ICON: Indirect Prompt Injection Defense for Agents based on Inference-Time Correction
ICON:基于推理时校正的代理间接提示注入防御
Che Wang, Fuyao Zhang, Jiaming Zhang, Ziqi Zhang, Yinghui Wang, Longtao Huang, Jianbo Gao, Zhong Chen, Wei Yang Bryan Lim
机构
*
College of Computing and Data Science, Nanyang Technological University, Singapore(计算与数据科学学院,南洋理工大学,新加坡)
;
Alibaba(阿里巴巴)
;
School of Computer Science, Peking University, China(计算机科学学院,北京大学,中国)
Debjit Paul, Daniel Murphy, Milan Gritta, Ronald Cardenas, Victor Prokhorov, Lena Sophia Bolliger, Aysim Toker, Roy Miles, Andreea-Maria Oncescu, Jasivan Alex Sivakumar, Philipp Borchert, Ismail Elezi, Meiru Zhang, Ka Yiu Lee, Guchun Zhang, Jun Wang, Gerasimos Lampouras
机构
*
Huawei Noah’s Ark Lab, UK(华为诺亚实验室,英国)
;
Imperial College London(伦敦帝国理工学院)
;
UCL Centre for Artificial Intelligence(伦敦大学学院人工智能中心)
;
University of Zurich(苏黎世大学)
;
University of Sheffield(谢菲尔德大学)
;
University of Cambridge(剑桥大学)
机构
*
Department of XXX, University of YYY, Location, Country(XXX系,YYY大学,地点,国家)
;
School of ZZZ, Institute of WWW, Location, Country(ZZZ学院,WWW研究所,地点,国家)
;
National University of Singapore(新加坡国立大学)
机构
*
Department of Electronic Engineering, The Chinese University of Hong Kong, Hong Kong SAR, China(香港中文大学电子工程系)
;
Division of Gastrointestinal Surgery, Shenzhen People's Hospital, China(深圳人民医院胃肠外科)
;
College of Mechatronics and Control Engineering, Shenzhen University, China(深圳大学机电与控制工程学院)
;
Department of Mechanical Engineering, The University of Hong Kong, Hong Kong SAR, China(香港大学机械工程系)
;
Department of Electronic and Electrical Engineering, Southern University of Science and Technology(南方科技大学电子与电气工程系)
CommentsarXiv admin comment: This version has been removed by arXiv administrators as the submitter did not have the rights to agree to the license at the time of submission