StruQ and SecAlign: Defending Against Prompt Injection Attacks
Researchers from BAIR propose two fine-tuning defenses, StruQ and SecAlign, against prompt injection attacks in LLM-integrated applications. StruQ uses structured instruction tuning to ignore injected instructions, while SecAlign applies preference optimization to achieve better robustness, reducing attack success rates to near 0% for optimization-free attacks and below 15% for optimization-based attacks.
Meta
OpenAI







