Skip to content
Review Open access

Survey on Adversarial Prompt Generation and Robustness Analysis in Large Language Models

2026 · IEEE Access · Vol 14, pp. 101063-101096 · 0 citations · 150 references
Computer Science

TL;DR

This survey provides a comprehensive analysis of adversarial prompting strategies, ranging from input manipulation techniques to semantic and structural distortions, and explores defense strategies across preprocessing, model-level, postprocessing, and hybrid strategies, highlighting recent advances and their limitations.

Abstract

The rapid integration of Large Language Models (LLMs) into critical domains has amplified concerns about their robustness, particularly against adversarial prompts that exploit subtle vulnerabilities. These crafted inputs can cause models to generate biased, misleading, or harmful outputs, posing serious ethical, societal, and operational risks. In this survey, we provide a comprehensive analysis of adversarial prompting strategies, ranging from input manipulation techniques to semantic and structural distortions. We systematically review benchmark datasets and evaluation metrics developed to assess model resilience under adversarial conditions. Furthermore, we explore defense strategies across preprocessing, model-level, postprocessing, and hybrid strategies, highlighting recent advances and their limitations. Special attention is given to emerging challenges, such as multimodal vulnerabilities, the balance between safety and expressiveness, and ethical considerations in adversarial defense design. Finally, we outline future research directions that aim to build LLMs that are not only more robust and trustworthy but also adaptable to evolving adversarial tactics. By synthesizing the current landscape, this work serves as a foundation for advancing the secure deployment of LLMs in real-world applications.

Read PDF

Similar papers

2025

Towards Building Model/Prompt-Transferable Attackers against Large Vision-Language Models

A new perspective of information theory is introduced to investigate LVLMs’ transferable characteristics by exploring the relative dependence between outputs of the LVLM model and input adversarial samples and formulate the complicated calculation of information gain as an estimation problem and incorporate such inform...

Xiaowen Cai, Daizong Liu, Xiaoye Qu et al. · 8 citations
Jun 2026

Unmasking Toxicity and Vulnerabilities in Large Vision-Language Models

This study systematically examines the vulnerabilities of open and closed-weight LVLMs, including LLaVA, InstructBLIP, Fuyu, Qwen, DeepSeek, Gemini, GPT, and Grok, using adversarial prompting strategies informed by social theories to simulate real-world social manipulation tactics.

Abdulkadir Erol, Trilok Padhi, Agnik Saha et al. · 0 citations
Preprint Aug 2026

Generating Attacks for LLMs with GFlowNets

This study proposes an automated, human-independent, and adaptive approach leveraging GFlowNets to identify LLM vulnerabilities by utilizing one large language model to test another, and introduces a model capable of generating attack inputs in the Turkish language.

Berkay Ozcam, Irem Onen, M. Amasyalı et al. · 0 citations
Conference Open access Sep 2026

Understanding and Exploiting Phase Sensitivity for Attacking Large Vision–Language Models

This paper proposes a novel LVLM attack method, called BadPhase with further backdoor designs, to implant adversarial phase as triggers into any image inputs via data poisoning so as to control the LVLMs’ predictions and finds that LVLMs are sensitive to the phase-aware image structure.

Dai-Zong Liu, Junhao Dong, Xiang Fang et al. · 0 citations
Conference Jul 2026

Generating Attacks for LLM with GFlowNets

The rapid advancement of Large Language Models (LLMs) has facilitated their ubiquitous integration into various domains, leading to widespread adoption. However, this escalating trend has introduced significant security vulnerabilities, necessitating the identification and mitigation of flaws arising from malicious exp...

Berkay Özçam, İrem Önen, E. I. Tatli et al. · 0 citations
Preprint Jun 2026

Yuvion LLM: An Adversarially-Aware Large Language Model for Content And AI Safety

As large language models are increasingly deployed in real-world systems, safety failures can still lead to harmful outputs and dangerous misuse. We argue that the essence of safety is adversarial: many failures arise not from natural inputs alone, but from strategic attempts to evade model policies and safeguards. How...

Ting Ma, Xiufeng Huang, Benlei Cui et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.