DeepSeek Robustness Against Semantic-Character Dual-Space Mutated Prompt Injection
arXiv·medium signal
Ren et al. evaluate DeepSeek's robustness against a novel dual-space prompt injection attack that combines semantic rewriting and character-level obfuscation simultaneously. Existing studies focus on single-dimensional attacks; this paper shows that multi-dimensional mutation strategies are significantly more effective at bypassing safety filters. Critical for anyone deploying DeepSeek models in production.