2. Protecting Against Exfiltration Attacks in AI Security