{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:64I2DFBATWR4FNCLQYNPHV3TON","short_pith_number":"pith:64I2DFBA","canonical_record":{"source":{"id":"2411.00459","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-01T09:14:21Z","cross_cats_sorted":[],"title_canon_sha256":"cf3df0ff393927c2390566cf2edbfba5c026201cf2c13a3430f0d9e64436d6ab","abstract_canon_sha256":"b8e66da68a0785e2bf31ebba7417e349fca096b2566626e3ccf48dd559163ea6"},"schema_version":"1.0"},"canonical_sha256":"f711a194209da3c2b44b861af3d773736cc64b8cdac66723188b4c50625f39fd","source":{"kind":"arxiv","id":"2411.00459","version":6},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.00459","created_at":"2026-07-05T11:47:15Z"},{"alias_kind":"arxiv_version","alias_value":"2411.00459v6","created_at":"2026-07-05T11:47:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.00459","created_at":"2026-07-05T11:47:15Z"},{"alias_kind":"pith_short_12","alias_value":"64I2DFBATWR4","created_at":"2026-07-05T11:47:15Z"},{"alias_kind":"pith_short_16","alias_value":"64I2DFBATWR4FNCL","created_at":"2026-07-05T11:47:15Z"},{"alias_kind":"pith_short_8","alias_value":"64I2DFBA","created_at":"2026-07-05T11:47:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:64I2DFBATWR4FNCLQYNPHV3TON","target":"record","payload":{"canonical_record":{"source":{"id":"2411.00459","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-01T09:14:21Z","cross_cats_sorted":[],"title_canon_sha256":"cf3df0ff393927c2390566cf2edbfba5c026201cf2c13a3430f0d9e64436d6ab","abstract_canon_sha256":"b8e66da68a0785e2bf31ebba7417e349fca096b2566626e3ccf48dd559163ea6"},"schema_version":"1.0"},"canonical_sha256":"f711a194209da3c2b44b861af3d773736cc64b8cdac66723188b4c50625f39fd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:47:15.132563Z","signature_b64":"PoBacTYLmUwqgk7WiNyxdtuj8hBih3ltgmAwIGFHJqATB49sQN9bmYlW86+8H3tq3YyUh7bW0PJbJxuc1skKCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f711a194209da3c2b44b861af3d773736cc64b8cdac66723188b4c50625f39fd","last_reissued_at":"2026-07-05T11:47:15.132060Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:47:15.132060Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.00459","source_version":6,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:47:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"heJmGMaIVt8PfRoxCqyir0wLyN00W9RfKxcB4KclRfmMvAKoTuIZ8KmuMm0p9JS7oOC+9pYPM2aMGQpk13EcCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T08:39:35.662512Z"},"content_sha256":"2c3cb9eb00a8376c297eb90e17605a205fe94b08078c2dc235055e551f8e5303","schema_version":"1.0","event_id":"sha256:2c3cb9eb00a8376c297eb90e17605a205fe94b08078c2dc235055e551f8e5303"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:64I2DFBATWR4FNCLQYNPHV3TON","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Defense Against Prompt Injection Attack by Leveraging Attack Techniques","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bryan Hooi, Dekai Wu, Haoran Li, Yangqiu Song, Yulin Chen, Zihao Zheng","submitted_at":"2024-11-01T09:14:21Z","abstract_excerpt":"With the advancement of technology, large language models (LLMs) have achieved remarkable performance across various natural language processing (NLP) tasks, powering LLM-integrated applications like Microsoft Copilot. However, as LLMs continue to evolve, new vulnerabilities, especially prompt injection attacks arise. These attacks trick LLMs into deviating from the original input instructions and executing the attacker's instructions injected in data content, such as retrieved results. Recent attack methods leverage LLMs' instruction-following abilities and their inabilities to distinguish in"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.00459","kind":"arxiv","version":6},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.00459/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:47:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ymeJgoOg/wgnH2q+wr8IBSiBlXsz9u6g3YFKzcGwnIq4/rE2L5J5nOPGR1tf8t6wqtjzomj3m/LygDxUwcNHCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T08:39:35.663036Z"},"content_sha256":"9d384c018caeb2dc2da6e3c9c4d6de8a3c1f3a49ab69d16263527fa2ff3a9c60","schema_version":"1.0","event_id":"sha256:9d384c018caeb2dc2da6e3c9c4d6de8a3c1f3a49ab69d16263527fa2ff3a9c60"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/64I2DFBATWR4FNCLQYNPHV3TON/bundle.json","state_url":"https://pith.science/pith/64I2