Li, Deyin, Xiang Ling, Changjiang Li, Xiang Chen, and Chunming Wu. “AIA: Autoregression-Based Injection Attacks Against Text2SQL Models”. Proceedings of the AAAI Conference on Artificial Intelligence 39, no. 17 (April 11, 2025): 18262-18270. Accessed May 1, 2026. https://ojs.aaai.org/index.php/AAAI/article/view/34009.