A Systematic Survey of Prompt Injection Attacks and Defenses in LLM-Integrated Applications and Agentic Systems
Prompt injection (PI), listed as LLM01:2025 by OWASP, converts a data-representation problem into an execution-control problem: untrusted content is processed alongside privileged instructions, while large language models lack a native instruction/data boundary. Unlike jailbreaking, which primarily targets content-safe...