{"total":48,"rows":[{"id":"2208.03299","title":"Atlas: Few-shot Learning with Retrieval Augmented Language Models","created":"2022-08-05","cited_by_count":952,"area":"rag"},{"id":"2402.19473","title":"Retrieval-Augmented Generation for AI-Generated Content: A Survey","created":"2024-02-29","cited_by_count":354,"area":"rag"},{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267,"area":"rag"},{"id":"2402.16893","title":"The Good and The Bad: Exploring Privacy Issues in Retrieval-Augmented Generation (RAG)","created":"2024-02-23","cited_by_count":159,"area":"rag"},{"id":"2303.01229","title":"Almanac: Retrieval-Augmented Language Models for Clinical Medicine","created":"2023-03-01","cited_by_count":123,"area":"rag"},{"id":"2402.17840","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","created":"2024-02-27","cited_by_count":76,"area":"rag"},{"id":"2403.03187","title":"Reliable, Adaptable, and Attributable Language Models with Retrieval","created":"2024-03-05","cited_by_count":73,"area":"rag"},{"id":"2406.14773","title":"Mitigating the Privacy Issues in Retrieval-Augmented Generation (RAG) via Pure Synthetic Data","created":"2024-06-20","cited_by_count":52,"area":"rag"},{"id":"2405.20485","title":"Phantom: General Backdoor Attacks on Retrieval Augmented Language Generation","created":"2024-05-30","cited_by_count":49,"area":"rag"},{"id":"2207.13162","title":"Retrieval-Augmented Transformer for Image Captioning","created":"2022-07-26","cited_by_count":38,"area":"rag"},{"id":"2411.14110","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","created":"2024-11-21","cited_by_count":37,"area":"rag"},{"id":"2410.20142","title":"Mask-based Membership Inference Attacks for Retrieval-Augmented Generation","created":"2024-10-26","cited_by_count":29,"area":"rag"},{"id":"2502.00306","title":"Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation","created":"2025-02-01","cited_by_count":26,"area":"rag"},{"id":"2406.19234","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","created":"2024-06-27","cited_by_count":25,"area":"rag"},{"id":"2403.18920","title":"CPR: Retrieval Augmented Generation for Copyright Protection","created":"2024-03-27","cited_by_count":24,"area":"rag"},{"id":"2410.15267","title":"When Machine Unlearning Meets Retrieval-Augmented Generation (RAG): Keep Secret or Forget Knowledge?","created":"2024-10-20","cited_by_count":24,"area":"rag"},{"id":"2310.09949","title":"Chameleon: a Heterogeneous and Disaggregated Accelerator System for Retrieval-Augmented Language Models","created":"2023-10-15","cited_by_count":23,"area":"rag"},{"id":"2411.01705","title":"Data Extraction Attacks in Retrieval-Augmented Generation via Backdoors","created":"2024-11-03","cited_by_count":23,"area":"rag"},{"id":"2408.04870","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","created":"2024-08-09","cited_by_count":22,"area":"rag"},{"id":"2410.14479","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","created":"2024-10-18","cited_by_count":22,"area":"rag"},{"id":"2412.19291","title":"RAG with Differential Privacy","created":"2024-12-26","cited_by_count":18,"area":"rag"},{"id":"2504.09593","title":"ControlNET: A Firewall for RAG-based LLM System","created":"2025-04-13","cited_by_count":12,"area":"rag"},{"id":"2503.15548","title":"Privacy-Aware RAG: Secure and Isolated Knowledge Retrieval","created":"2025-03-17","cited_by_count":10,"area":"rag"},{"id":"2504.19101","title":"Privacy-Preserving Federated Embedding Learning for Localized Retrieval-Augmented Generation","created":"2025-04-27","cited_by_count":8,"area":"rag"},{"id":"2507.05093","title":"The Hidden Threat in Plain Text: Attacking RAG Data Loaders","created":"2025-07-07","cited_by_count":8,"area":"rag"},{"id":"2508.03098","title":"Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generation","created":"2025-08-05","cited_by_count":8,"area":"rag"},{"id":"2410.20833","title":"LLMs