Prompt Injection Detection for Email Agents Through Attack Chain Modeling

arXiv:2609.30657 · cs.CR, cs.CL · Submitted 2026-09-25 · Read on arXiv

cs.CR, cs.CL

Submitted: 2026-09-25

Updated: 2026-09-25

Comments: Accepted to IEEE ICTAI 2026

Code: https://github.com/AcaiLab/Email

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Benchmark — 24× in this paper · explained in 2 episodes
Ablation — 12× in this paper · explained in 1 episode
Verifier — 12× in this paper · explained in 2 episodes
Consistency — 10× in this paper · explained in 3 episodes
AUC — 6× in this paper · explained in 2 episodes
Verification — 5× in this paper · explained in 2 episodes
Benchmarking — 4× in this paper · explained in 3 episodes
Distribution Shift — 4× in this paper · explained in 5 episodes
LLM judge — 4× in this paper · explained in 2 episodes
Robustness — 4× in this paper · explained in 5 episodes
Ablation Studies — 2× in this paper · explained in 1 episode
Accuracy — 2× in this paper · explained in 1 episode
Agent Architectures — 1× in this paper · explained in 1 episode
Agentic System — 1× in this paper · explained in 2 episodes
Embeddings — 1× in this paper · explained in 2 episodes
F1 Score — 1× in this paper · explained in 3 episodes
Feature Engineering — 1× in this paper · explained in 3 episodes
Generalization — 1× in this paper · explained in 13 episodes
Interpretability — 1× in this paper · explained in 15 episodes
LLM Integration — 1× in this paper · explained in 2 episodes
alpha — 1× in this paper · explained in 1 episode

Sources

Related papers