Defending Against Indirect Prompt Injection Attacks With Spotlighting. - Keegan Hines; Gary Lopez; Matthew Hall; Federico Zarfati; Yonatan Zunger; Emre Kiciman (CAMLIS, 2024)

PyRIT: A Framework for Security Risk Identification and Red Teaming in Generative AI Systems. - Gary D. Lopez Munoz; Amanda J. Minnich; Roman Lutz; Richard Lundeen; Raja Sekhar Rao Dheekonda; Nina Chikanov; Bolor-Erdene Jagdagdorj; Martin Pouliot; Shiven Chawla; Whitney Maxwell; Blake Bullwinkel; Katherine Pratt; et al. (CAMLIS, 2024)

PyRIT: A Framework for Security Risk Identification and Red Teaming in Generative AI System. - Gary D. Lopez Munoz; Amanda J. Minnich; Roman Lutz; Richard Lundeen; Raja Sekhar Rao Dheekonda; Nina Chikanov; Bolor-Erdene Jagdagdorj; Martin Pouliot; Shiven Chawla; Whitney Maxwell; Blake Bullwinkel; Katherine Pratt; et al. (CoRR, 2024)

The Price of Intelligence: Three risks inherent in LLMs. - Mark Russinovich; Ahmed Salem 001; Santiago Zanella-Béguelin; Yonatan Zunger (ACM Queue, 2024)

Lessons From Red Teaming 100 Generative AI Products. - Blake Bullwinkel; Amanda J. Minnich; Shiven Chawla; Gary Lopez; Martin Pouliot; Whitney Maxwell; Joris de Gruyter; Katherine Pratt; Saphir Qi; Nina Chikanov; Roman Lutz; Raja Sekhar Rao Dheekonda; et al. (CoRR, 2025)

A Representation Engineering Perspective on the Effectiveness of Multi-Turn Jailbreaks. - Blake Bullwinkel; Mark Russinovich; Ahmed Salem 001; Santiago Zanella-Béguelin; Daniel Jones; Giorgio Severi; Eugenia Kim; Keegan Hines; Amanda J. Minnich; Yonatan Zunger; Ram Shankar Siva Kumar (CoRR, 2025)