{"total":97,"rows":[{"id":"2405.06211","title":"A Survey on RAG Meeting LLMs: Towards Retrieval-Augmented Large Language Models","created":"2024-05-10","cited_by_count":452,"area":"rag"},{"id":"2501.00309","title":"Retrieval-Augmented Generation with Graphs (GraphRAG)","created":"2024-12-31","cited_by_count":172,"area":"rag"},{"id":"2406.13629","title":"InstructRAG: Instructing Retrieval-Augmented Generation via Self-Synthesized Rationales","created":"2024-06-19","cited_by_count":101,"area":"rag"},{"id":"2406.00083","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","created":"2024-06-03","cited_by_count":86,"area":"rag"},{"id":"2409.10102","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","created":"2024-09-16","cited_by_count":83,"area":"rag"},{"id":"2402.17840","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","created":"2024-02-27","cited_by_count":76,"area":"rag"},{"id":"2406.14773","title":"Mitigating the Privacy Issues in Retrieval-Augmented Generation (RAG) via Pure Synthetic Data","created":"2024-06-20","cited_by_count":52,"area":"rag"},{"id":"2405.20446","title":"Is My Data in Your Retrieval Database? Membership Inference Attacks Against Retrieval Augmented Generation","created":"2024-05-30","cited_by_count":44,"area":"rag"},{"id":"2412.04697","title":"Privacy-Preserving Retrieval-Augmented Generation with Differential Privacy","created":"2024-12-06","cited_by_count":39,"area":"rag"},{"id":"2411.14110","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","created":"2024-11-21","cited_by_count":37,"area":"rag"},{"id":"2502.06872","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","created":"2025-02-08","cited_by_count":30,"area":"rag"},{"id":"2410.20142","title":"Mask-based Membership Inference Attacks for Retrieval-Augmented Generation","created":"2024-10-26","cited_by_count":29,"area":"rag"},{"id":"2506.00054","title":"Retrieval-Augmented Generation: A Comprehensive Survey of Architectures, Enhancements, and Robustness Frontiers","created":"2025-05-28","cited_by_count":27,"area":"rag"},{"id":"2502.00306","title":"Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation","created":"2025-02-01","cited_by_count":26,"area":"rag"},{"id":"2406.19234","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","created":"2024-06-27","cited_by_count":25,"area":"rag"},{"id":"2501.02968","title":"FlippedRAG: Black-Box Opinion Manipulation Adversarial Attacks to Retrieval-Augmented Generation Models","created":"2025-01-06","cited_by_count":25,"area":"rag"},{"id":"2504.18041","title":"RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Models","created":"2025-04-25","cited_by_count":24,"area":"rag"},{"id":"2411.01705","title":"Data Extraction Attacks in Retrieval-Augmented Generation via Backdoors","created":"2024-11-03","cited_by_count":23,"area":"rag"},{"id":"2412.13746","title":"RAG-RewardBench: Benchmarking Reward Models in Retrieval Augmented Generation for Preference Alignment","created":"2024-12-18","cited_by_count":23,"area":"rag"},{"id":"2408.04870","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","created":"2024-08-09","cited_by_count":22,"area":"rag"},{"id":"2411.14572","title":"Towards Knowledge Checking in Retrieval-augmented Generation: A Representation Perspective","created":"2024-11-21","cited_by_count":20,"area":"rag"},{"id":"2504.14891","title":"Retrieval Augmented Generation Evaluation in the Era of Large Language Models: A Comprehensive Survey","created":"2025-04-21","cited_by_count":20,"area":"rag"},{"id":"2505.15420","title":"Silent Leaks: Implicit Knowledge Extraction Attack on RAG Systems through Benign Queries","created":"2025-05-21","cited_by_count":19,"area":"rag"},{"id":"2412.12775","title":"RemoteRAG: A Privacy-Preserving LLM Cloud RAG Service","created":"2024-12-17","cited_by_count":17,"area":"rag"},{"id":"2410.04749","title":"LLaVA Needs More Knowledge: Retrieval Augmented Natural Language Generation with Knowledge Graph for Explaining Thoracic Pathologies","created":"2024-10-07","cited_by_count":11,"area":"rag"},{"id":"2503.15548","title":"Privacy-Aware