Trust No AI: Prompt Injection Along The CIA Security Triad
It highlights a critical vulnerability affecting AI systems and cybersecurity, though it appears to be a compilation of existing research rather than presenting new methods.
This paper examines how prompt injection attacks on large language models undermine the CIA security triad (Confidentiality, Integrity, Availability), compiling real-world exploits from major vendors like OpenAI and Microsoft to demonstrate these ongoing cybersecurity risks.
The CIA security triad - Confidentiality, Integrity, and Availability - is a cornerstone of data and cybersecurity. With the emergence of large language model (LLM) applications, a new class of threat, known as prompt injection, was first identified in 2022. Since then, numerous real-world vulnerabilities and exploits have been documented in production LLM systems, including those from leading vendors like OpenAI, Microsoft, Anthropic and Google. This paper compiles real-world exploits and proof-of concept examples, based on the research conducted and publicly documented by the author, demonstrating how prompt injection undermines the CIA triad and poses ongoing risks to cybersecurity and AI systems at large.