{"total":86,"rows":[{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267,"area":"rag"},{"id":"2405.15556","title":"Certifiably Robust RAG against Retrieval Corruption","created":"2024-05-24","cited_by_count":151,"area":"rag"},{"id":"2406.05870","title":"Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents","created":"2024-06-09","cited_by_count":102,"area":"rag"},{"id":"2406.13629","title":"InstructRAG: Instructing Retrieval-Augmented Generation via Self-Synthesized Rationales","created":"2024-06-19","cited_by_count":101,"area":"rag"},{"id":"2406.00083","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","created":"2024-06-03","cited_by_count":86,"area":"rag"},{"id":"2409.10102","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","created":"2024-09-16","cited_by_count":83,"area":"rag"},{"id":"2404.13948","title":"Typos that Broke the RAG's Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations","created":"2024-04-22","cited_by_count":65,"area":"rag"},{"id":"2406.19417","title":"\"Glue pizza and eat rocks\" -- Exploiting Vulnerabilities in Retrieval-Augmented Generative Models","created":"2024-06-26","cited_by_count":60,"area":"rag"},{"id":"2405.20485","title":"Phantom: General Backdoor Attacks on Retrieval Augmented Language Generation","created":"2024-05-30","cited_by_count":49,"area":"rag"},{"id":"2405.20446","title":"Is My Data in Your Retrieval Database? Membership Inference Attacks Against Retrieval Augmented Generation","created":"2024-05-30","cited_by_count":44,"area":"rag"},{"id":"2501.00879","title":"TrustRAG: Enhancing Robustness and Trustworthiness in Retrieval-Augmented Generation","created":"2025-01-01","cited_by_count":40,"area":"rag"},{"id":"2504.03957","title":"Practical Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-04-04","cited_by_count":36,"area":"rag"},{"id":"2411.18948","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","created":"2024-11-28","cited_by_count":33,"area":"rag"},{"id":"2502.01386","title":"Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models","created":"2025-02-03","cited_by_count":33,"area":"rag"},{"id":"2501.18636","title":"SafeRAG: Benchmarking Security in Retrieval-Augmented Generation of Large Language Model","created":"2025-01-28","cited_by_count":32,"area":"rag"},{"id":"2504.07717","title":"PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimization","created":"2025-04-10","cited_by_count":32,"area":"rag"},{"id":"2502.06872","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","created":"2025-02-08","cited_by_count":30,"area":"rag"},{"id":"2501.14050","title":"GraphRAG under Fire","created":"2025-01-23","cited_by_count":24,"area":"rag"},{"id":"2504.18041","title":"RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Models","created":"2025-04-25","cited_by_count":24,"area":"rag"},{"id":"2406.05087","title":"Corpus Poisoning via Approximate Greedy Gradient Descent","created":"2024-06-07","cited_by_count":21,"area":"rag"},{"id":"2412.20953","title":"GASLITEing the Retrieval: Exploring Vulnerabilities in Dense Embedding-based Search","created":"2024-12-30","cited_by_count":20,"area":"rag"},{"id":"2410.22954","title":"Retrieval-Augmented Generation with Estimation of Source Reliability","created":"2024-10-30","cited_by_count":19,"area":"rag"},{"id":"2505.18543","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-05-24","cited_by_count":18,"area":"rag"},{"id":"2408.05025","title":"Rag and Roll: An End-to-End Evaluation of Indirect Prompt Manipulations in LLM-based Application Frameworks","created":"2024-08-09","cited_by_count":17,"area":"rag"},{"id":"2505.19864","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","created":"2025-05-26","cited_by_count":17,"area":"rag"},{"id":"2503.05037","title":"Collapse of Dense Retrievers: Short, Early, and Literal Biases Outranking Factual Evidence","created":"2025-03-06","cited_by_count":16,"area":"rag"},{"id":"2409.17275","title":"On the Vulnerability of Applying Retrieval-Augmented Generation within Knowledge-Intensive Application Domains","created":"2024-09-12","cited_by_count":14,"area":"rag"},{"id":"2412.16708","title":"Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks","created":"2024-12-21","cited_by_count":14,"area":"rag"},{"id":"2510.09710","title":"SeCon-RAG: A Two-Stage Semantic Filtering and Conflict-Free Framework for Trustworthy RAG","created":"2025-10-10","cited_by_count":13,"area":"rag"},{"id":"2509.13772","title":"Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation","created":"2025-09-17","cited_by_count":12,"area":"rag"},{"id":"2407.13757","title":"Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-07-18","cited_by_count":11,"area":"rag"},{"id":"2508.02835","title":"Defending