{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T21:17:12Z","timestamp":1783199832412,"version":"3.54.6"},"reference-count":31,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,5,22]],"date-time":"2026-05-22T00:00:00Z","timestamp":1779408000000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100032846","name":"Digital Europe Programme","doi-asserted-by":"publisher","award":["101145872"],"award-info":[{"award-number":["101145872"]}],"id":[{"id":"10.13039\/100032846","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100023620","name":"Nitro College","doi-asserted-by":"publisher","award":["101128024"],"award-info":[{"award-number":["101128024"]}],"id":[{"id":"10.13039\/100023620","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100018996","name":"Hellenic Academic Libraries Link","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100018996","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100007689","name":"African Institute for Agrarian Studies","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100007689","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000780","name":"European Commission","doi-asserted-by":"publisher","award":["101131292"],"award-info":[{"award-number":["101131292"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Information Sciences"],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1016\/j.ins.2026.123670","type":"journal-article","created":{"date-parts":[[2026,5,22]],"date-time":"2026-05-22T16:10:30Z","timestamp":1779466230000},"page":"123670","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Adaptive DeSeTra: Adaptive deformable-span self-attention transformer for LLM security"],"prefix":"10.1016","volume":"754","author":[{"given":"Konstantinos","family":"Giapantzis","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Panagiotis","family":"Bountakas","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Apostolis","family":"Zarras","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aristeidis","family":"Farao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4934-7625","authenticated-orcid":false,"given":"Vaios","family":"Bolgouras","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6718-122X","authenticated-orcid":false,"given":"Christos","family":"Xenakis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.ins.2026.123670_bib0005","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3744746","article-title":"A comprehensive overview of large language models","volume":"16","author":"Naveed","year":"2025","journal-title":"ACM Trans. Intell. Syst. Technol."},{"key":"10.1016\/j.ins.2026.123670_bib0010","doi-asserted-by":"crossref","first-page":"50","DOI":"10.1007\/s10664-024-10602-0","article-title":"Towards an understanding of large language models in software engineering tasks","volume":"30","author":"Zheng","year":"2025","journal-title":"Empir. Softw. Eng."},{"key":"10.1016\/j.ins.2026.123670_bib0015","doi-asserted-by":"crossref","first-page":"18912","DOI":"10.1109\/ACCESS.2025.3532853","article-title":"Agentic AI: autonomous intelligence for complex goals\u2013a comprehensive survey","volume":"13","author":"Acharya","year":"2025","journal-title":"IEEE Access"},{"key":"10.1016\/j.ins.2026.123670_bib0020","doi-asserted-by":"crossref","first-page":"11","DOI":"10.1007\/s10462-025-11422-4","article-title":"Agentic AI: a comprehensive survey of architectures, applications, and future directions","volume":"59","author":"Abou Ali","year":"2025","journal-title":"Artif. Intell. Rev."},{"key":"10.1016\/j.ins.2026.123670_bib0025","series-title":"2025 International Wireless Communications and Mobile Computing (IWCMC)","first-page":"1198","article-title":"LLM-based continuous intrusion detection framework for next-gen networks","author":"Adjewa","year":"2025"},{"key":"10.1016\/j.ins.2026.123670_bib0030","series-title":"International Conference on Provable Security","first-page":"449","article-title":"Source code guardrail: AI driven solution to distinguish critical vs. generic code for enterprise LLM security","author":"Sharma","year":"2025"},{"key":"10.1016\/j.ins.2026.123670_bib0035","article-title":"The emerged security and privacy of LLM agent: a survey with case studies","author":"He","year":"2024","journal-title":"ACM Comput. Surv."},{"key":"10.1016\/j.ins.2026.123670_bib0040","series-title":"Proceedings of the ACM on Web Conference 2025","first-page":"863","article-title":"Dual intention escape: penetrating and toxic jailbreak attack against large language models","author":"Xue","year":"2025"},{"key":"10.1016\/j.ins.2026.123670_bib0045","doi-asserted-by":"crossref","DOI":"10.1109\/ACCESS.2025.3589112","article-title":"The dangerous effects of a frustratingly easy LLMs jailbreak attack","volume":"13","author":"Bombieri","year":"2025","journal-title":"IEEE Access"},{"key":"10.1016\/j.ins.2026.123670_bib0050","series-title":"Proceedings of the 2025 ACM Workshop on Artificial Intelligence and Security (AISec \u201925)","first-page":"13","article-title":"Enhancing prompt injection attacks to LLMs via poisoning alignment","author":"Shao","year":"2025"},{"key":"10.1016\/j.ins.2026.123670_bib0055","series-title":"International Conference on Information Systems Security","first-page":"27","article-title":"The hidden risks of LLM-generated web application code: a security-centric evaluation of code generation capabilities in large language models","author":"Dora","year":"2025"},{"key":"10.1016\/j.ins.2026.123670_bib0060","article-title":"Chain-of-detection enables robust and efficient jailbreak defense","author":"Wu","year":"2025","journal-title":"Neural Netw."