Few DefensiveTokens

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-05T15:26:33.475946Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T15:26:33.475946Z digest=sha256:b873a51556a3eaf6b2d501fe97298919bf2ad95b636eb0f3561e4837a6f504a2

Observation 3759cf91-e76f-435b-a7b1-a60fb611481f · inbound

Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain cites this paper.

Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain Defending Against Prompt Injection With a Few DefensiveTokens

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-05T10:44:10.395605Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-05T10:44:10.395605Z digest=sha256:d4647f98cea8cf850d8fba00817799ff9ffde4542f8c3aa2586eba61194bb4b3

Observation 38648840-d053-4eb0-be8d-b05dcf8a8c4b · inbound

AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization cites this paper.

AgentVisor: Defending LLM Agents Against Prompt Injection via Semantic Virtualization Defending Against Prompt Injection With a Few DefensiveTokens

Reference 1

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T22:16:31.049398Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-05-08T03:07:21.524834Z digest=sha256:a1491568800a99e85a0a9764ce71e23a8f119da70f360860fb2a0c889bbdabd6

Observation 8e49ae19-fc24-43d5-b9b2-3450b671cc89 · inbound

Self-Adaptive Multi-Agent LLM-Based Security Pattern Selection for IoT Systems cites this paper.

Self-Adaptive Multi-Agent LLM-Based Security Pattern Selection for IoT Systems Defending Against Prompt Injection With a Few DefensiveTokens

Reference 40

Resolution
verified exact
arxiv_id, observed 2026-05-11T15:51:44.325861Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-05-09T19:04:48.453055Z digest=sha256:af72b076fdbc6b5195e4f8506f69be213b244e0fa6a23b504f8d4bc3e895922d

Observation 987c7af2-19bf-4a4d-864e-313c699e9eff · inbound

Agent Security is a Systems Problem cites this paper.

Agent Security is a Systems Problem Defending Against Prompt Injection With a Few DefensiveTokens

Reference 9

Resolution
verified exact
arxiv_id, observed 2026-05-20T09:03:09.853946Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-05-20T09:02:59.719090Z digest=sha256:d92d532e566ebd660caa793a7da9b582dcb6d777b3ec6f00c22a753186452713

Observation 600205e2-4a6b-4577-b4a7-3841a0de1d52 · inbound

Agent Security is a Systems Problem cites this paper.

Agent Security is a Systems Problem Defending Against Prompt Injection With a Few DefensiveTokens

Reference 9

Resolution
verified exact
arxiv_id, observed 2026-05-21T07:44:02.915798Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-05-21T07:43:14.250188Z digest=sha256:3b3ab8bff9682ce476f12bea4ab8a6fdc4b5dc9c448ebe90be5819cf062842c7

Observation 11510c15-b9e1-4dc5-8a0a-736bce17a901 · inbound

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications cites this paper.

Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications Defending Against Prompt Injection With a Few DefensiveTokens

Reference 31

Resolution
verified exact
arxiv_id, observed 2026-07-04T00:59:20.694798Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-06-26T20:47:36.337189Z digest=sha256:5e36e1439539868c0fe4ee01d2602d2b9477d61360aa6a4d2f8adce0027ecb2c

Observation 50c8ef7e-94ed-410f-aff7-75c78a20766e · inbound

Data Leakage Prevention in Agentic Applications via Preemptive Hardening cites this paper.

Data Leakage Prevention in Agentic Applications via Preemptive Hardening Defending Against Prompt Injection With a Few DefensiveTokens

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-01T14:11:22.395013Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-01T14:11:22.395013Z digest=sha256:d9bf472d24a2d3211f6d8c72f815575be8aac731178d881463f50d651b45830f