{"total":65,"rows":[{"id":"2405.15556","title":"Certifiably Robust RAG against Retrieval Corruption","created":"2024-05-24","cited_by_count":151,"area":"rag"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2406.00083","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","created":"2024-06-03","cited_by_count":86,"area":"rag"},{"id":"2409.10102","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","created":"2024-09-16","cited_by_count":83,"area":"rag"},{"id":"2406.19417","title":"\"Glue pizza and eat rocks\" -- Exploiting Vulnerabilities in Retrieval-Augmented Generative Models","created":"2024-06-26","cited_by_count":60,"area":"rag"},{"id":"2504.03957","title":"Practical Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-04-04","cited_by_count":36,"area":"rag"},{"id":"2411.18948","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","created":"2024-11-28","cited_by_count":33,"area":"rag"},{"id":"2502.01386","title":"Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models","created":"2025-02-03","cited_by_count":33,"area":"rag"},{"id":"2501.18365","title":"RbFT: Robust Fine-tuning for Retrieval-Augmented Generation against Retrieval Defects","created":"2025-01-30","cited_by_count":27,"area":"rag"},{"id":"2412.02592","title":"OCR Hinders RAG: Evaluating the Cascading Impact of OCR on Retrieval-Augmented Generation","created":"2024-12-03","cited_by_count":26,"area":"rag"},{"id":"2501.02968","title":"FlippedRAG: Black-Box Opinion Manipulation Adversarial Attacks to Retrieval-Augmented Generation Models","created":"2025-01-06","cited_by_count":25,"area":"rag"},{"id":"2502.17832","title":"MM-PoisonRAG: Disrupting Multimodal RAG with Local and Global Poisoning Attacks","created":"2025-02-25","cited_by_count":24,"area":"mllm"},{"id":"2504.18041","title":"RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Models","created":"2025-04-25","cited_by_count":24,"area":"rag"},{"id":"2505.18543","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-05-24","cited_by_count":18,"area":"rag"},{"id":"2509.23519","title":"ReliabilityRAG: Effective and Provably Robust Defense for RAG-based Web-Search","created":"2025-09-27","cited_by_count":18,"area":"rag"},{"id":"2505.19864","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","created":"2025-05-26","cited_by_count":17,"area":"rag"},{"id":"2410.02163","title":"Adversarial Decoding: Generating Readable Documents for Adversarial Objectives","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2502.20995","title":"The RAG Paradox: A Black-Box Attack Exploiting Unintentional Vulnerabilities in Retrieval-Augmented Generation Systems","created":"2025-02-28","cited_by_count":14,"area":"rag"},{"id":"2503.06254","title":"Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation","created":"2025-03-08","cited_by_count":12,"area":"lr"},{"id":"2407.13757","title":"Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-07-18","cited_by_count":11,"area":"rag"},{"id":"2504.08231","title":"Out of Style: RAG's Fragility to Linguistic Variation","created":"2025-04-11","cited_by_count":11,"area":"rag"},{"id":"2508.02835","title":"Defending Against Knowledge Poisoning Attacks During Retrieval-Augmented Generation","created":"2025-08-04","cited_by_count":11,"area":"rag"},{"id":"2503.05587","title":"Quantifying and Improving the Robustness of Retrieval-Augmented Language Models Against Spurious Features in Grounding Data","created":"2025-03-07","cited_by_count":10,"area":"rag"},{"id":"2503.21315","title":"Tricking Retrievers with Influential Tokens: An Efficient Black-Box Corpus Poisoning Attack","created":"2025-03-27","cited_by_count":10,"area":"rag"},{"id":"2505.18583","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","created":"2025-05-24","cited_by_count":10,"area":"rag"},{"id":"2412.17031","title":"A Reality Check on Context Utilisation for Retrieval-Augmented Generation","created":"2024-12-22","cited_by_count":9,"area":"rag"},{"id":"2510.15253","title":"Scaling Beyond Context: A Survey of Multimodal Retrieval-Augmented Generation for Document Understanding","created":"2025-10-17","cited_by_count":9,"area":"rag"},{"id":"2511.01268","title":"Rescuing the Unpoisoned: Efficient Defense against Knowledge Corruption Attacks on RAG Systems","created":"2025-11-03","cited_by_count":9,"area":"rag"},{"id":"2509.22486","title":"Your RAG is Unfair: Exposing Fairness Vulnerabilities in Retrieval-Augmented Generation via Backdoor Attacks","created":"2025-09-26","cited_by_count":8,"area":"rag"},{"id":"2601.03979","title":"SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems","created":"2026-01-07","cited_by_count":7,"area":"rag"},{"id":"2504.07901","title":"Redefining Machine Translation on Social Network Services with Large Language Models","created":"2025-04-10","cited_by_count":6,"area":null},{"id":"2505.16367","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","created":"2025-05-22","cited_by_count":6,"area":"lr"},{"id":"2509.03787","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","created":"2025-09-04","cited_by_count":6,"area":"rag"},{"id":"2511.17044","title":"Parametric