{"data":{"id":"10.48550/arxiv.2611.02643","type":"dois","attributes":{"doi":"10.48550/arxiv.2611.02643","prefix":"10.48550","suffix":"arxiv.2611.02643","identifiers":[{"identifier":"2611.02643","identifierType":"arXiv"}],"alternateIdentifiers":[{"alternateIdentifierType":"arXiv","alternateIdentifier":"2611.02643"}],"creators":[{"name":"Zhou, Kainan","nameType":"Personal","givenName":"Kainan","familyName":"Zhou","affiliation":[],"nameIdentifiers":[]},{"name":"Qian, Gangzhen","nameType":"Personal","givenName":"Gangzhen","familyName":"Qian","affiliation":[],"nameIdentifiers":[]},{"name":"Sung, Janet","nameType":"Personal","givenName":"Janet","familyName":"Sung","affiliation":[],"nameIdentifiers":[]},{"name":"Jing, Zhi","nameType":"Personal","givenName":"Zhi","familyName":"Jing","affiliation":[],"nameIdentifiers":[]},{"name":"Bao, Rong","nameType":"Personal","givenName":"Rong","familyName":"Bao","affiliation":[],"nameIdentifiers":[]},{"name":"Lao, Qianru","nameType":"Personal","givenName":"Qianru","familyName":"Lao","affiliation":[],"nameIdentifiers":[]}],"titles":[{"title":"SearchInject: Retrieval Exposure Control for Indirect Prompt Injection in Language-Model Search"}],"publisher":"arXiv","container":{},"publicationYear":2026,"subjects":[{"lang":"en","subject":"Artificial Intelligence (cs.AI)","subjectScheme":"arXiv"},{"lang":"en","subject":"Computers and Society (cs.CY)","subjectScheme":"arXiv"},{"lang":"en","subject":"Information Retrieval (cs.IR)","subjectScheme":"arXiv"},{"lang":"en","subject":"Machine Learning (cs.LG)","subjectScheme":"arXiv"},{"subject":"FOS: Computer and information sciences","subjectScheme":"Fields of Science and Technology (FOS)"}],"contributors":[],"dates":[{"date":"2026-11-02T07:04:42Z","dateType":"Submitted","dateInformation":"v1"},{"date":"2026-11-03T05:03:09Z","dateType":"Updated","dateInformation":"v1"},{"date":"2026-11","dateType":"Available","dateInformation":"v1"}],"language":null,"types":{"ris":"GEN","bibtex":"misc","citeproc":"article","schemaOrg":"CreativeWork","resourceType":"Article","resourceTypeGeneral":"Preprint"},"relatedIdentifiers":[],"relatedItems":[],"sizes":[],"formats":[],"version":"1","rightsList":[{"rights":"Creative Commons Attribution 4.0 