are Biased Evaluators But Not Biased for Retrieval Augmented Generation","created":"2024-10-28","cited_by_count":5,"area":"rag"},{"id":"2502.13361","title":"RGAR: Recurrence Generation-augmented Retrieval for Factual-aware Medical Question Answering","created":"2025-02-19","cited_by_count":5,"area":"rag"},{"id":"2505.13957","title":"Beyond Text: Unveiling Privacy Vulnerabilities in Multi-modal Retrieval-Augmented Generation","created":"2025-05-20","cited_by_count":5,"area":"rag"},{"id":"2508.17222","title":"Exposing Privacy Risks in Graph Retrieval-Augmented Generation","created":"2025-08-24","cited_by_count":5,"area":"rag"},{"id":"2601.10923","title":"Hidden-in-Plain-Text: A Benchmark for Social-Web Indirect Prompt Injection in RAG","created":"2026-01-16","cited_by_count":5,"area":"rag"},{"id":"2406.08116","title":"Supportiveness-based Knowledge Rewriting for Retrieval-augmented Language Modeling","created":"2024-06-12","cited_by_count":4,"area":"rag"},{"id":"2602.01757","title":"Zero2Text: Zero-Training Cross-Domain Inversion Attacks on Textual Embeddings","created":"2026-02-02","cited_by_count":4,"area":"rag"},{"id":"2510.02964","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","created":"2025-10-03","cited_by_count":2,"area":"rag"},{"id":"2602.09319","title":"Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generation","created":"2026-02-10","cited_by_count":2,"area":"rag"},{"id":"2602.14374","title":"Differentially Private Retrieval-Augmented Generation","created":"2026-02-16","cited_by_count":2,"area":"rag"},{"id":"2512.03100","title":"Ensemble Privacy Defense for Knowledge-Intensive LLMs against Membership Inference Attacks","created":"2025-12-01","cited_by_count":1,"area":"rag"},{"id":"2605.28645","title":"GraphSteal: Structural Knowledge Stealing from Graph RAG via Traversal Reconstruction","created":"2026-05-27","cited_by_count":1,"area":"rag"},{"id":"2603.17292","title":"SEAL-Tag: Self-Tag Evidence Aggregation with Probabilistic Circuits for PII-Safe Retrieval-Augmented Generation","created":"2026-03-18","cited_by_count":0,"area":"rag"},{"id":"2603.25186","title":"Knowledge-Guided Retrieval-Augmented Generation for Zero-Shot Psychiatric Data: Privacy Preserving Synthetic Data Generation","created":"2026-03-26","cited_by_count":0,"area":"rag"},{"id":"2604.20932","title":"Adaptive Defense Orchestration for RAG: A Sentinel-Strategist Architecture against Multi-Vector Attacks","created":"2026-04-22","cited_by_count":0,"area":"rag"},{"id":"2605.02255","title":"On the Privacy of LLMs: An Ablation Study","created":"2026-05-04","cited_by_count":0,"area":"rag"},{"id":"2605.13764","title":"VectorSmuggle: Steganographic Exfiltration in Embedding Stores and a Cryptographic Provenance Defense","created":"2026-05-13","cited_by_count":0,"area":"rag"},{"id":"2605.17034","title":"Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation","created":"2026-05-16","cited_by_count":0,"area":"rag"},{"id":"2605.18762","title":"ALDEN: Boosting Private Data Extraction from Retrieval-Augmented Generation Systems via Active Learning and Distribution Estimation","created":"2026-04-10","cited_by_count":0,"area":"rag"},{"id":"2607.03456","title":"SentAttack: A Sentence-Level Black-Box Adversarial Attack Method for Dense Retrieval Models","created":"2026-07-03","cited_by_count":0,"area":"rag"},{"id":"2608.05163","title":"Where Privacy Risk Lives in English-Source Multilingual RAG: A Stage-Decomposed Audit Across Five Query Languages","created":"2026-05-26","cited_by_count":0,"area":"rag"},{"id":"2609.37469","title":"Relevance Is Not Sufficient Evidence: Detecting Evidence Gaps Before Generation in RAG","created":"2026-09-27","cited_by_count":0,"area":"rag"}],"next_cursor":null}