Papers by Maria-Irina Nicolae

Copied to clipboard

Challenge:	Existing defenses against prompt extraction are either easily bypassed or require constant updates to address new threats.
Approach:	They propose a new mechanism that replaces the original prompt with a proxy to prevent prompt leakage by obfuscating the extracted prompt.
Outcome:	The proposed defense outperforms the existing defense, which only achieves 42.80% of the prompts extracted from the original task.