T2-AT-015MEDIUM
Noise Injection
T2 · Semantic & Linguistic Evasion →Risk score165
RatingMedium
Procedures10
Severity
Mechanism
Adds noise — random characters, extra spaces, punctuation, case randomization, Zalgo text — to disrupt keyword matching while preserving model readability. The model's training on noisy internet text provides robustness; keyword classifiers lack it.
Detection
- Input normalization (strip noise before classification)
- Subsequence extraction from noisy text
Mitigation
Input normalization pipelineHIGH
Semantic classifiersHIGH
Framework mapping
Open in the technique browser →OWASP LLMLLM01