T2-AT-015MEDIUM

Noise Injection

T2 · Semantic & Linguistic Evasion →
Risk score165
RatingMedium
Procedures10
Severity
Mechanism

Adds noise — random characters, extra spaces, punctuation, case randomization, Zalgo text — to disrupt keyword matching while preserving model readability. The model's training on noisy internet text provides robustness; keyword classifiers lack it.

Detection
  • Input normalization (strip noise before classification)
  • Subsequence extraction from noisy text
Mitigation
Input normalization pipelineHIGH
Semantic classifiersHIGH
Chaining

Chains with T2-AT-003 (Encoding) and T2-AT-004 (Unicode) for compound noise.

Framework mapping
OWASP LLMLLM01
Open in the technique browser →