RAG: Secure and Isolated Knowledge Retrieval","created":"2025-03-17","cited_by_count":10,"area":"rag"},{"id":"2503.21315","title":"Tricking Retrievers with Influential Tokens: An Efficient Black-Box Corpus Poisoning Attack","created":"2025-03-27","cited_by_count":10,"area":"rag"},{"id":"2505.22061","title":"Safeguarding Privacy of Retrieval Data against Membership Inference Attacks: Is This Query Too Close to Home?","created":"2025-05-28","cited_by_count":9,"area":"rag"},{"id":"2504.19101","title":"Privacy-Preserving Federated Embedding Learning for Localized Retrieval-Augmented Generation","created":"2025-04-27","cited_by_count":8,"area":"rag"},{"id":"2508.03098","title":"Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generation","created":"2025-08-05","cited_by_count":8,"area":"rag"},{"id":"2509.20324","title":"RAG Security and Privacy: Formalizing the Threat Model and Attack Surface","created":"2025-09-24","cited_by_count":8,"area":"rag"},{"id":"2504.05276","title":"Enhancing LLM-Based Short Answer Grading with Retrieval-Augmented Generation","created":"2025-04-07","cited_by_count":7,"area":"rag"},{"id":"2601.03979","title":"SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems","created":"2026-01-07","cited_by_count":7,"area":"rag"},{"id":"2502.14100","title":"Towards Context-Robust LLMs: A Gated Representation Fine-tuning Approach","created":"2025-02-19","cited_by_count":6,"area":"rag"},{"id":"2510.06719","title":"Differentially Private Synthetic Text Generation for Retrieval-Augmented Generation (RAG)","created":"2025-10-08","cited_by_count":6,"area":"rag"},{"id":"2510.08109","title":"VersionRAG: Version-Aware Retrieval-Augmented Generation for Evolving Documents","created":"2025-10-09","cited_by_count":6,"area":"rag"},{"id":"2505.13957","title":"Beyond Text: Unveiling Privacy Vulnerabilities in Multi-modal Retrieval-Augmented Generation","created":"2025-05-20","cited_by_count":5,"area":"rag"},{"id":"2508.03110","title":"Token-Level Precise Attack on RAG: Searching for the Best Alternatives to Mislead Generation","created":"2025-08-05","cited_by_count":5,"area":"rag"},{"id":"2508.17222","title":"Exposing Privacy Risks in Graph Retrieval-Augmented Generation","created":"2025-08-24","cited_by_count":5,"area":"rag"},{"id":"2509.15159","title":"AIP: Subverting Retrieval-Augmented Generation via Adversarial Instructional Prompt","created":"2025-09-18","cited_by_count":5,"area":"rag"},{"id":"2511.05901","title":"Retrieval-Augmented Generation in Medicine: A Scoping Review of Technical Implementations, Clinical Applications, and Ethical Considerations","created":"2025-11-08","cited_by_count":5,"area":"rag"},{"id":"2601.10923","title":"Hidden-in-Plain-Text: A Benchmark for Social-Web Indirect Prompt Injection in RAG","created":"2026-01-16","cited_by_count":5,"area":"rag"},{"id":"2602.06616","title":"Confundo: Learning to Generate Robust Poison for Practical RAG Systems","created":"2026-02-06","cited_by_count":5,"area":"rag"},{"id":"2408.05933","title":"Optimizing RAG Techniques for Automotive Industry PDF Chatbots: A Case Study with Locally Deployed Ollama Models","created":"2024-08-12","cited_by_count":4,"area":"rag"},{"id":"2508.04276","title":"A Few Words Can Distort Graphs: Knowledge Poisoning Attacks on Graph-based Retrieval-Augmented Generation of Large Language Models","created":"2025-08-06","cited_by_count":4,"area":"rag"},{"id":"2605.24312","title":"Five Queries Are Enough: Query-Efficient and Surrogate-Free Membership Inference Attacks on RAG via Entailment","created":"2026-05-23","cited_by_count":4,"area":"rag"},{"id":"2505.08728","title":"Securing RAG: A Risk Assessment and Mitigation Framework","created":"2025-05-13","cited_by_count":3,"area":"rag"},{"id":"2508.09105","title":"SMA: Who Said That? Auditing Membership Leakage in Semi-Black-box RAG Controlling","created":"2025-08-12","cited_by_count":3,"area":"rag"},{"id":"2511.07637","title":"Private-RAG: Answering Multiple Queries with LLMs while Keeping Your Data