Against Knowledge Poisoning Attacks During Retrieval-Augmented Generation","created":"2025-08-04","cited_by_count":11,"area":"rag"},{"id":"2503.21315","title":"Tricking Retrievers with Influential Tokens: An Efficient Black-Box Corpus Poisoning Attack","created":"2025-03-27","cited_by_count":10,"area":"rag"},{"id":"2505.07546","title":"GRADA: Graph-based Reranking against Adversarial Documents Attack","created":"2025-05-12","cited_by_count":10,"area":"rag"},{"id":"2506.11415","title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs","created":"2025-06-13","cited_by_count":8,"area":"rag"},{"id":"2508.03793","title":"AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption","created":"2025-08-05","cited_by_count":7,"area":"rag"},{"id":"2510.21144","title":"NeuroGenPoisoning: Neuron-Guided Attacks on Retrieval-Augmented Generation of LLM via Genetic Optimization of External Knowledge","created":"2025-10-24","cited_by_count":7,"area":"rag"},{"id":"2505.06579","title":"POISONCRAFT: Practical Poisoning of Retrieval-Augmented Generation for Large Language Models","created":"2025-05-10","cited_by_count":6,"area":"rag"},{"id":"2507.18202","title":"Safeguarding RAG Pipelines with GMTP: A Gradient-based Masked Token Probability Method for Poisoned Document Detection","created":"2025-07-24","cited_by_count":5,"area":"rag"},{"id":"2509.15159","title":"AIP: Subverting Retrieval-Augmented Generation via Adversarial Instructional Prompt","created":"2025-09-18","cited_by_count":5,"area":"rag"},{"id":"2510.11195","title":"RAG-Pull: Turning Retrieval into a Code-Injection Channel via Invisible Unicode Perturbations","created":"2025-10-13","cited_by_count":4,"area":"rag"},{"id":"2504.21680","title":"Hoist with His Own Petard: Inducing Guardrails to Facilitate Denial-of-Service Attacks on Retrieval-Augmented Generation of LLMs","created":"2025-04-30","cited_by_count":3,"area":"rag"},{"id":"2506.04390","title":"Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAG","created":"2025-06-04","cited_by_count":3,"area":"rag"},{"id":"2508.18652","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","created":"2025-08-26","cited_by_count":3,"area":"rag"},{"id":"2512.01335","title":"EmoRAG: Evaluating RAG Robustness to Symbolic Perturbations","created":"2025-12-01","cited_by_count":3,"area":"rag"},{"id":"2512.24268","title":"RAGPart & RAGMask: Retrieval-Stage Defenses Against Corpus Poisoning in Retrieval-Augmented Generation","created":"2025-12-30","cited_by_count":3,"area":"rag"},{"id":"2601.15678","title":"Connect the Dots: Knowledge Graph-Guided Crawler Attack on Retrieval-Augmented Generation Systems","created":"2026-01-22","cited_by_count":3,"area":"rag"},{"id":"2602.04711","title":"Addressing Corpus Knowledge Poisoning Attacks on RAG Using Sparse Attention","created":"2026-02-04","cited_by_count":3,"area":"rag"},{"id":"2603.22934","title":"ProGRank: Probe-Gradient Reranking to Defend Dense-Retriever RAG from Corpus Poisoning","created":"2026-03-24","cited_by_count":2,"area":"rag"},{"id":"2605.27157","title":"Detecting Is Not Resolving: The Monitoring Control Gap in Retrieval Augmented LLMs","created":"2026-05-26","cited_by_count":2,"area":"rag"},{"id":"2607.26843","title":"When Knowledge Changes: Metamorphic Testing of RAG Systems with Mutations","created":"2026-07-29","cited_by_count":2,"area":"rag"},{"id":"2510.00586","title":"Eyes-on-Me: Scalable RAG Poisoning through Transferable Attention-Steering Attractors","created":"2025-10-01","cited_by_count":1,"area":"rag"},{"id":"2602.08668","title":"Retrieval Pivot Attacks in Hybrid RAG: Measuring and Mitigating Amplified Leakage from Vector Seeds to Graph Expansion","created":"2026-02-09","cited_by_count":1,"area":"rag"},{"id":"2602.09616","title":"With Argus Eyes: Assessing Retrieval Gaps via Uncertainty Scoring to Detect and Remedy Retrieval Blind Spots","created":"2026-02-10","cited_by_count":1,"area":"rag"},{"id":"2603.11501","title":"KEPo: Knowledge Evolution Poison on Graph-based Retrieval-Augmented Generation","created":"2026-03-12","cited_by_count":1,"area":"rag"},{"id":"2603.25164","title":"PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2026-03-26","cited_by_count":1,"area":"rag"},{"id":"2605.01782","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","created":"2026-05-03","cited_by_count":1,"area":"rag"},{"id":"2605.28074","title":"SilentRetrieval: Hijacking Retrieval-Augmented Generation via Semantically-Preserving