{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:XN4NTEX2J3L2QDK4Y65CDCGFXQ","short_pith_number":"pith:XN4NTEX2","canonical_record":{"source":{"id":"2411.00348","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-01T04:05:59Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"b9929bf18b4e02676f72ed93202e4ab3aa24f7895d00cbe4670ac916580acc54","abstract_canon_sha256":"8ba38c5d16518a9891141eb96dc78ce396f78f73e9f411f9ad81f7afa2aed7b4"},"schema_version":"1.0"},"canonical_sha256":"bb78d992fa4ed7a80d5cc7ba2188c5bc27cccbf533ca1fd0f668b9efd796be74","source":{"kind":"arxiv","id":"2411.00348","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.00348","created_at":"2026-07-05T10:52:38Z"},{"alias_kind":"arxiv_version","alias_value":"2411.00348v2","created_at":"2026-07-05T10:52:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.00348","created_at":"2026-07-05T10:52:38Z"},{"alias_kind":"pith_short_12","alias_value":"XN4NTEX2J3L2","created_at":"2026-07-05T10:52:38Z"},{"alias_kind":"pith_short_16","alias_value":"XN4NTEX2J3L2QDK4","created_at":"2026-07-05T10:52:38Z"},{"alias_kind":"pith_short_8","alias_value":"XN4NTEX2","created_at":"2026-07-05T10:52:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:XN4NTEX2J3L2QDK4Y65CDCGFXQ","target":"record","payload":{"canonical_record":{"source":{"id":"2411.00348","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-01T04:05:59Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"b9929bf18b4e02676f72ed93202e4ab3aa24f7895d00cbe4670ac916580acc54","abstract_canon_sha256":"8ba38c5d16518a9891141eb96dc78ce396f78f73e9f411f9ad81f7afa2aed7b4"},"schema_version":"1.0"},"canonical_sha256":"bb78d992fa4ed7a80d5cc7ba2188c5bc27cccbf533ca1fd0f668b9efd796be74","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:52:38.122561Z","signature_b64":"nzN8Gg+dxSeruRbt3b5ClFoPwjNYzAZw6Dm70Jms5oX1yzy/y+R/WFKWwC5m8hxg7scUBbXNW0t1Dge1qXAYCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bb78d992fa4ed7a80d5cc7ba2188c5bc27cccbf533ca1fd0f668b9efd796be74","last_reissued_at":"2026-07-05T10:52:38.122065Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:52:38.122065Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.00348","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:52:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rVh9CvySvSBNOqG41vihCGTFcckDIwZ4MV9N917N7dBmEB0IeXgJwLBoL6WhhRfMEpkLHdbxgacro36GFjHCBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:34:31.829745Z"},"content_sha256":"b2270cf8aa989e7ba178f0fbb4c49a89bc60ac5a2ff9d91710431dc406fa5c34","schema_version":"1.0","event_id":"sha256:b2270cf8aa989e7ba178f0fbb4c49a89bc60ac5a2ff9d91710431dc406fa5c34"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:XN4NTEX2J3L2QDK4Y65CDCGFXQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Attention Tracker: Detecting Prompt Injection Attacks in LLMs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Ambrish Rawat, Ching-Yun Ko, I-Hsin Chung, Kuo-Han Hung, Pin-Yu Chen, Winston H. Hsu","submitted_at":"2024-11-01T04:05:59Z","abstract_excerpt":"Large Language Models (LLMs) have revolutionized various domains but remain vulnerable to prompt injection attacks, where malicious inputs manipulate the model into ignoring original instructions and executing designated action. In this paper, we investigate the underlying mechanisms of these attacks by analyzing the attention patterns within LLMs. We introduce the concept of the distraction effect, where specific attention heads, termed important heads, shift focus from the original instruction to the injected instruction. Building on this discovery, we propose Attention Tracker, a training-f"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.00348","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.00348/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:52:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EXc3cEoP2OCOtVMeeSQW+tPRTaPHuf4ER2XO/hS79aiYhKzlZwwf4J9qnjFhTcrgsqYey+0i858Ow0FwF9dJDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T21:34:31.830250Z"},"content_sha256":"09a5d0471d84839ceaad910a322f2cd54ba748d130576630454373cb515d3bf7","schema_version":"1.0","event_id":"sha256:09a5d0471d84839ceaad910a322f2cd54ba748d130576630454373cb515d3bf7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XN4NTEX2J3L2QDK4Y65CDCGFXQ/bundle.json","