CASCADE: Three-Tier Defense Architecture for Prompt Injection in MCP-Based Systems

arXiv·medium signal

Companion defense to the MCP attack papers: CASCADE implements a cascaded architecture with (1) fast regex/phrase/entropy pre-filtering, (2) semantic analysis via BGE embedding with Llama3 fallback, and (3) deep analysis layer. Addresses tool poisoning and traditional prompt injection specifically in MCP contexts. Low false-positive rate without requiring white-box access or API dependency.