@misc{indiciae3c0357aa92d8, title = {Defending against Indirect Prompt Injection by Instruction Detection}, author = {Tongyu Wen and Chenglong Wang and Xiyuan Yang and Haoyu Tang and Yueqi Xie and Lingjuan Lyu and Zhicheng Dou and Fangzhao Wu}, year = {2025}, doi = {10.18653/v1/2025.findings-emnlp.1060}, url = {https://arxiv.org/abs/2505.06311}, note = {Source identifier: 2505.06311} }