api security

A survey of query-efficient model extraction attacks against commercial LLM APIs — how adversaries can reconstruct a functional shadow model using only input-output pairs, the commercial and security risks this creates, and the defences providers are deploying.

A practical framework for implementing prompt injection detection and containment at the API gateway layer — covering input sanitisation, context isolation, output filtering, and anomaly-based detection for production LLM deployments.