Title: Week 03 Resources
Course: AIINFRA 302: AI Security, Guardrails & Governance > Section: Week 03 — Direct and Indirect Prompt Injection Attacks

📚 Resources

- Crescendo: The Multi-Turn LLM Jailbreak Attack (USENIX Security 2025): https://www.usenix.org/system/files/conference/usenixsecurity25/sec25cycle1-prepub-805-russinovich.pdf
- Indirect prompt injection via RAG/email agents — 2025 case studies (Lakera): https://www.lakera.ai/blog/indirect-prompt-injection
- tldrsec/prompt-injection-defenses (catalog of attacks and defenses): https://github.com/tldrsec/prompt-injection-defenses
- Simon Willison: "the lethal trifecta": https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/
- Not what you've signed up for (Greshake et al., arXiv): https://arxiv.org/abs/2302.12173
- Gandalf (Lakera) prompt-injection game: https://gandalf.lakera.ai/

Week 04 · Prompt Injection Defenses and Input Validation

Notion ID: 392c08fd-0278-8162-8176-d72f914761d0 Notion URL: https://app.notion.com/p/392c08fd027881628176d72f914761d0