Retrieval-Augmented Generation using Latent Routing of LoRA Adapters","created":"2025-11-21","cited_by_count":6,"area":"rag"},{"id":"2505.12574","title":"Uncovering Competing Poisoning Attacks in Retrieval-Augmented Generation","created":"2025-05-18","cited_by_count":5,"area":"rag"},{"id":"2508.03110","title":"Token-Level Precise Attack on RAG: Searching for the Best Alternatives to Mislead Generation","created":"2025-08-05","cited_by_count":5,"area":"rag"},{"id":"2509.15159","title":"AIP: Subverting Retrieval-Augmented Generation via Adversarial Instructional Prompt","created":"2025-09-18","cited_by_count":5,"area":"rag"},{"id":"2512.08289","title":"MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks","created":"2025-12-09","cited_by_count":4,"area":"rag"},{"id":"2508.18652","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","created":"2025-08-26","cited_by_count":3,"area":"rag"},{"id":"2601.15678","title":"Connect the Dots: Knowledge Graph-Guided Crawler Attack on Retrieval-Augmented Generation Systems","created":"2026-01-22","cited_by_count":3,"area":"rag"},{"id":"2508.20408","title":"Fact or Facsimile? Evaluating the Factual Robustness of Modern Retrievers","created":"2025-08-28","cited_by_count":2,"area":"rag"},{"id":"2601.00274","title":"Making Theft Useless: Adulteration-Based Protection of Proprietary Knowledge Graphs in GraphRAG Systems","created":"2026-01-01","cited_by_count":2,"area":"rag"},{"id":"2603.22934","title":"ProGRank: Probe-Gradient Reranking to Defend Dense-Retriever RAG from Corpus Poisoning","created":"2026-03-24","cited_by_count":2,"area":"rag"},{"id":"2604.08304","title":"Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions","created":"2026-04-09","cited_by_count":2,"area":"rag"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2602.00885","title":"Reliability-Aware Determinantal Point Processes for Robust Informative Data Selection in Large Language Models","created":"2026-01-31","cited_by_count":1,"area":"inference"},{"id":"2605.01782","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","created":"2026-05-03","cited_by_count":1,"area":"rag"},{"id":"2605.22041","title":"RADAR: Defending RAG Dynamically against Retrieval Corruption","created":"2026-05-21","cited_by_count":1,"area":"rag"},{"id":"2606.01212","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","created":"2026-05-31","cited_by_count":1,"area":"rag"},{"id":"2606.18310","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","created":"2026-06-16","cited_by_count":1,"area":"rag"},{"id":"2608.24977","title":"Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":1,"area":"rag"},{"id":"2412.06788","title":"Poison Attacks and Adversarial Prompts Against an Informed University Virtual Assistant","created":"2024-11-03","cited_by_count":0,"area":"safety"},{"id":"2508.02296","title":"Knowing When Not to Answer: Lightweight KB-Aligned OOD Detection for Safe RAG","created":"2025-08-04","cited_by_count":0,"area":"rag"},{"id":"2603.00172","title":"Hidden in the Metadata: Stealth Poisoning Attacks on Multimodal Retrieval-Augmented Generation","created":"2026-02-26","cited_by_count":0,"area":"mllm"},{"id":"2603.17176","title":"Towards Unsupervised Adversarial Document Detection in Retrieval Augmented Generation Systems","created":"2026-03-17","cited_by_count":0,"area":"rag"},{"id":"2605.27789","title":"A Fixed-Budget, Cluster-Aware Standard for LLM-as-a-Judge Evaluation: A Multi-Hop RAG Stress Test","created":"2026-05-27","cited_by_count":0,"area":"rag"},{"id":"2606.11265","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","created":"2026-06-09","cited_by_count":0,"area":"rag"},{"id":"2606.25721","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2607.08180","title":"Out of Sight: Compression-Aware Content Protection against Agentic Crawlers","created":"2026-07-09","cited_by_count":0,"area":"lr"},{"id":"2607.10402","title":"Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability","created":"2026-07-11","cited_by_count":0,"area":null},{"id":"2608.04286","title":"Eliciting Intrinsic Hallucinations in LLMs via Semantically Equivalent Adversarial Attacks","created":"2026-08-04","cited_by_count":0,"area":"rag"},{"id":"2608.04756","title":"PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates","created":"2026-08-05","cited_by_count":0,"area":"rag"},{"id":"2608.13010","title":"RAGSieve: Self-Referenced Local Contrast for Knowledge-Poison Detection in Retrieval-Augmented Generation","created":"2026-08-13","cited_by_count":0,"area":"rag"},{"id":"2609.21573","title":"Micro-Collaborative Poisoning: A Distributed Attack on RAG Systems","created":"2026-09-18","cited_by_count":0,"area":"rag"},{"id":"2609.29045","title":"The Tokens Remember: When Tokenization Bypasses Knowledge Editing and Unlearning","created":"2026-09-24","cited_by_count":0,"area":"safety"}],"next_cursor":null}