AdvGuard Detects Multi-Turn System Prompt Leakage Attacks

AdvGuard is a model-agnostic framework that uses semantic interaction graphs and GCNs to detect coordinated, multi-turn prompt leakage attacks. It distinguishes malicious extraction attempts from benign workflows by modeling cross-query relationships.