{"total":30,"rows":[{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267,"area":"rag"},{"id":"2405.20485","title":"Phantom: General Backdoor Attacks on Retrieval Augmented Language Generation","created":"2024-05-30","cited_by_count":49,"area":"rag"},{"id":"2504.03957","title":"Practical Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-04-04","cited_by_count":36,"area":"rag"},{"id":"2502.01386","title":"Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models","created":"2025-02-03","cited_by_count":33,"area":"rag"},{"id":"2504.07717","title":"PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimization","created":"2025-04-10","cited_by_count":32,"area":"rag"},{"id":"2501.02968","title":"FlippedRAG: Black-Box Opinion Manipulation Adversarial Attacks to Retrieval-Augmented Generation Models","created":"2025-01-06","cited_by_count":25,"area":"rag"},{"id":"2501.14050","title":"GraphRAG under Fire","created":"2025-01-23","cited_by_count":24,"area":"rag"},{"id":"2412.20953","title":"GASLITEing the Retrieval: Exploring Vulnerabilities in Dense Embedding-based Search","created":"2024-12-30","cited_by_count":20,"area":"rag"},{"id":"2505.18543","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-05-24","cited_by_count":18,"area":"rag"},{"id":"2407.13757","title":"Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-07-18","cited_by_count":11,"area":"rag"},{"id":"2510.13842","title":"ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checking","created":"2025-10-11","cited_by_count":10,"area":"rag"},{"id":"2502.03233","title":"Exploring the Security Threats of Knowledge Base Poisoning in Retrieval-Augmented Code Generation","created":"2025-02-05","cited_by_count":9,"area":"rag"},{"id":"2510.11195","title":"RAG-Pull: Turning Retrieval into a Code-Injection Channel via Invisible Unicode Perturbations","created":"2025-10-13","cited_by_count":4,"area":"rag"},{"id":"2504.21680","title":"Hoist with His Own Petard: Inducing Guardrails to Facilitate Denial-of-Service Attacks on Retrieval-Augmented Generation of LLMs","created":"2025-04-30","cited_by_count":3,"area":"rag"},{"id":"2506.03535","title":"Across Programming Language Silos: A Study on Cross-Lingual Retrieval-augmented Code Generation","created":"2025-06-04","cited_by_count":3,"area":"rag"},{"id":"2506.04390","title":"Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAG","created":"2025-06-04","cited_by_count":3,"area":"rag"},{"id":"2508.18652","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","created":"2025-08-26","cited_by_count":3,"area":"rag"},{"id":"2512.01335","title":"EmoRAG: Evaluating RAG Robustness to Symbolic Perturbations","created":"2025-12-01","cited_by_count":3,"area":"rag"},{"id":"2603.25164","title":"PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2026-03-26","cited_by_count":1,"area":"rag"},{"id":"2606.01212","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","created":"2026-05-31","cited_by_count":1,"area":"rag"},{"id":"2606.19692","title":"When Global Gating Is Enough: Admission-Time Hubness Control in Anisotropic Vector Retrieval Systems","created":"2026-06-18","cited_by_count":1,"area":"rag"},{"id":"2605.00460","title":"CleanBase: Detecting Malicious Documents in RAG Knowledge Databases","created":"2026-05-01","cited_by_count":0,"area":"rag"},{"id":"2606.24402","title":"Poisoned Playbooks: Demystifying Knowledge Poisoning Effects on AI Security Agents","created":"2026-06-23","cited_by_count":0,"area":"rag"},{"id":"2607.03456","title":"SentAttack: A Sentence-Level Black-Box Adversarial Attack Method for Dense Retrieval Models","created":"2026-07-03","cited_by_count":0,"area":"rag"},{"id":"2607.22584","title":"Source-Aware Reranking for Retrieval-Augmented Generation: A Reliability Prior Approach","created":"2026-06-08","cited_by_count":0,"area":"rag"},{"id":"2607.23838","title":"TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation","created":"2026-07-26","cited_by_count":0,"area":"rag"},{"id":"2608.21095","title":"Trustworthy RAG: An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Generative AI Systems","created":"2026-08-21","cited_by_count":0,"area":"rag"},{"id":"2608.28389","title":"CamoDocs: A Poisoning Attack Against Retrieval-Augmented Language Models Using Camouflaged Documents","created":"2026-08-28","cited_by_count":0,"area":"rag"},{"id":"2609.09243","title":"In RAG We Trust? Measuring Robustness of Retrieval-Augmented Generation Under Document Poisoning","created":"2026-09-08","cited_by_count":0,"area":"rag"},{"id":"2609.11082","title":"ToxicRAG: Compromising Retrieval-Augmented Generation Systems via Single-Shot Knowledge Poisoning Attacks","created":"2026-09-10","cited_by_count":0,"area":"rag"}],"next_cursor":null}