Private","created":"2025-11-10","cited_by_count":3,"area":"rag"},{"id":"2511.11347","title":"Privacy Challenges and Solutions in Retrieval-Augmented Generation-Enhanced LLMs for Healthcare Chatbots: A Review of Applications, Risks, and Future Directions","created":"2025-11-14","cited_by_count":3,"area":"rag"},{"id":"2601.15678","title":"Connect the Dots: Knowledge Graph-Guided Crawler Attack on Retrieval-Augmented Generation Systems","created":"2026-01-22","cited_by_count":3,"area":"rag"},{"id":"2601.17644","title":"Do Multimodal RAG Systems Leak Data? A Comprehensive Evaluation of Membership Inference and Image Caption Retrieval Attacks","created":"2026-01-25","cited_by_count":3,"area":"rag"},{"id":"2603.19281","title":"URAG: A Benchmark for Uncertainty Quantification in Retrieval-Augmented Large Language Models","created":"2026-03-02","cited_by_count":3,"area":"rag"},{"id":"2505.00443","title":"Distributed Retrieval-Augmented Generation","created":"2025-05-01","cited_by_count":2,"area":"rag"},{"id":"2507.23229","title":"Fine-Grained Privacy Extraction from Retrieval-Augmented Generation Systems via Knowledge Asymmetry Exploitation","created":"2025-07-31","cited_by_count":2,"area":"rag"},{"id":"2510.02964","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","created":"2025-10-03","cited_by_count":2,"area":"rag"},{"id":"2510.19615","title":"FidelityGPT: Correcting Decompilation Distortions with Retrieval Augmented Generation","created":"2025-10-22","cited_by_count":2,"area":"rag"},{"id":"2512.00804","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","created":"2025-11-30","cited_by_count":2,"area":"rag"},{"id":"2602.05235","title":"FedMosaic: Federated Retrieval-Augmented Generation via Parametric Adapters","created":"2026-02-05","cited_by_count":2,"area":"rag"},{"id":"2602.09319","title":"Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generation","created":"2026-02-10","cited_by_count":2,"area":"rag"},{"id":"2604.08304","title":"Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions","created":"2026-04-09","cited_by_count":2,"area":"rag"},{"id":"2508.18929","title":"Diverse And Private Synthetic Datasets Generation for RAG evaluation: A multi-agent framework","created":"2025-08-26","cited_by_count":1,"area":"rag"},{"id":"2511.07577","title":"A Decentralized Retrieval Augmented Generation System with Source Reliabilities Secured on Blockchain","created":"2025-11-10","cited_by_count":1,"area":"rag"},{"id":"2605.01782","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","created":"2026-05-03","cited_by_count":1,"area":"rag"},{"id":"2608.24977","title":"Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":1,"area":"rag"},{"id":"2404.08940","title":"Introducing Super RAGs in Mistral 8x7B-v1","created":"2024-04-13","cited_by_count":0,"area":"rag"},{"id":"2504.12323","title":"The Other Side of the Coin: Exploring Fairness in Retrieval-Augmented Generation","created":"2025-04-11","cited_by_count":0,"area":"rag"},{"id":"2508.01084","title":"Provably Secure Retrieval-Augmented Generation","created":"2025-08-01","cited_by_count":0,"area":"rag"},{"id":"2510.02243","title":"AccurateRAG: A Framework for Building Accurate Retrieval-Augmented Question-Answering Applications","created":"2025-10-02","cited_by_count":0,"area":"rag"},{"id":"2602.06495","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","created":"2026-02-06","cited_by_count":0,"area":"rag"},{"id":"2603.17176","title":"Towards Unsupervised Adversarial Document Detection in Retrieval Augmented Generation Systems","created":"2026-03-17","cited_by_count":0,"area":"rag"},{"id":"2603.17292","title":"SEAL-Tag: Self-Tag Evidence Aggregation with Probabilistic Circuits for PII-Safe Retrieval-Augmented Generation","created":"2026-03-18","cited_by_count":0,"area":"rag"},{"id":"2603.26074","title":"Not All Entities are Created Equal: A Dynamic Anonymization Framework for Privacy-Preserving RAG","created":"2026-03-27","cited_by_count":0,"area":"rag"},{"id":"2604.01395","title":"AI Engineering Blueprint for On-Premises Retrieval-Augmented Generation