{"total":51,"rows":[{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267,"area":"rag"},{"id":"2406.05870","title":"Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents","created":"2024-06-09","cited_by_count":102,"area":"rag"},{"id":"2402.17840","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","created":"2024-02-27","cited_by_count":76,"area":"rag"},{"id":"2406.00799","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","created":"2024-06-02","cited_by_count":72,"area":"rag"},{"id":"2411.14110","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","created":"2024-11-21","cited_by_count":37,"area":"rag"},{"id":"2504.03957","title":"Practical Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-04-04","cited_by_count":36,"area":"rag"},{"id":"2502.01386","title":"Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models","created":"2025-02-03","cited_by_count":33,"area":"rag"},{"id":"2501.18636","title":"SafeRAG: Benchmarking Security in Retrieval-Augmented Generation of Large Language Model","created":"2025-01-28","cited_by_count":32,"area":"rag"},{"id":"2504.07717","title":"PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimization","created":"2025-04-10","cited_by_count":32,"area":"rag"},{"id":"2410.22832","title":"HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models","created":"2024-10-30","cited_by_count":27,"area":"rag"},{"id":"2502.00306","title":"Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation","created":"2025-02-01","cited_by_count":26,"area":"rag"},{"id":"2504.09593","title":"ControlNET: A Firewall for RAG-based LLM System","created":"2025-04-13","cited_by_count":12,"area":"rag"},{"id":"2310.09536","title":"CarExpert: Leveraging Large Language Models for In-Car Conversational Question Answering","created":"2023-10-14","cited_by_count":10,"area":"rag"},{"id":"2505.07546","title":"GRADA: Graph-based Reranking against Adversarial Documents Attack","created":"2025-05-12","cited_by_count":10,"area":"rag"},{"id":"2505.18583","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","created":"2025-05-24","cited_by_count":10,"area":"rag"},{"id":"2510.13842","title":"ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checking","created":"2025-10-11","cited_by_count":10,"area":"rag"},{"id":"2403.12077","title":"Evaluating Robustness of Generative Search Engine on Adversarial Factual Questions","created":"2024-02-25","cited_by_count":9,"area":"rag"},{"id":"2502.03233","title":"Exploring the Security Threats of Knowledge Base Poisoning in Retrieval-Augmented Code Generation","created":"2025-02-05","cited_by_count":9,"area":"rag"},{"id":"2508.03793","title":"AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption","created":"2025-08-05","cited_by_count":7,"area":"rag"},{"id":"2510.21144","title":"NeuroGenPoisoning: Neuron-Guided Attacks on Retrieval-Augmented Generation of LLM via Genetic Optimization of External Knowledge","created":"2025-10-24","cited_by_count":7,"area":"rag"},{"id":"2507.15042","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","created":"2025-07-20","cited_by_count":5,"area":"rag"},{"id":"2509.15159","title":"AIP: Subverting Retrieval-Augmented Generation via Adversarial Instructional Prompt","created":"2025-09-18","cited_by_count":5,"area":"rag"},{"id":"2511.15759","title":"Securing AI Agents Against Prompt Injection Attacks","created":"2025-11-19","cited_by_count":5,"area":"rag"},{"id":"2402.14480","title":"MeTMaP: Metamorphic Testing for Detecting False Vector Matching Problems in LLM Augmented Generation","created":"2024-02-22","cited_by_count":4,"area":"rag"},{"id":"2510.11195","title":"RAG-Pull: Turning Retrieval into a Code-Injection Channel via Invisible Unicode Perturbations","created":"2025-10-13","cited_by_count":4,"area":"rag"},{"id":"2512.08289","title":"MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks","created":"2025-12-09","cited_by_count":4,"area":"rag"},{"id":"2508.18652","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","created":"2025-08-26","cited_by_count":3,"area":"rag"},{"id":"2508.20083","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","created":"2025-08-27","cited_by_count":2,"area":"rag"},{"id":"2503.14103","title":"DangerMaps: