--- title: "Who cites Formalizing and Benchmarking — 71 citing papers" description: "71 papers of the Elamur Research library cite «Formalizing and Benchmarking Prompt Injection Attacks and Defenses», found in their…" canonical: "https://research.elamur.ai/free/en/papers/liu-2023-formalizing-benchmarking-prompt-injection-attacks/cited-by/" --- [Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/papers/liu-2023-formalizing-benchmarking-prompt-injection-attacks/cited-by/) [home](https://md.research.elamur.ai/free/en/) / [papers](https://md.research.elamur.ai/free/en/papers/) / [Formalizing and Benchmarking Prompt Injection…](https://md.research.elamur.ai/free/en/papers/liu-2023-formalizing-benchmarking-prompt-injection-attacks/) / cited by # Who cites «Formalizing and Benchmarking Prompt Injection Attacks and Defenses» 71 papers of our library cite it (of the 149,439 whose bibliographies we read) · 17 with a page here, the most cited first · [← back to «Formalizing and Benchmarking Prompt Injection Attacks and Defenses»](https://md.research.elamur.ai/free/en/papers/liu-2023-formalizing-benchmarking-prompt-injection-attacks/) 1. **[Security and Privacy Challenges of Large Language Models: A Survey](https://md.research.elamur.ai/free/en/papers/das-2024-security-privacy-challenges-large-language/) [ACM Computing Surveys](https://md.research.elamur.ai/free/en/venues/acm-computing-surveys/)**Badhan Chandra Das, M. Hadi Amini, Yanzhao Wu*2024 · 424 citations* 2. [**TrustLLM: Trustworthiness in Large Language Models arXiv:2401.05561**Yue Huang, Lichao Sun, Haoran Wang, et al.*2024 · 237 citations*](https://md.research.elamur.ai/free/en/papers/huang-2024-trustllm-trustworthiness-large-language-models/) 3. [**PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models arXiv:2402.07867**Wei Zou, Runpeng Geng, Binghui Wang, et al.*2024 · 80 citations*](https://md.research.elamur.ai/free/en/papers/zou-2024-poisonedrag-knowledge-corruption-attacks-retrieval/) 4. **[Can Indirect Prompt Injection Attacks Be Detected and Removed?](https://md.research.elamur.ai/free/en/papers/chen-2025-can-indirect-prompt-injection-attacks/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yulin Chen, Haoran Li, Yuan Sui, et al.*2025 · 30 citations* 5. **[Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification](https://md.research.elamur.ai/free/en/papers/zhang-2025-breaking-agents-compromising-autonomous-llm/) [Conference on Empirical Methods in Natural Language Processing (EMNLP)](https://md.research.elamur.ai/free/en/venues/emnlp/)**Boyang Zhang, Yicong Tan, Yun Shen, et al.*2025 · 29 citations* 6. **[The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents](https://md.research.elamur.ai/free/en/papers/jia-2025-task-shield-enforcing-task-alignment/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Feiran Jia, Tong Wu, Xin Qin, et al.*2025 · 27 citations* 7. **[Defense Against Prompt Injection Attack by Leveraging Attack Techniques](https://md.research.elamur.ai/free/en/papers/chen-2025-defense-against-prompt-injection-attack/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yulin Chen, Haoran Li, Zihao Zheng, et al.*2025 · 24 citations* 8. **[PIGuard: Prompt Injection Guardrail via Mitigating Overdefense for Free](https://md.research.elamur.ai/free/en/papers/li-2025-piguard-prompt-injection-guardrail-mitigating/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Hao Li, Xiaogeng Liu, Ning Zhang, et al.*2025 · 16 citations* 9. **[Logic Jailbreak: Efficiently Unlocking LLM Safety Restrictions Through Formal Logical Expression](https://md.research.elamur.ai/free/en/papers/peng-2026-logic-jailbreak-efficiently-unlocking-llm/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Jingyu Peng, Maolin Wang, Nan Wang, et al.*2026 · 8 citations* 10. **[LogicPoison: Logical Attacks on Graph Retrieval-Augmented Generation](https://md.research.elamur.ai/free/en/papers/xiao-2026-logicpoison-logical-attacks-graph-retrieval/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yilin Xiao, Jin Chen, Qinggang Zhang, et al.*2026 · 1 citation* 11. **[Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation](https://md.research.elamur.ai/free/en/papers/zhang-2026-beyond-explicit-refusals-soft-failure/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Wentao Zhang, Yan Zhuang, ZhuHang Zheng, et al.*2026* 12. **[CachePrune: Teaching LLMs What Not to Follow via KV-Cache Editing](https://md.research.elamur.ai/free/en/papers/wang-2026-cacheprune-teaching-llms-what-not/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Rui Wang, Junda Wu, Yu Xia, et al.*2026* 13. **[InferPilot: Autonomous Inference Attacks Against ML Services With LLM-Based Agents](https://md.research.elamur.ai/free/en/papers/wu-2026-inferpilot-autonomous-inference-attacks-against/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Yixin Wu, Rui Wen, Chi Cui, et al.*2026* 14. **[LeakDojo: Decoding the Leakage Threats of RAG Systems](https://md.research.elamur.ai/free/en/papers/zhang-2026-leakdojo-decoding-leakage-threats-rag/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Maosen Zhang, Jianshuo Dong, Lu Boting, et al.*2026* 15. **[Policy Compliance of User Requests in Natural Language for AI Systems](https://md.research.elamur.ai/free/en/papers/velarde-2026-policy-compliance-user-requests-natural/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Pedro Cisneros-Velarde*2026* 16. **[RAP-ID: Mechanistic Prompt Injection Detection via Impostor Behavior Analysis](https://md.research.elamur.ai/free/en/papers/yang-2026-rap-id-mechanistic-prompt-injection/) [Findings of the Association for Computational Linguistics](https://md.research.elamur.ai/free/en/venues/findings/)**Yuchen Yang, Lei Peng, Yujie He, et al.*2026* 17. **[Reasoning Hijacking: The Fragility of Reasoning Alignment in Large Language Models](https://md.research.elamur.ai/free/en/papers/liu-2026-reasoning-hijacking-fragility-reasoning-alignment/) [Annual Meeting of the Association for Computational Linguistics (ACL)](https://md.research.elamur.ai/free/en/venues/acl/)**Yuansen Liu, Yixuan Tang, Anthony Kum Hoe Tung*2026* 54 more papers of our library cite it; they have no page here yet. - [← back to](https://md.research.elamur.ai/free/en/papers/liu-2023-formalizing-benchmarking-prompt-injection-attacks/) — Formalizing and Benchmarking Prompt Injection Attacks and Defenses