Systems","created":"2026-04-01","cited_by_count":0,"area":"rag"},{"id":"2604.09541","title":"Trans-RAG: Query-Centric Vector Transformation for Secure Cross-Organizational Retrieval","created":"2026-04-10","cited_by_count":0,"area":"rag"},{"id":"2604.10717","title":"Detecting RAG Extraction Attack via Dual-Path Runtime Integrity Game","created":"2026-04-12","cited_by_count":0,"area":"rag"},{"id":"2604.15958","title":"A Case Study on the Impact of Anonymization Along the RAG Pipeline","created":"2026-04-17","cited_by_count":0,"area":"rag"},{"id":"2604.26525","title":"PRAG: End-to-End Privacy-Preserving Retrieval-Augmented Generation","created":"2026-04-29","cited_by_count":0,"area":"rag"},{"id":"2605.00796","title":"When RAG Chatbots Expose Their Backend: An Anonymized Case Study of Privacy and Security Risks in Patient-Facing Medical AI","created":"2026-05-01","cited_by_count":0,"area":"rag"},{"id":"2605.05459","title":"Privacy Without Losing Place: A Paradigm for Private Retrieval in Spatial RAGs","created":"2026-05-06","cited_by_count":0,"area":"rag"},{"id":"2605.05818","title":"LeakDojo: Decoding the Leakage Threats of RAG Systems","created":"2026-05-07","cited_by_count":0,"area":"rag"},{"id":"2605.10253","title":"Knowledge Poisoning Attacks on Medical Multi-Modal Retrieval-Augmented Generation","created":"2026-05-11","cited_by_count":0,"area":"rag"},{"id":"2605.18762","title":"ALDEN: Boosting Private Data Extraction from Retrieval-Augmented Generation Systems via Active Learning and Distribution Estimation","created":"2026-04-10","cited_by_count":0,"area":"rag"},{"id":"2606.24623","title":"Privacy-Preserving RAG via Multi-Agent Semantic Rewriting: Achieving Confidentiality Without Compromising Contextual Fidelity","created":"2026-06-23","cited_by_count":0,"area":"rag"},{"id":"2606.25533","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2606.29652","title":"As We May Search","created":"2026-06-28","cited_by_count":0,"area":"rag"},{"id":"2607.14811","title":"Is External Database Protection Static in Retrieval-Augmented Generation? Rethinking Privacy Preservation under Dynamic Queries","created":"2026-07-16","cited_by_count":0,"area":"rag"},{"id":"2608.05163","title":"Where Privacy Risk Lives in English-Source Multilingual RAG: A Stage-Decomposed Audit Across Five Query Languages","created":"2026-05-26","cited_by_count":0,"area":"rag"},{"id":"2608.09001","title":"Mind the Hook: Source-Level Auditing of Privacy Defenses in Retrieval-Augmented Generation","created":"2026-08-10","cited_by_count":0,"area":"rag"},{"id":"2608.12675","title":"Privacy-Preserving RAG by Concealing Sensitive Information from External LLMs","created":"2026-08-13","cited_by_count":0,"area":"rag"},{"id":"2608.20351","title":"Exploratory As-Analyzed No-Detection of Culturally-Marked Predicate-Triggered PII Amplification in a Synthetic-English RAG Probe: A Predicate-Resource-Confounded Audit","created":"2026-06-16","cited_by_count":0,"area":"rag"},{"id":"2608.21656","title":"Mitigating Database Leakage in RAG Systems with Keyword-Grounded Fact Substitution","created":"2026-08-21","cited_by_count":0,"area":"rag"},{"id":"2609.06391","title":"Building Trustworthy Graph-Agentic RAG for Social Good: Architectures, Failure Propagation, and Assurance by Construction","created":"2026-09-06","cited_by_count":0,"area":"rag"},{"id":"2609.11758","title":"RAG-Safety-Bench: Reliable Evaluation of Retrieval-Augmented LLM Safety","created":"2026-09-10","cited_by_count":0,"area":"rag"},{"id":"2609.14649","title":"CIG-MIA: Context-Induced Information Gain Membership Inference Attacks against Retrieval-Augmented Generation","created":"2026-09-13","cited_by_count":0,"area":"rag"},{"id":"2609.16095","title":"RAG-CT: Mitigating Privacy Risks on Retrieval-Augmented Generation Systems via Scanning Prompt Distribution","created":"2026-09-14","cited_by_count":0,"area":"rag"},{"id":"2609.27406","title":"Only Pay What You Must Spend: On-Demand Privacy Budget Payment for Differentially Private RAG","created":"2026-09-23","cited_by_count":0,"area":"rag"}],"next_cursor":null}