Personalized Safety Advice for Travel in Urban Environments using a Retrieval-Augmented Language Model","created":"2025-03-18","cited_by_count":1,"area":"rag"},{"id":"2601.15528","title":"Securing LLM-as-a-Service for Small Businesses: An Industry Case Study of a Distributed Chatbot Deployment Platform","created":"2026-01-21","cited_by_count":1,"area":"rag"},{"id":"2603.25164","title":"PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2026-03-26","cited_by_count":1,"area":"rag"},{"id":"2605.01782","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","created":"2026-05-03","cited_by_count":1,"area":"rag"},{"id":"2605.07269","title":"MIPIAD: Multilingual Indirect Prompt Injection Attack Defense with Qwen -- TF-IDF Hybrid and Meta-Ensemble Learning","created":"2026-05-08","cited_by_count":1,"area":"rag"},{"id":"2606.09005","title":"Document-Authored Control-Signal Impersonation: A Low-Cost Indirect Prompt Attack on RAG Safety Boundaries","created":"2026-06-08","cited_by_count":1,"area":"rag"},{"id":"2608.24977","title":"Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":1,"area":"rag"},{"id":"2604.07403","title":"RefineRAG: Word-Level Poisoning Attacks via Retriever-Guided Text Refinement","created":"2026-04-08","cited_by_count":0,"area":"rag"},{"id":"2604.18663","title":"Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation","created":"2026-04-20","cited_by_count":0,"area":"rag"},{"id":"2604.28157","title":"FlashRT: Towards Computationally and Memory Efficient Red-Teaming for Prompt Injection and Knowledge Corruption","created":"2026-04-30","cited_by_count":0,"area":"rag"},{"id":"2605.00460","title":"CleanBase: Detecting Malicious Documents in RAG Knowledge Databases","created":"2026-05-01","cited_by_count":0,"area":"rag"},{"id":"2605.01078","title":"A Sentence Relation-Based Approach to Sanitizing Malicious Instructions","created":"2026-05-01","cited_by_count":0,"area":"rag"},{"id":"2605.05818","title":"LeakDojo: Decoding the Leakage Threats of RAG Systems","created":"2026-05-07","cited_by_count":0,"area":"rag"},{"id":"2605.11217","title":"Training-Free Refusal of MCP Exploits via Retrieval-Augmented Generation","created":"2026-05-11","cited_by_count":0,"area":"rag"},{"id":"2606.24402","title":"Poisoned Playbooks: Demystifying Knowledge Poisoning Effects on AI Security Agents","created":"2026-06-23","cited_by_count":0,"area":"rag"},{"id":"2607.00422","title":"KidnapRAG: A Black-Box Attack for Hijacking Reasoning in Agentic Retrieval-Augmented Generation Systems","created":"2026-07-01","cited_by_count":0,"area":"rag"},{"id":"2607.23838","title":"TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation","created":"2026-07-26","cited_by_count":0,"area":"rag"},{"id":"2608.20097","title":"TrustRAG: Blockchain-Enhanced RAG via Committee-Based Credibility Scoring","created":"2026-08-20","cited_by_count":0,"area":"rag"},{"id":"2608.21656","title":"Mitigating Database Leakage in RAG Systems with Keyword-Grounded Fact Substitution","created":"2026-08-21","cited_by_count":0,"area":"rag"},{"id":"2608.23965","title":"RAGSentinel: Certifiable Geometric Consensus for Robust Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":0,"area":"rag"},{"id":"2609.11082","title":"ToxicRAG: Compromising Retrieval-Augmented Generation Systems via Single-Shot Knowledge Poisoning Attacks","created":"2026-09-10","cited_by_count":0,"area":"rag"},{"id":"2609.25469","title":"RAG-NAROK: Retrieval-Aware Knowledge Corpus Poisoning in RAG with Source-specific Refutation","created":"2026-09-21","cited_by_count":0,"area":"rag"},{"id":"2610.19549","title":"GraphRAG-LTM: A Layered Threat Modeling Framework for Attacks on Graph Retrieval-Augmented Generation","created":"2026-10-14","cited_by_count":0,"area":"rag"}],"next_cursor":null}