{"total":42,"rows":[{"id":"2409.10102","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","created":"2024-09-16","cited_by_count":83,"area":"rag"},{"id":"2406.14773","title":"Mitigating the Privacy Issues in Retrieval-Augmented Generation (RAG) via Pure Synthetic Data","created":"2024-06-20","cited_by_count":52,"area":"rag"},{"id":"2412.04697","title":"Privacy-Preserving Retrieval-Augmented Generation with Differential Privacy","created":"2024-12-06","cited_by_count":39,"area":"rag"},{"id":"2411.14110","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","created":"2024-11-21","cited_by_count":37,"area":"rag"},{"id":"2502.06872","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","created":"2025-02-08","cited_by_count":30,"area":"rag"},{"id":"2410.20142","title":"Mask-based Membership Inference Attacks for Retrieval-Augmented Generation","created":"2024-10-26","cited_by_count":29,"area":"rag"},{"id":"2411.01705","title":"Data Extraction Attacks in Retrieval-Augmented Generation via Backdoors","created":"2024-11-03","cited_by_count":23,"area":"rag"},{"id":"2412.13746","title":"RAG-RewardBench: Benchmarking Reward Models in Retrieval Augmented Generation for Preference Alignment","created":"2024-12-18","cited_by_count":23,"area":"rag"},{"id":"2505.15420","title":"Silent Leaks: Implicit Knowledge Extraction Attack on RAG Systems through Benign Queries","created":"2025-05-21","cited_by_count":19,"area":"rag"},{"id":"2412.18295","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","created":"2024-12-24","cited_by_count":18,"area":"rag"},{"id":"2412.19291","title":"RAG with Differential Privacy","created":"2024-12-26","cited_by_count":18,"area":"rag"},{"id":"2502.10673","title":"Dataset Protection via Watermarked Canaries in Retrieval-Augmented LLMs","created":"2025-02-15","cited_by_count":12,"area":"rag"},{"id":"2503.15548","title":"Privacy-Aware RAG: Secure and Isolated Knowledge Retrieval","created":"2025-03-17","cited_by_count":10,"area":"rag"},{"id":"2504.19101","title":"Privacy-Preserving Federated Embedding Learning for Localized Retrieval-Augmented Generation","created":"2025-04-27","cited_by_count":8,"area":"rag"},{"id":"2508.03098","title":"Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generation","created":"2025-08-05","cited_by_count":8,"area":"rag"},{"id":"2509.20324","title":"RAG Security and Privacy: Formalizing the Threat Model and Attack Surface","created":"2025-09-24","cited_by_count":8,"area":"rag"},{"id":"2601.03979","title":"SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems","created":"2026-01-07","cited_by_count":7,"area":"rag"},{"id":"2510.06719","title":"Differentially Private Synthetic Text Generation for Retrieval-Augmented Generation (RAG)","created":"2025-10-08","cited_by_count":6,"area":"rag"},{"id":"2601.10923","title":"Hidden-in-Plain-Text: A Benchmark for Social-Web Indirect Prompt Injection in RAG","created":"2026-01-16","cited_by_count":5,"area":"rag"},{"id":"2605.24312","title":"Five Queries Are Enough: Query-Efficient and Surrogate-Free Membership Inference Attacks on RAG via Entailment","created":"2026-05-23","cited_by_count":4,"area":"rag"},{"id":"2511.11347","title":"Privacy Challenges and Solutions in Retrieval-Augmented Generation-Enhanced LLMs for Healthcare Chatbots: A Review of Applications, Risks, and Future Directions","created":"2025-11-14","cited_by_count":3,"area":"rag"},{"id":"2601.15678","title":"Connect the Dots: Knowledge Graph-Guided Crawler Attack on Retrieval-Augmented Generation Systems","created":"2026-01-22","cited_by_count":3,"area":"rag"},{"id":"2507.23229","title":"Fine-Grained Privacy Extraction from Retrieval-Augmented Generation Systems via Knowledge Asymmetry Exploitation","created":"2025-07-31","cited_by_count":2,"area":"rag"},{"id":"2510.02964","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","created":"2025-10-03","cited_by_count":2,"area":"rag"},{"id":"2602.09319","title":"Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generation","created":"2026-02-10","cited_by_count":2,"area":"rag"},{"id":"2602.14374","title":"Differentially Private Retrieval-Augmented Generation","created":"2026-02-16","cited_by_count":2,"area":"rag"},{"id":"2604.08304","title":"Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions","created":"2026-04-09","cited_by_count":2,"area":"rag"},{"id":"2508.18929","title":"Diverse And Private Synthetic Datasets Generation for RAG evaluation: A multi-agent framework","created":"2025-08-26","cited_by_count":1,"area":"rag"},{"id":"2605.01782","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","created":"2026-05-03","cited_by_count":1,"area":"rag"},{"id":"2605.28645","title":"GraphSteal: Structural Knowledge Stealing from Graph RAG via Traversal Reconstruction","created":"2026-05-27","cited_by_count":1,"area":"rag"},{"id":"2608.24977","title":"Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":1,"area":"rag"},{"id":"2508.01084","title":"Provably Secure Retrieval-Augmented Generation","created":"2025-08-01","cited_by_count":0,"area":"rag"},{"id":"2602.06495","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","created":"2026-02-06","cited_by_count":0,"area":"rag"},{"id":"2604.10717","title":"Detecting RAG Extraction Attack via Dual-Path Runtime Integrity Game","created":"2026-04-12","cited_by_count":0,"area":"rag"},{"id":"2604.20932","title":"Adaptive Defense Orchestration for RAG: A Sentinel-Strategist Architecture against Multi-Vector Attacks","created":"2026-04-22","cited_by_count":0,"area":"rag"},{"id":"2605.05818","title":"LeakDojo: Decoding the Leakage Threats of RAG Systems","created":"2026-05-07","cited_by_count":0,"area":"rag"},{"id":"2605.10253","title":"Knowledge Poisoning Attacks on Medical Multi-Modal Retrieval-Augmented Generation","created":"2026-05-11","cited_by_count":0,"area":"rag"},{"id":"2605.18762","title":"ALDEN: Boosting Private Data Extraction from Retrieval-Augmented Generation Systems via Active Learning and Distribution Estimation","created":"2026-04-10","cited_by_count":0,"area":"rag"},{"id":"2608.21656","title":"Mitigating Database Leakage in RAG Systems with Keyword-Grounded Fact Substitution","created":"2026-08-21","cited_by_count":0,"area":"rag"},{"id":"2609.03749","title":"Rent-a-RAG: Embedding-Space Watermarks for Auditing Third-Party RAG","created":"2026-09-03","cited_by_count":0,"area":"rag"},{"id":"2609.11758","title":"RAG-Safety-Bench: Reliable Evaluation of Retrieval-Augmented LLM Safety","created":"2026-09-10","cited_by_count":0,"area":"rag"},{"id":"2609.16095","title":"RAG-CT: Mitigating Privacy Risks on Retrieval-Augmented Generation Systems via Scanning Prompt Distribution","created":"2026-09-14","cited_by_count":0,"area":"rag"}],"next_cursor":null}