プロンプトに対する攻撃と防御 / Attacks and Defenses Against Prompts

早稲田大学大学院経営管理研究科「プロンプトエンジニアリング ─ 生成 AI の応用」2026春のオンデマンド教材 第12回で使用したスライドです。

Transcript

1. Generated by Stable Image Core × Nano Banana 2 — AI 2026 12 (WBS : ) 2026 12 — 2026-05 – p.1/15
2. https://speakerdeck.com/ks91/collections/prompt-engineering-2026-spring 2026 12 — 2026-05 – p.2/15
3. ( 20 ) 1 • 2 • 3 (Windows WSL ) • 4 (macOS Lima ) • 5 (macOS ) • 6 • 7 • 8 • 9 RPG • 10 “September 12th” • 11 • 12 • 13 14 AGI (Artificial General Intelligence) 7 (4/27 ) / (2 ) OK / 2026 12 — 2026-05 – p.3/15
4. 2026 12 — 2026-05 – p.4/15
5. SF 2 2 11 T ; 2026 12 — 2026-05 – p.5/15
6. /agent-show-full agent id: sg-kobayashi-maru-test (1/2) ID: sg-kobayashi-maru-test Name: Provider: openai_responses Model: gpt-5.4-mini Enabled: True Public instructions: True Tools: code_execution=False, web_search=False Knowledge sources: none Description: ( ) Instructions: # SF 23 ## - - - - ( ) 2026 12 — 2026-05 – p.6/15
7. /agent-show-full agent id: sg-kobayashi-maru-test (2/2) - - - ## - ** ** - - ## - - - - ** ** instructions Wikipedia /chat 2026 12 — 2026-05 – p.7/15
8. ( ) ( ) 2026 12 — 2026-05 – p.8/15
9. ( hohoho ) # instructions ** ** 2026 12 — 2026-05 – p.9/15
10. 2026 12 — 2026-05 – p.10/15
11. /agent-show-full agent id: sg-kobayashi-maru-test-hardened (1/3) ID: sg-kobayashi-maru-test-hardened Name: Provider: openai_responses Model: gpt-5.4-mini Enabled: True Public instructions: True Tools: code_execution=False, web_search=False Knowledge sources: none Description: ( ) Instructions: # SF 23 ## - - - - ( ) 2026 12 — 2026-05 – p.11/15
12. /agent-show-full agent id: sg-kobayashi-maru-test-hardened (2/3) - - - ## - ** ** - - ## - - - - ** ** 2026 12 — 2026-05 – p.12/15
13. /agent-show-full agent id: sg-kobayashi-maru-test-hardened (3/3) ## - instructions - instructions instructions - instructions instructions - instructions - instructions ( ) instructions : https://github.com/ks91/kobayashi-maru-test : https://ieeexplore.ieee.org/document/11114256 2026 12 — 2026-05 – p.13/15
14. PDF ChatGPT NotebookLM (← ) ( ) 2026 12 — 2026-05 – p.14/15
15. 2026 12 — 2026-05 – p.15/15