International","rightsUri":"https://creativecommons.org/licenses/by/4.0/legalcode","schemeUri":"https://spdx.org/licenses/","rightsIdentifier":"cc-by-4.0","rightsIdentifierScheme":"SPDX"}],"descriptions":[{"description":"An indirect prompt injection can affect a search-augmented large language model only after its carrier page reaches model context. SearchInject controls this admission decision with a joint score combining retrieval relevance, search-abuse cues, instruction likelihood, and two relevance interactions. A quarantine threshold is selected under an empirical 0.5% clean-candidate false-quarantine constraint on a calibration split. Evaluation uses 300 held-out SciFact queries and held-out payload categories within four construction families already represented during development. Across 1,200 query-family outcomes per retriever, top-10 target exposure falls from 0.9408 to 0.1583 for BM25, from 0.9158 to 0.1508 for a normalized hybrid, and from 0.8450 to 0.1375 for latent semantic analysis. These are relative reductions of 83.2-83.7%; the largest absolute change in clean normalized discounted cumulative gain at rank 10 is 0.0018. The frozen threshold yields clean test false-quarantine rates of 0.59-0.65%, above the empirical calibration constraint. A query-level analytical reanalysis accounts for the repeated construction outcomes under an independent-query assumption. A separate 104-case generation follow-up records context removal but no confirmed undefended hijacks under a post hoc endpoint, so it cannot estimate a reduction in attack success. The evidence supports retrieval exposure control within the evaluated construction families; the benefit of the interaction terms at matched clean cost remains unresolved.","descriptionType":"Abstract"},{"description":"6 pages, 3 tables, 6 graphs. Accepted at IEEE ICCC 2026. Author accepted manuscript. Reproducibility artifact: https://www.iccc.org/","descriptionType":"Other"}],"geoLocations":[],"fundingReferences":[],"xml":"PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHJlc291cmNlIHhtbG5zPSJodHRwOi8vZGF0YWNpdGUub3JnL3NjaGVtYS9rZXJuZWwtNCIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgeHNpOnNjaGVtYUxvY2F0aW9uPSJodHRwOi8vZGF0YWNpdGUub3JnL3NjaGVtYS9rZXJuZWwtNCBodHRwOi8vc2NoZW1hLmRhdGFjaXRlLm9yZy9tZXRhL2tlcm5lbC00LjMvbWV0YWRhdGEueHNkIj4KICA8aWRlbnRpZmllciBpZGVudGlmaWVyVHlwZT0iRE9JIj4xMC40ODU1MC9BUlhJVi4yNjExLjAyNjQzPC9pZGVudGlmaWVyPgogIDxhbHRlcm5hdGVJZGVudGlmaWVycz4KICAgIDxhbHRlcm5hdGVJZGVudGlmaWVyIGFsdGVybmF0ZUlkZW50aWZpZXJUeXBlPSJhclhpdiI+MjYxMS4wMjY0MzwvYWx0ZXJuYXRlSWRlbnRpZmllcj4KICA8L2FsdGVybmF0ZUlkZW50aWZpZXJzPgogIDxjcmVhdG9ycz4KICAgIDxjcmVhdG9yPgogICAgICA8Y3JlYXRvck5hbWUgbmFtZVR5cGU9IlBlcnNvbmFsIj5aaG91LCBLYWluYW48L2NyZWF0b3JOYW1lPgogICAgICA8Z2l2ZW5OYW1lPkthaW5hbjwvZ2l2ZW5OYW1lPgogICAgICA8ZmFtaWx5TmFtZT5aaG91PC9mYW1pbHlOYW1lPgogICAgPC9jcmVhdG9yPgogICAgPGNyZWF0b3I+CiAgICAgIDxjcmVhdG9yTmFtZSBuYW1lVHlwZT0iUGVyc29uYWwiPlFpYW4sIEdhbmd6aGVuPC9jcmVhdG9yTmFtZT4KICAgICAgPGdpdmVuTmFtZT5HYW5nemhlbjwvZ2l2ZW5OYW1lPgogICAgICA8ZmFtaWx5TmFtZT5RaWFuPC9mYW1pbHlOYW1lPgogICAgPC9jcmVhdG9yPgogICAgPGNyZWF0b3I+CiAgICAgIDxjcmVhdG9yTmFtZSBuYW1lVHlwZT0iUGVyc29uYWwiPlN1bmcsIEphbmV0PC9jcmVhdG9yTmFtZT4KICAgICAgPGdpdmVuTmFtZT5KYW5ldDwvZ2l2ZW5OYW1lPgogICAgICA8ZmFtaWx5TmFtZT5TdW5nPC9mYW1pbHlOYW1lPgogICAgPC9jcmVhdG9yPgogICAgPGNyZWF0b3I+CiAgICAgIDxjcmVhdG9yTmFtZSBuYW1lVHlwZT0iUGVyc29uYWwiPkppbmcsIFpoaTwvY3JlYXRvck5hbWU+CiAgICAgIDxnaXZlbk5hbWU+WmhpPC9naXZlbk5hbWU+CiAgICAgIDxmYW1pbHlOYW1lPkppbmc8L2ZhbWlseU5hbWU+CiAgICA8L2NyZWF0b3I+CiAgICA8Y3JlYXRvcj4KICAgICAgPGNyZWF0b3JOYW1lIG5hbWVUeXBlPSJQZXJzb25hbCI+QmFvLCBSb25nPC9jcmVhdG9yTmFtZT4KICAgICAgPGdpdmVuTmFtZT5Sb25nPC9naXZlbk5hbWU+CiAgICAgIDxmYW1pbHlOYW1lPkJhbzwvZmFtaWx5TmFtZT4KICAgIDwvY3JlYXRvcj4KICAgIDxjcmVhdG9yPgogICAgICA8Y3JlYXRvck5hbWUgbmFtZVR5cGU9IlBlcnNvbmFsIj5MYW8sIFFpYW5ydTwvY3JlYXRvck5hbWU+CiAgICAgIDxnaXZlbk5hbWU+UWlhbnJ1PC9naXZlbk5hbWU+CiAgICAgIDxmYW1pbHlOYW1lPkxhbzwvZmFtaWx5TmFtZT4KICAgIDwvY3JlYXRvcj4KICA8L2NyZWF0b3JzPgogIDx0aXRsZXM+CiAgICA8dGl0bGU+U2VhcmNoSW5qZWN0OiBSZXRyaWV2YWwgRXhwb3N1cmUgQ29udHJvbCBmb3IgSW5kaXJlY3QgUHJvbXB0IEluamVjdGlvbiBpbiBMYW5ndWFnZS1Nb2RlbCBTZWFyY2g8L3RpdGxlPgogIDwvdGl0bGVzPgogIDxwdWJsaXNoZXI+YXJYaXY8L3B1Ymxpc2hlcj4KICA8cHVibGljYXRpb25ZZWFyPjIwMjY8L3B1YmxpY2F0aW9uWWVhcj4KICA8c3ViamVjdHM+CiAgICA8c3ViamVjdCB4bWw6bGFuZz0iZW4iIHN1YmplY3RTY2hlbWU9ImFyWGl2Ij5BcnRpZmljaWFsIEludGVsbGlnZW5jZSAoY3MuQUkpPC9zdWJqZWN0PgogICAgPHN1YmplY3QgeG1sOmxhbmc9ImVuIiBzdWJqZWN0U2NoZW1lPSJhclhpdiI+Q29tcHV0ZXJzIGFuZCBTb2NpZXR5IChjcy5DWSk8L3N1YmplY3Q+CiAgICA8c3ViamVjdCB4bWw6bGFuZz0iZW4iIHN1YmplY3RTY2hlbWU9ImFyWGl2Ij5JbmZvcm1hdGlvbiBSZXRyaWV2YWwgKGNzLklSKTwvc3ViamVjdD4KICAgIDxzdWJqZWN0IHhtbDpsYW5nPSJlbiIgc3ViamVjdFNjaGVtZT0iYXJYaXYiPk1hY2hpbmUgTGVhcm5pbmcgKGNzLkxHKTwvc3ViamVjdD4KICAgIDxzdWJqZWN0IHN1YmplY3RTY2hlbWU9IkZpZWxkcyBvZiBTY2llbmNlIGFuZCBUZWNobm9sb2d5IChGT1MpIj5GT1M6IENvbXB1dGVyIGFuZCBpbmZvcm1hdGlvbiBzY2llbmNlczwvc3ViamVjdD4KICA8L3N1YmplY3RzPgogIDxkYXRlcz4KICAgIDxkYXRlIGRhdGVUeXBlPSJTdWJtaXR0ZWQiIGRhdGVJbmZvcm1hdGlvbj0idjEiPjIwMjYtMTEtMDJUMDc6MDQ6NDJaPC9kYXRlPgogICAgPGRhdGUgZGF0ZVR5cGU9IlVwZGF0ZWQiIGRhdGVJbmZvcm1hdGlvbj0idjEiPjIwMjYtMTEtMDNUMDU6MDM6MDlaPC9kYXRlPgogICAgPGRhdGUgZGF0ZVR5cGU9IkF2YWlsYWJsZSIgZGF0ZUluZm9ybWF0aW9uPSJ2MSI+MjAyNi0xMTwvZGF0ZT4KICA8L2RhdGVzPgogIDxyZXNvdXJjZVR5cGUgcmVzb3VyY2VUeXBlR2VuZXJhbD0iUHJlcHJpbnQiPkFydGljbGU8L3Jlc291cmNlVHlwZT4KICA8dmVyc2lvbj4xPC92ZXJzaW9uPgogIDxyaWdodHNMaXN0PgogICAgPHJpZ2h0cyByaWdodHNVUkk9Imh0dHA6Ly9jcmVhdGl2ZWNvbW1vbnMub3JnL2xpY2Vuc2VzL2J5LzQuMC8iIHJpZ2h0c0lkZW50aWZpZXJTY2hlbWU9IlNQRFgiIHJpZ2h0c0lkZW50aWZpZXI9IkNDLUJZLTQuMCI+Q3JlYXRpdmUgQ29tbW9ucyBBdHRyaWJ1dGlvbiA0LjAgSW50ZXJuYXRpb25hbDwvcmlnaHRzPgogIDwvcmlnaHRzTGlzdD4KICA8ZGVzY3JpcHRpb25zPgogICAgPGRlc2NyaXB0aW9uIGRlc2NyaXB0aW9uVHlwZT0iQWJzdHJhY3QiPkFuIGluZGlyZWN0IHByb21wdCBpbmplY3Rpb24gY2FuIGFmZmVjdCBhIHNlYXJjaC1hdWdtZW50ZWQgbGFyZ2UgbGFuZ3VhZ2UgbW9kZWwgb25seSBhZnRlciBpdHMgY2FycmllciBwYWdlIHJlYWNoZXMgbW9kZWwgY29udGV4dC4gU2VhcmNoSW5qZWN0IGNvbnRyb2xzIHRoaXMgYWRtaXNzaW9uIGRlY2lzaW9uIHdpdGggYSBqb2ludCBzY29yZSBjb21iaW5pbmcgcmV0cmlldmFsIHJlbGV2YW5jZSwgc2VhcmNoLWFidXNlIGN1ZXMsIGluc3RydWN0aW9uIGxpa2VsaWhvb2QsIGFuZCB0d28gcmVsZXZhbmNlIGludGVyYWN0aW9ucy4gQSBxdWFyYW50aW5lIHRocmVzaG9sZCBpcyBzZWxlY3RlZCB1bmRlciBhbiBlbXBpcmljYWwgMC41JSBjbGVhbi1jYW5kaWRhdGUgZmFsc2UtcXVhcmFudGluZSBjb25zdHJhaW50IG9uIGEgY2FsaWJyYXRpb24gc3BsaXQuIEV2YWx1YXRpb24gdXNlcyAzMDAgaGVsZC1vdXQgU2NpRmFjdCBxdWVyaWVzIGFuZCBoZWxkLW91dCBwYXlsb2FkIGNhdGVnb3JpZXMgd2l0aGluIGZvdXIgY29uc3RydWN0aW9uIGZhbWlsaWVzIGFscmVhZHkgcmVwcmVzZW50ZWQgZHVyaW5nIGRldmVsb3BtZW50LiBBY3Jvc3MgMSwyMDAgcXVlcnktZmFtaWx5IG91dGNvbWVzIHBlciByZXRyaWV2ZXIsIHRvcC0xMCB0YXJnZXQgZXhwb3N1cmUgZmFsbHMgZnJvbSAwLjk0MDggdG8gMC4xNTgzIGZvciBCTTI1LCBmcm9tIDAuOTE1OCB0byAwLjE1MDggZm9yIGEgbm9ybWFsaXplZCBoeWJyaWQsIGFuZCBmcm9tIDAuODQ1MCB0byAwLjEzNzUgZm9yIGxhdGVudCBzZW1hbnRpYyBhbmFseXNpcy4gVGhlc2UgYXJlIHJlbGF0aXZlIHJlZHVjdGlvbnMgb2YgODMuMi04My43JTsgdGhlIGxhcmdlc3QgYWJzb2x1dGUgY2hhbmdlIGluIGNsZWFuIG5vcm1hbGl6ZWQgZGlzY291bnRlZCBjdW11bGF0aXZlIGdhaW4gYXQgcmFuayAxMCBpcyAwLjAwMTguIFRoZSBmcm96ZW4gdGhyZXNob2xkIHlpZWxkcyBjbGVhbiB0ZXN0IGZhbHNlLXF1YXJhbnRpbmUgcmF0ZXMgb2YgMC41OS0wLjY1JSwgYWJvdmUgdGhlIGVtcGlyaWNhbCBjYWxpYnJhdGlvbiBjb25zdHJhaW50LiBBIHF1ZXJ5LWxldmVsIGFuYWx5dGljYWwgcmVhbmFseXNpcyBhY2NvdW50cyBmb3IgdGhlIHJlcGVhdGVkIGNvbnN0cnVjdGlvbiBvdXRjb21lcyB1bmRlciBhbiBpbmRlcGVuZGVudC1xdWVyeSBhc3N1bXB0aW9uLiBBIHNlcGFyYXRlIDEwNC1jYXNlIGdlbmVyYXRpb24gZm9sbG93LXVwIHJlY29yZHMgY29udGV4dCByZW1vdmFsIGJ1dCBubyBjb25maXJtZWQgdW5kZWZlbmRlZCBoaWphY2tzIHVuZGVyIGEgcG9zdCBob2MgZW5kcG9pbnQsIHNvIGl0IGNhbm5vdCBlc3RpbWF0ZSBhIHJlZHVjdGlvbiBpbiBhdHRhY2sgc3VjY2Vzcy4gVGhlIGV2aWRlbmNlIHN1cHBvcnRzIHJldHJpZXZhbCBleHBvc3VyZSBjb250cm9sIHdpdGhpbiB0aGUgZXZhbHVhdGVkIGNvbnN0cnVjdGlvbiBmYW1pbGllczsgdGhlIGJlbmVmaXQgb2YgdGhlIGludGVyYWN0aW9uIHRlcm1zIGF0IG1hdGNoZWQgY2xlYW4gY29zdCByZW1haW5zIHVucmVzb2x2ZWQuPC9kZXNjcmlwdGlvbj4KICAgIDxkZXNjcmlwdGlvbiBkZXNjcmlwdGlvblR5cGU9Ik90aGVyIj42IHBhZ2VzLCAzIHRhYmxlcywgNiBncmFwaHMuIEFjY2VwdGVkIGF0IElFRUUgSUNDQyAyMDI2LiBBdXRob3IgYWNjZXB0ZWQgbWFudXNjcmlwdC4gUmVwcm9kdWNpYmlsaXR5IGFydGlmYWN0OiBodHRwczovL3d3dy5pY2NjLm9yZy88L2Rlc2NyaXB0aW9uPgogIDwvZGVzY3JpcHRpb25zPgo8L3Jlc291cmNlPg==","url":"https://arxiv.org/abs/2611.02643","contentUrl":null,"metadataVersion":0,"schemaVersion":"http://datacite.org/schema/kernel-4","source":"mds","isActive":true,"state":"findable","reason":null,"viewCount":0,"viewsOverTime":[],"downloadCount":0,"downloadsOverTime":[],"referenceCount":0,"citationCount":0,"citationsOverTime":[],"partCount":0,"partOfCount":0,"versionCount":0,"versionOfCount":0,"created":"2026-11-03T09:57:23.000Z","registered":"2026-11-03T09:57:24.000Z","published":"2026","updated":"2026-11-03T09:57:24.000Z"},"relationships":{"client":{"data":{"id":"arxiv.content","type":"clients"}},"provider":{"data":{"id":"arxiv","type":"providers"}},"media":{"data":{"id":"10.48550/arxiv.2611.02643","type":"media"}},"references":{"data":[]},"citations":{"data":[]},"parts":{"data":[]},"partOf":{"data":[]},"versions":{"data":[]},"versionOf":{"data":[]}}}}