Prompt Injection Redefined as Role Confusion, Raising New Defense Angles
A new paper reframes prompt‑injection attacks as ‘role confusion’—situations where an LLM receives contradictory role tags and mis‑assigns its behavior. By treating roles as first‑class primitives, the authors expose fresh attack vectors, explain why some prompts succeed, and outline a roadmap for a science of roles.