},{"key":"10.1016\/j.ins.2026.123670_bib0065","series-title":"2024 2nd International Conference on Artificial Intelligence, Blockchain, and Internet of Things (AIBThings)","first-page":"1","article-title":"Applying pre-trained multilingual BERT in embeddings for improved malicious prompt injection attacks detection","author":"Rahman","year":"2024"},{"key":"10.1016\/j.ins.2026.123670_bib0070","doi-asserted-by":"crossref","first-page":"123708","DOI":"10.1109\/ACCESS.2025.3579996","article-title":"JailbreakTracer: explainable detection of Jailbreaking prompts in LLMs using synthetic data generation","volume":"13","author":"Sayeedi","year":"2025","journal-title":"IEEE Access"},{"key":"10.1016\/j.ins.2026.123670_bib0075","article-title":"From prompt injections to protocol exploits: threats in LLM-powered AI agents workflows","author":"Ferrag","year":"2025","journal-title":"ICT Express (Elsevier)"},{"key":"10.1016\/j.ins.2026.123670_bib0080","author":"Galinkin"},{"key":"10.1016\/j.ins.2026.123670_bib0085","series-title":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","first-page":"1671","article-title":"\u201cdo anything now\u201d: characterizing and evaluating in-the-wild jailbreak prompts on large language models","author":"Shen","year":"2024"},{"key":"10.1016\/j.ins.2026.123670_bib0090","series-title":"Garak: A Framework for Large Language Model Red Teaming","author":"Derczynski","year":"2024"},{"key":"10.1016\/j.ins.2026.123670_bib0095","unstructured":"Huggingface, Huggingface, jackhhao\/jailbreak-classification, https:\/\/huggingface.co\/datasets\/jackhhao\/jailbreak-classification (Accessed: January 2026)."},{"issue":"1","key":"10.1016\/j.ins.2026.123670_bib0100","first-page":"1","article-title":"Jailguard: a universal detection framework for prompt-based attacks on LLM systems","volume":"35","author":"Zhang","year":"2025","journal-title":"ACM Trans. Softw. Eng. Methodol."},{"key":"10.1016\/j.ins.2026.123670_bib0105","unstructured":"Huggingface, Huggingface, deepset\/prompt-injections, https:\/\/huggingface.co\/datasets\/deepset\/prompt-injections (Accessed: January 2026)."},{"key":"10.1016\/j.ins.2026.123670_bib0110","author":"Ayub"},{"key":"10.1016\/j.ins.2026.123670_bib0115","doi-asserted-by":"crossref","first-page":"24","DOI":"10.54392\/irjmt2523","article-title":"Comprehensive analysis of machine learning and deep learning models on prompt injection classification using natural language processing techniques","volume":"7","author":"Jain","year":"2025","journal-title":"Int. Res. J. Multidiscip. Technovation"},{"key":"10.1016\/j.ins.2026.123670_bib0120","author":"Kokkula"},{"key":"10.1016\/j.ins.2026.123670_bib0125","series-title":"2025 IEEE 49th Annual Computers, Software, and Applications Conference (COMPSAC)","first-page":"1033","article-title":"Fine-tuned large language models (LLMs): improved prompt injection attacks detection","author":"Rahman","year":"2025"},{"key":"10.1016\/j.ins.2026.123670_bib0130","series-title":"2024 5th International Conference on Electronics and Sustainable Communication Systems (ICESC)","first-page":"1531","article-title":"Exploring LLM and neural networks towards malicious prompt detection","author":"Deshpande","year":"2024"},{"key":"10.1016\/j.ins.2026.123670_bib0135","series-title":"Proceedings of the 57th Annual Meeting of the Association for Computational Linguistics","first-page":"331","article-title":"Adaptive attention span in transformers","author":"Sukhbaatar","year":"2019"},{"issue":"7","key":"10.1016\/j.ins.2026.123670_bib0140","article-title":"XLCNN: a transformer model for malware detection","volume":"21","author":"Giapantzis","year":"2023","journal-title":"Int. J. Comput. Sci. Inf. Secur. (IJCSIS)"},{"key":"10.1016\/j.ins.2026.123670_bib0145","doi-asserted-by":"crossref","first-page":"209","DOI":"10.1080\/01621459.1927.10502953","article-title":"Probable inference, the law of succession, and statistical inference","volume":"22","author":"Wilson","year":"1927","journal-title":"J. Am. Stat. Assoc."},{"key":"10.1016\/j.ins.2026.123670_bib0150","doi-asserted-by":"crossref","first-page":"55005","DOI":"10.52202\/079017-1745","article-title":"Jailbreakbench: an open robustness benchmark for jailbreaking large language models","volume":"37","author":"Chao","year":"2024","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.ins.2026.123670_bib0155","author":"Xie"}],"container-title":["Information Sciences"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0020025526006018?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0020025526006018?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T20:58:45Z","timestamp":1783198725000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0020025526006018"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10]]},"references-count":31,"alternative-id":["S0020025526006018"],"URL":"https:\/\/doi.org\/10.1016\/j.ins.2026.123670","relation":{},"ISSN":["0020-0255"],"issn-type":[{"value":"0020-0255","type":"print"}],"subject":[],"published":{"date-parts":[[2026,10]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Adaptive DeSeTra: Adaptive deformable-span self-attention transformer for LLM security","name":"articletitle","label":"Article Title"},{"value":"Information Sciences","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.ins.2026.123670","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Author(s). Published by Elsevier Inc.","name":"copyright","label":"Copyright"}],"article-number":"123670"}}