Adversarial Data Poisoning","created":"2026-05-27","cited_by_count":1,"area":"rag"},{"id":"2606.18310","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","created":"2026-06-16","cited_by_count":1,"area":"rag"},{"id":"2606.19692","title":"When Global Gating Is Enough: Admission-Time Hubness Control in Anisotropic Vector Retrieval Systems","created":"2026-06-18","cited_by_count":1,"area":"rag"},{"id":"2608.04366","title":"Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework","created":"2026-08-05","cited_by_count":1,"area":"rag"},{"id":"2508.01084","title":"Provably Secure Retrieval-Augmented Generation","created":"2025-08-01","cited_by_count":0,"area":"rag"},{"id":"2601.05260","title":"Quantifying Document Impact in RAG-LLMs","created":"2025-10-27","cited_by_count":0,"area":"rag"},{"id":"2603.17176","title":"Towards Unsupervised Adversarial Document Detection in Retrieval Augmented Generation Systems","created":"2026-03-17","cited_by_count":0,"area":"rag"},{"id":"2604.18663","title":"Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation","created":"2026-04-20","cited_by_count":0,"area":"rag"},{"id":"2605.20123","title":"BiRD: A Bidirectional Ranking Defense Mechanism for Retrieval Augmented Generation","created":"2026-05-19","cited_by_count":0,"area":"rag"},{"id":"2606.11265","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","created":"2026-06-09","cited_by_count":0,"area":"rag"},{"id":"2606.25721","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2607.20437","title":"TopoGuard: Graph Theory Based Defenses Against Split-Knowledge Attacks on RAG","created":"2026-05-11","cited_by_count":0,"area":"rag"},{"id":"2607.23838","title":"TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation","created":"2026-07-26","cited_by_count":0,"area":"rag"},{"id":"2608.02678","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","created":"2026-08-02","cited_by_count":0,"area":"rag"},{"id":"2608.04756","title":"PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates","created":"2026-08-05","cited_by_count":0,"area":"rag"},{"id":"2608.13010","title":"RAGSieve: Self-Referenced Local Contrast for Knowledge-Poison Detection in Retrieval-Augmented Generation","created":"2026-08-13","cited_by_count":0,"area":"rag"},{"id":"2608.16044","title":"Coverage Is Not Containment: A Fundamental Limit of Admission-Time Defenses Against Coordinated Poisoning of Vector Retrieval","created":"2026-08-17","cited_by_count":0,"area":"rag"},{"id":"2608.21095","title":"Trustworthy RAG: An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Generative AI Systems","created":"2026-08-21","cited_by_count":0,"area":"rag"},{"id":"2608.23965","title":"RAGSentinel: Certifiable Geometric Consensus for Robust Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":0,"area":"rag"},{"id":"2609.00543","title":"Feedback-Assisted Trust Propagation over Document Relation Graphs for Retrieval-Augmented Generation","created":"2026-09-01","cited_by_count":0,"area":"rag"},{"id":"2609.01325","title":"VerTox: Verifiable Reward-Guided Corpus Poisoning Against Neural Ranking Models","created":"2026-09-01","cited_by_count":0,"area":"rag"},{"id":"2609.15660","title":"CiteShade: Citation Laundering in Multi-Source Retrieval-Augmented Generation and Its Counterfactual Defense","created":"2026-09-14","cited_by_count":0,"area":"rag"},{"id":"2609.21573","title":"Micro-Collaborative Poisoning: A Distributed Attack on RAG Systems","created":"2026-09-18","cited_by_count":0,"area":"rag"},{"id":"2609.25469","title":"RAG-NAROK: Retrieval-Aware Knowledge Corpus Poisoning in RAG with Source-specific Refutation","created":"2026-09-21","cited_by_count":0,"area":"rag"},{"id":"2609.27090","title":"Divide and Doubt: Diverse Distributed Poisoning for Retrieval-Augmented Generation","created":"2026-09-22","cited_by_count":0,"area":"rag"},{"id":"2609.35794","title":"Sieve and Sage: Efficient Distraction Filtering for Reliable RALM Abstention","created":"2026-09-17","cited_by_count":0,"area":"rag"},{"id":"2609.37468","title":"Backdoor in the Loop: Compromising Agentic Search via Malicious Retrievers","created":"2026-09-26","cited_by_count":0,"area":"rag"},{"id":"2610.04691","title":"RAGStress: A controlled benchmark for evaluating retrieval-augmented generation under knowledge-base degradation","created":"2026-10-03","cited_by_count":0,"area":"rag"},{"id":"2610.19549","title":"GraphRAG-LTM: A Layered Threat Modeling Framework for Attacks on Graph Retrieval-Augmented Generation","created":"2026-10-14","cited_by_count":0,"area":"rag"}],"next_cursor":null}