state_url":"https://pith.science/pith/XN4NTEX2J3L2QDK4Y65CDCGFXQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XN4NTEX2J3L2QDK4Y65CDCGFXQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T21:34:31Z","links":{"resolver":"https://pith.science/pith/XN4NTEX2J3L2QDK4Y65CDCGFXQ","bundle":"https://pith.science/pith/XN4NTEX2J3L2QDK4Y65CDCGFXQ/bundle.json","state":"https://pith.science/pith/XN4NTEX2J3L2QDK4Y65CDCGFXQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XN4NTEX2J3L2QDK4Y65CDCGFXQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:XN4NTEX2J3L2QDK4Y65CDCGFXQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8ba38c5d16518a9891141eb96dc78ce396f78f73e9f411f9ad81f7afa2aed7b4","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-01T04:05:59Z","title_canon_sha256":"b9929bf18b4e02676f72ed93202e4ab3aa24f7895d00cbe4670ac916580acc54"},"schema_version":"1.0","source":{"id":"2411.00348","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.00348","created_at":"2026-07-05T10:52:38Z"},{"alias_kind":"arxiv_version","alias_value":"2411.00348v2","created_at":"2026-07-05T10:52:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.00348","created_at":"2026-07-05T10:52:38Z"},{"alias_kind":"pith_short_12","alias_value":"XN4NTEX2J3L2","created_at":"2026-07-05T10:52:38Z"},{"alias_kind":"pith_short_16","alias_value":"XN4NTEX2J3L2QDK4","created_at":"2026-07-05T10:52:38Z"},{"alias_kind":"pith_short_8","alias_value":"XN4NTEX2","created_at":"2026-07-05T10:52:38Z"}],"graph_snapshots":[{"event_id":"sha256:09a5d0471d84839ceaad910a322f2cd54ba748d130576630454373cb515d3bf7","target":"graph","created_at":"2026-07-05T10:52:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.00348/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have revolutionized various domains but remain vulnerable to prompt injection attacks, where malicious inputs manipulate the model into ignoring original instructions and executing designated action. In this paper, we investigate the underlying mechanisms of these attacks by analyzing the attention patterns within LLMs. We introduce the concept of the distraction effect, where specific attention heads, termed important heads, shift focus from the original instruction to the injected instruction. Building on this discovery, we propose Attention Tracker, a training-f","authors_text":"Ambrish Rawat, Ching-Yun Ko, I-Hsin Chung, Kuo-Han Hung, Pin-Yu Chen, Winston H. Hsu","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-01T04:05:59Z","title":"Attention Tracker: Detecting Prompt Injection Attacks in LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.00348","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b2270cf8aa989e7ba178f0fbb4c49a89bc60ac5a2ff9d91710431dc406fa5c34","target":"record","created_at":"2026-07-05T10:52:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8ba38c5d16518a9891141eb96dc78ce396f78f73e9f411f9ad81f7afa2aed7b4","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-01T04:05:59Z","title_canon_sha256":"b9929bf18b4e02676f72ed93202e4ab3aa24f7895d00cbe4670ac916580acc54"},"schema_version":"1.0","source":{"id":"2411.00348","kind":"arxiv","version":2}},"canonical_sha256":"bb78d992fa4ed7a80d5cc7ba2188c5bc27cccbf533ca1fd0f668b9efd796be74","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bb78d992fa4ed7a80d5cc7ba2188c5bc27cccbf533ca1fd0f668b9efd796be74","first_computed_at":"2026-07-05T10:52:38.122065Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:52:38.122065Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nzN8Gg+dxSeruRbt3b5ClFoPwjNYzAZw6Dm70Jms5oX1yzy/y+R/WFKWwC5m8hxg7scUBbXNW0t1Dge1qXAYCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:52:38.122561Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.00348","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b2270cf8aa989e7ba178f0fbb4c49a89bc60ac5a2ff9d91710431dc406fa5c34","sha256:09a5d0471d84839ceaad910a322f2cd54ba748d130576630454373cb515d3bf7"],"state_sha256":"a5aeb4ca873b52724442d9259097d3b4ca4e35828e4de5d5798d6b8e25e8a937"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cKHrzwiUqB3MfUe1qKiPIj/e6VDzBG5NLq33dcyUduLPU4SCI9GtBJl/VLi0YswEXl09duc1x2UeMbdsgf+yDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T21:34:31.833898Z","bundle_sha256":"45acf8c37244b97a5a69d01623502691c8d187fe25057599f76e5add795fb395"}}