Search
Search Results
Found one item.
1 - 1 of 1 items
The integration of large language models (LLM) into geographic information systems (GIS) opens up new opportunities for spatial analysis, but it is accompanied by specific vulnerabilities such as "hint injection" (prompt injection). Such attacks allow attackers to bypass LLM security mechanisms, manipulate issuance, gain access to confidential information, and violate data integrity. Using space allows you to access an object not directly, but through its spatial relationships with other objects. Existing keyword or template filtering methods do not provide reliable protection due to the constant emergence of new attack scenarios. This determines the relevance of developing adaptive, self-learning algorithms for filtering queries for industrial injections to large language models. The aim of the study is to develop an algorithm for filtering prompt injections for LLM, based on the Case-Based Reasoning (CBR) method. The paper proposes an algorithm for comparing LLM queries with a database of previously known promt injections. The experiment showed that as the database of use cases accumulates, the accuracy of detecting prompt injections increases from 42% to 83%. At the same time, the processing time for a single request increases slightly (from 0.18 to 0.19 seconds with a 23% increase in the database). Approaches to generalizing the precedent base and introspection of the precedent base were also proposed. The proposed algorithm makes it possible to increase the security of LLM-interface systems against prompt injections due to adaptivity and self-learning. The practical significance lies in the possibility of implementing the developed filter into information systems to prevent leaks and manipulation of spatial data. Further research is related to the development of methods for automatic generalization of use cases and the integration of additional contextual analyzers.