An Early Categorization of Prompt Injection Attacks on Large Language Models

Language models are few-shot learners

Brown, T., Mann, B., Ryder, N., Subbiah, M., Kaplan, J.D., Dhariwal, P., Neelakantan, A., Shyam, P., Sastry, G., Askell, A., et al., 2020 · 1901

Earlier work this paper cites.

BERT: Pre-training of deep bidirectional transformers for language understanding, in: Proceedings of the 2019 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long and Short Papers), Association for Computational Linguistics, Minneapolis, Minnesota. pp. 4171–4186

Devlin, J., Chang, M.W., Lee, K., Toutanova, K., 2019 · 2019

Earlier work this paper cites.

Language models are unsupervised multitask learners

Radford, A., Wu, J., Child, R., Luan, D., Amodei, D., Sutskever, I., et al., 2019 · 2019

Earlier work this paper cites.

Cyber hygiene: The concept, its measure, and its initial tests

Vishwanath, A., Neo, L.S., Goh, P., Lee, S., Khader, M., Ong, G., Chin, J., 2020 · 2020

Earlier work this paper cites.

On the dangers of stochastic parrots: Can language models be too big?, in: Proceedings of the 2021 ACM conference on fairness, accountability, and transparency, pp. 610–623

Bender, E.M., Gebru, T., McMillan-Major, A., Shmitchell, S., 2021 · 2021

Earlier work this paper cites.

On the opportunities and risks of foundation models

Original

Bommasani, R., Hudson, D.A., Adeli, E., Altman, R., Arora, S., von Arx, S., Bernstein, M.S., Bohg, J., Bosselut, A., Brunskill, E., et al., 2021 · 2021

Earlier work this paper cites.

Extracting training data from large language models., in: USENIX Security Symposium

Carlini, N., Tramer, F., Wallace, E., Jagielski, M., Herbert-Voss, A., Lee, K., Roberts, A., Brown, T.B., Song, D., Erlingsson, U., et al., 2021 · 2021

Earlier work this paper cites.

The race to understand the exhilarating, dangerous world of language ai

Hao, K., 2021 · 2021

Earlier work this paper cites.

Towards understanding and mitigating social biases in language models, in: Meila, M., Zhang, T. (Eds.), Proceedings of the 38th International Conference on Machine Learning, PMLR. pp. 6565–6576

Liang, P.P., Wu, C., Morency, L.P., Salakhutdinov, R., 2021 · 2021

Earlier work this paper cites.

Zero-shot text-to-image generation, in: International Conference on Machine Learning, PMLR. pp. 8821–8831

Ramesh, A., Pavlov, M., Goh, G., Gray, S., Voss, C., Radford, A., Chen, M., Sutskever, I., 2021 · 2021

Earlier work this paper cites.

Design guidelines for prompt engineering text-to-image generative models, in: Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems, pp. 1–23

Liu, V., Chilton, L.B., 2022 · 2022

Earlier work this paper cites.

Introducing chatgpt

OpenAI, 2022 · 2022

Earlier work this paper cites.

Ignore previous prompt: Attack techniques for language models

Original

Perez, F., Ribeiro, I., 2022 · 2022

Earlier work this paper cites.

Declassifying the responsible disclosure of the prompt injection attack vulnerability of gpt-3

Preamble, 2022 · 2022

Cited alongside, same era.

Large pre-trained language models contain human-like biases of what is right and wrong to do

Schramowski, P., Turan, C., Andersen, N., Rothkopf, C.A., Kersting, K., 2022 · 2022

Cited alongside, same era.

Lamda: Language models for dialog applications

Original

Thoppilan, R., De Freitas, D., Hall, J., Shazeer, N., Kulshreshtha, A., Cheng, H.T., Jin, A., Bos, T., Baker, L., Du, Y., et al., 2022 · 2022

Cited alongside, same era.

Prompt injection attacks against gpt-3

Willison, S., 2022 · 2022

Cited alongside, same era.

Sparks of artificial general intelligence: Early experiments with gpt-4

Original

Bubeck, S., Chandrasekaran, V., Eldan, R., Gehrke, J., Horvitz, E., Kamar, E., Lee, P., Lee, Y.T., Li, Y., Lundberg, S., et al., 2023 · 2023

Cited alongside, same era.

Use of llms for illicit purposes: Threats, prevention measures, and vulnerabilities

Original

Mozes, M., He, X., Kleinberg, B., Griffin, L.D., 2023 · 2023

Later among the works it cites.

I built a zero day virus with undetectable exfiltration using only chatgpt prompts

Mulgrew, A., 2023 · 2023

Later among the works it cites.

Gpt-4 technical report

Original

OpenAI, 2023 · 2023

Later among the works it cites.

An important next step on our ai journey

Pichai, S., 2023 · 2023

Later among the works it cites.

Latent jailbreak: A benchmark for evaluating text safety and output robustness of large language models

Original

Qiu, H., Zhang, S., Li, A., He, H., Lan, Z., 2023 · 2023

Later among the works it cites.