A Systematic Review of Prompt Injection Attacks on Large Language Models: Trends, Taxonomy, Evaluation, Defenses, and Opportunities

Дата публикации: 21-01-2026 13:17:22

Large Language Models (LLMs) are increasingly integrated into various infrastructure and interactive applications. However, their inherent linguistic flexibility introduces security vulnerabilities, particularly through Prompt Injection (PI) attacks. This systematic review provides a comprehensive synthesis of the evolving landscape of PI attacks, including their development trends, classification schemes, evaluation methodologies, defense strategies, and areas for future research. We analyze the evolution of attacks from basic natural language overrides to complex multi-turn manipulations, indirect injections using structured formats such as JSON and XML, and tool-assisted exploits involving automated prompt generation and multi-modal inputs like images. PI attacks are categorized by the level of manipulation, including character, word, sentence, and semantic levels, and by adversarial intent, such as prompt leaking and harmful content generation. The study analyzes these techniques within different LLM architectures and application contexts, including machine translation and Chain of Thought reasoning. It also reviews common evaluation benchmarks, datasets, and metrics. Mitigation strategies examined include automated red teaming frameworks, input validation, content filtering, and alignment through training. It differentiates itself from previous works by conducting a systematic review specifically focused on immediate injection, organizing its attacks, defenses and research gaps. Finally, this review identifies major research challenges and suggests critical directions for improving LLM safety and robustness.

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges	0	5.62	19-03-2026
2	From LLM Reasoning to Autonomous AI Agents: A Comprehensive Review	0	7.7	01-06-2026
3	Empowering Security Operation Center With Artificial Intelligence and Machine Learning—A Systematic Literature Review	0	4.9	23-01-2025
4	No Perfect Fix for AI Browser Prompt Injection Flaws	0	7.35	05-08-2026
5	From single pull requests to full software packages: Detecting malicious code at scale	0	8.8	02-06-2026
6	A unified large language model–based framework for heterogeneous PV image diagnosis	0	9.5	18-08-2026
7	Cyber protection against advances in frontier AI models	0	6.85	03-08-2026
8	AIに対する根本的なセキュリティ課題となる間接プロンプトインジェクション	0	7	08-06-2026
9	Explainable AI for Intrusion Detection Systems: LIME and SHAP Applicability on Multi-Layer Perceptron	0	9.92	20-02-2024
10	The Polite Heist: How Prompt Injection Convinces AI Wallets to Give Cash Away	0	7	12-07-2026

Классификация: Пресс-релизы. Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 7.3. Источник: ieeexplore.ieee.org.