Skip to main content Skip to main navigation menu Skip to site footer
##common.pageHeaderLogo.altText##
Izvestiya SFedU
Engineering sciences
  • Current
  • Previous issues
    • Archive
    • Issues 1995 – 2019
  • Editorial Board
  • About journal
    • Officially
    • The main tasks
    • Main sections
    • Specialties of the Higher Attestation Commission of the Russian Federation
    • Editor-in-Chief
ISSN 1999-9429 print
ISSN 2311-3103 online
  • Login
  1. Home /
  2. Search

Search

Advanced filters
Published After
Published Before

Search Results

Found one item.
  • ALGORITHM FOR FILTERING "HINT INJECTIONS" WHEN USING SPATIAL INFORMATION

    S.L. Belyakov , L.А. Izrailev , О.N. Pokusaev
    32-45
    2026-07-07
    Abstract ▼

    The integration of large language models (LLM) into geographic information systems (GIS) opens up new opportunities for spatial analysis, but it is accompanied by specific vulnerabilities such as "hint injection" (prompt injection). Such attacks allow attackers to bypass LLM security mechanisms, manipulate issuance, gain access to confidential information, and violate data integrity. Using space allows you to access an object not directly, but through its spatial relationships with other objects. Existing keyword or template filtering methods do not provide reliable protection due to the constant emergence of new attack scenarios. This determines the relevance of developing adaptive, self-learning algorithms for filtering queries for industrial injections to large language models. The aim of the study is to develop an algorithm for filtering prompt injections for LLM, based on the Case-Based Reasoning (CBR) method. The paper proposes an algorithm for comparing LLM queries with a database of previously known promt injections. The experiment showed that as the database of use cases accumulates, the accuracy of detecting prompt injections increases from 42% to 83%. At the same time, the processing time for a single request increases slightly (from 0.18 to 0.19 seconds with a 23% increase in the database). Approaches to generalizing the precedent base and introspection of the precedent base were also proposed. The proposed algorithm makes it possible to increase the security of LLM-interface systems against prompt injections due to adaptivity and self-learning. The practical significance lies in the possibility of implementing the developed filter into information systems to prevent leaks and manipulation of spatial data. Further research is related to the development of methods for automatic generalization of use cases and the integration of additional contextual analyzers.

1 - 1 of 1 items

links

For authors
  • Submit article
  • Author Guidelines
  • Editorial Policy
  • Reviewing
  • Ethics of scientific publications
  • Open access policy
  • Supporting documents
Language
  • English
  • русский

journal

* not an advertisement

index

Индексация журнала
* not an advertisement
Information
  • For Readers
  • For Authors
  • For Librarians
Address: 347900, Taganrog, Chekhov St., 22, A-211 Phone: +7 (8634) 37-19-80 E-mail: iborodyanskiy@sfedu.ru
Publication is free
More information about the publishing system, Platform and Workflow by OJS/PKP.
logo Developed by RDCenter