Render Before Reading: Visual Rendering as a Prompt Injection Defense
Large language models are vulnerable to prompt injection attacks, where third-party adversarial content can hijack the model's behavior. In this paper, we study the role played by the adversarial data's input modality, and identify a systematic asymmetry: multimodal LLMs are more likely to follow adversarial instructio...
Jie Zhang, Andrei Baroian, J. V. van Rijn et al.
· 0 citations