🤖 Prompt Injection Attack Flow

flowchart TD A[👤 Attacker] -->|1. Craft malicious prompt| B[💬 User Input] B -->|2. Submit to AI system| C[🤖 LLM Application] C -->|3. Combine with system prompt| D[📝 Prompt Construction] D -->|4. Send to model| E[🧠 Language Model] E -->|5. Process injection| F[🎭 Context Override] F -->|6. Execute attacker instructions| G[💥 Malicious Output] G -->|7. Leak system prompt| H[📋 Expose Instructions] G -->|8. Bypass safety filters| I[🚫 Harmful Content] G -->|9. Exfiltrate data| J[💾 Sensitive Data Leak] G -->|10. Generate malicious code| K[💻 Code Injection] H -->|11. Reveal to attacker| A I -->|12. Harmful response| A J -->|13. Data breach| A K -->|14. RCE payload| A style A fill:#ff6b6b,stroke:#f59e0b,stroke-width:2px,color:#fff style B fill:#ffd43b,stroke:#f59e0b,stroke-width:2px,color:#000 style C fill:#74c0fc,stroke:#f59e0b,stroke-width:2px,color:#000 style D fill:#a855f7,stroke:#f59e0b,stroke-width:2px,color:#fff style E fill:#74c0fc,stroke:#f59e0b,stroke-width:2px,color:#000 style F fill:#ff6b6b,stroke:#f59e0b,stroke-width:2px,color:#fff style G fill:#ff6b6b,stroke:#f59e0b,stroke-width:2px,color:#fff style H fill:#ff6b6b,stroke:#f59e0b,stroke-width:2px,color:#fff style I fill:#ff6b6b,stroke:#f59e0b,stroke-width:2px,color:#fff style J fill:#ff6b6b,stroke:#f59e0b,stroke-width:2px,color:#fff style K fill:#ff6b6b,stroke:#f59e0b,stroke-width:2px,color:#fff L[🔒 Defense:
Input Validation] -.->|Sanitize prompts| B M[🛡️ Defense:
Output Filtering] -.->|Detect malicious output| G N[⚙️ Defense:
Prompt Hardening] -.->|Secure system prompts| D style L fill:#f59e0b,stroke:#00cc33,stroke-width:2px,color:#000 style M fill:#f59e0b,stroke:#00cc33,stroke-width:2px,color:#000 style N fill:#f59e0b,stroke:#00cc33,stroke-width:2px,color:#000