DFBATWR4FNCLQYNPHV3TON/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/64I2DFBATWR4FNCLQYNPHV3TON/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T08:39:35Z","links":{"resolver":"https://pith.science/pith/64I2DFBATWR4FNCLQYNPHV3TON","bundle":"https://pith.science/pith/64I2DFBATWR4FNCLQYNPHV3TON/bundle.json","state":"https://pith.science/pith/64I2DFBATWR4FNCLQYNPHV3TON/state.json","well_known_bundle":"https://pith.science/.well-known/pith/64I2DFBATWR4FNCLQYNPHV3TON/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:64I2DFBATWR4FNCLQYNPHV3TON","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b8e66da68a0785e2bf31ebba7417e349fca096b2566626e3ccf48dd559163ea6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-01T09:14:21Z","title_canon_sha256":"cf3df0ff393927c2390566cf2edbfba5c026201cf2c13a3430f0d9e64436d6ab"},"schema_version":"1.0","source":{"id":"2411.00459","kind":"arxiv","version":6}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.00459","created_at":"2026-07-05T11:47:15Z"},{"alias_kind":"arxiv_version","alias_value":"2411.00459v6","created_at":"2026-07-05T11:47:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.00459","created_at":"2026-07-05T11:47:15Z"},{"alias_kind":"pith_short_12","alias_value":"64I2DFBATWR4","created_at":"2026-07-05T11:47:15Z"},{"alias_kind":"pith_short_16","alias_value":"64I2DFBATWR4FNCL","created_at":"2026-07-05T11:47:15Z"},{"alias_kind":"pith_short_8","alias_value":"64I2DFBA","created_at":"2026-07-05T11:47:15Z"}],"graph_snapshots":[{"event_id":"sha256:9d384c018caeb2dc2da6e3c9c4d6de8a3c1f3a49ab69d16263527fa2ff3a9c60","target":"graph","created_at":"2026-07-05T11:47:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.00459/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the advancement of technology, large language models (LLMs) have achieved remarkable performance across various natural language processing (NLP) tasks, powering LLM-integrated applications like Microsoft Copilot. However, as LLMs continue to evolve, new vulnerabilities, especially prompt injection attacks arise. These attacks trick LLMs into deviating from the original input instructions and executing the attacker's instructions injected in data content, such as retrieved results. Recent attack methods leverage LLMs' instruction-following abilities and their inabilities to distinguish in","authors_text":"Bryan Hooi, Dekai Wu, Haoran Li, Yangqiu Song, Yulin Chen, Zihao Zheng","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-01T09:14:21Z","title":"Defense Against Prompt Injection Attack by Leveraging Attack Techniques"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.00459","kind":"arxiv","version":6},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2c3cb9eb00a8376c297eb90e17605a205fe94b08078c2dc235055e551f8e5303","target":"record","created_at":"2026-07-05T11:47:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b8e66da68a0785e2bf31ebba7417e349fca096b2566626e3ccf48dd559163ea6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-01T09:14:21Z","title_canon_sha256":"cf3df0ff393927c2390566cf2edbfba5c026201cf2c13a3430f0d9e64436d6ab"},"schema_version":"1.0","source":{"id":"2411.00459","kind":"arxiv","version":6}},"canonical_sha256":"f711a194209da3c2b44b861af3d773736cc64b8cdac66723188b4c50625f39fd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f711a194209da3c2b44b861af3d773736cc64b8cdac66723188b4c50625f39fd","first_computed_at":"2026-07-05T11:47:15.132060Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:47:15.132060Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PoBacTYLmUwqgk7WiNyxdtuj8hBih3ltgmAwIGFHJqATB49sQN9bmYlW86+8H3tq3YyUh7bW0PJbJxuc1skKCA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:47:15.132563Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.00459","source_kind":"arxiv","source_version":6}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2c3cb9eb00a8376c297eb90e17605a205fe94b08078c2dc235055e551f8e5303","sha256:9d384c018caeb2dc2da6e3c9c4d6de8a3c1f3a49ab69d16263527fa2ff3a9c60"],"state_sha256":"522a8277840f5871720993fae15fc723d96909051d693d4610fe2b6dafa62da5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4pMQV/htRNHOQGJqvv1jtYpSuK+8o8am8grrMCi797+RWR9uOuYPN9H6ZgBSFnEwGInfQIpbCcQMD4xVa4qMBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T08:39:35.668581Z","bundle_sha256":"a89042b7a29451f6865db04a8997b3767f80cc2c4b95134a7d52ac043e85e5b4"}}