{"total":151,"rows":[{"id":"2407.12784","title":"AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases","created":"2024-07-17","cited_by_count":429,"area":"agents"},{"id":"2410.02644","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","created":"2024-10-03","cited_by_count":369,"area":"agents"},{"id":"2501.00309","title":"Retrieval-Augmented Generation with Graphs (GraphRAG)","created":"2024-12-31","cited_by_count":172,"area":"rag"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2406.13629","title":"InstructRAG: Instructing Retrieval-Augmented Generation via Self-Synthesized Rationales","created":"2024-06-19","cited_by_count":101,"area":"rag"},{"id":"2410.03727","title":"FaithEval: Can Your Language Model Stay Faithful to Context, Even If \"The Moon is Made of Marshmallows\"","created":"2024-09-30","cited_by_count":86,"area":"rag"},{"id":"2409.10102","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","created":"2024-09-16","cited_by_count":83,"area":"rag"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2410.07176","title":"Astute RAG: Overcoming Imperfect Retrieval Augmentation and Knowledge Conflicts for Large Language Models","created":"2024-10-09","cited_by_count":58,"area":"rag"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2407.13766","title":"Visual Haystacks: A Vision-Centric Needle-In-A-Haystack Benchmark","created":"2024-07-18","cited_by_count":55,"area":"mllm"},{"id":"2405.20485","title":"Phantom: General Backdoor Attacks on Retrieval Augmented Language Generation","created":"2024-05-30","cited_by_count":49,"area":"rag"},{"id":"2406.18382","title":"Adversarial Search Engine Optimization for Large Language Models","created":"2024-06-26","cited_by_count":40,"area":null},{"id":"2501.00879","title":"TrustRAG: Enhancing Robustness and Trustworthiness in Retrieval-Augmented Generation","created":"2025-01-01","cited_by_count":40,"area":"rag"},{"id":"2411.18948","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","created":"2024-11-28","cited_by_count":33,"area":"rag"},{"id":"2501.18636","title":"SafeRAG: Benchmarking Security in Retrieval-Augmented Generation of Large Language Model","created":"2025-01-28","cited_by_count":32,"area":"rag"},{"id":"2410.20142","title":"Mask-based Membership Inference Attacks for Retrieval-Augmented Generation","created":"2024-10-26","cited_by_count":29,"area":"rag"},{"id":"2502.16101","title":"Worse than Zero-shot? A Fact-Checking Dataset for Evaluating the Robustness of RAG Against Misleading Retrievals","created":"2025-02-22","cited_by_count":28,"area":"rag"},{"id":"2504.21668","title":"Traceback of Poisoning Attacks to Retrieval-Augmented Generation","created":"2025-04-30","cited_by_count":28,"area":"rag"},{"id":"2501.18365","title":"RbFT: Robust Fine-tuning for Retrieval-Augmented Generation against Retrieval Defects","created":"2025-01-30","cited_by_count":27,"area":"rag"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2410.14675","title":"To Trust or Not to Trust? Enhancing Large Language Models' Situated Faithfulness to External Contexts","created":"2024-10-18","cited_by_count":25,"area":"rag"},{"id":"2501.02968","title":"FlippedRAG: Black-Box Opinion Manipulation Adversarial Attacks to Retrieval-Augmented Generation Models","created":"2025-01-06","cited_by_count":25,"area":"rag"},{"id":"2501.14050","title":"GraphRAG under Fire","created":"2025-01-23","cited_by_count":24,"area":"rag"},{"id":"2502.12442","title":"HopRAG: Multi-Hop Reasoning for Logic-Aware Retrieval-Augmented Generation","created":"2025-02-18","cited_by_count":24,"area":"lr"},{"id":"2503.16248","title":"Real AI Agents with Fake Memories: Fatal Context Manipulation Attacks on Web3 Agents","created":"2025-03-20","cited_by_count":24,"area":"safety"},{"id":"2504.18041","title":"RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Models","created":"2025-04-25","cited_by_count":24,"area":"rag"},{"id":"2412.13746","title":"RAG-RewardBench: Benchmarking Reward Models in Retrieval Augmented Generation for Preference Alignment","created":"2024-12-18","cited_by_count":23,"area":"rag"},{"id":"2406.11497","title":"CrAM: Credibility-Aware Attention Modification in LLMs for Combating Misinformation in RAG","created":"2024-06-17","cited_by_count":22,"area":"rag"},{"id":"2503.00353","title":"U-NIAH: Unified RAG and LLM Evaluation for Long Context Needle-In-A-Haystack","created":"2025-03-01","cited_by_count":20,"area":"rag"},{"id":"2405.18111","title":"ATM: Adversarial Tuning Multi-agent System Makes a Robust Retrieval-Augmented Generator","created":"2024-05-28","cited_by_count":19,"area":"rag"},{"id":"2410.22954","title":"Retrieval-Augmented Generation with Estimation of Source Reliability","created":"2024-10-30","cited_by_count":19,"area":"rag"},{"id":"2510.25025","title":"Secure Retrieval-Augmented Generation against Poisoning Attacks","created":"2025-10-28","cited_by_count":19,"area":"rag"},{"id":"2505.18543","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-05-24","cited_by_count":18,"area":"rag"},{"id":"2509.23519","title":"ReliabilityRAG: Effective and Provably Robust Defense for RAG-based Web-Search","created":"2025-09-27","cited_by_count":18,"area":"rag"},{"id":"2410.02163","title":"Adversarial Decoding: Generating Readable Documents for Adversarial Objectives","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2412.16708","title":"Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks","created":"2024-12-21","cited_by_count":14,"area":"rag"},{"id":"2505.11063","title":"Think Twice Before You Act: Enhancing Agent Behavioral Safety with Thought Correction","created":"2025-05-16","cited_by_count":14,"area":"lr"},{"id":"2408.13533","title":"Pandora's Box or Aladdin's Lamp: A Comprehensive Analysis Revealing the Role of RAG Noise in Large Language Models","created":"2024-08-24","cited_by_count":13,"area":"rag"},{"id":"2506.04202","title":"TracLLM: A Generic Framework for Attributing Long Context LLMs","created":"2025-06-04","cited_by_count":13,"area":null},{"id":"2510.09710","title":"SeCon-RAG: A Two-Stage Semantic Filtering and Conflict-Free Framework for Trustworthy RAG","created":"2025-10-10","cited_by_count":13,"area":"rag"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2509.13772","title":"Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation","created":"2025-09-17","cited_by_count":12,"area":"rag"},{"id":"2407.13757","title":"Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-07-18","cited_by_count":11,"area":"rag"},{"id":"2508.02835","title":"Defending Against Knowledge Poisoning Attacks During Retrieval-Augmented Generation","created":"2025-08-04","cited_by_count":11,"area":"rag"},{"id":"2601.09028","title":"OpenDecoder: Open Large Language Model Decoding to Incorporate Document Quality in RAG","created":"2026-01-13","cited_by_count":11,"area":"rag"},{"id":"2504.02181","title":"A Survey of Scaling in Large Language Model Reasoning","created":"2025-04-02","cited_by_count":10,"area":"lr"},{"id":"2502.10993","title":"RoseRAG: Robust Retrieval-augmented Generation with Small-scale LLMs via Margin-aware Preference Optimization","created":"2025-02-16","cited_by_count":9,"area":"rag"},{"id":"2511.01268","title":"Rescuing the Unpoisoned: Efficient Defense against Knowledge Corruption Attacks on RAG Systems","created":"2025-11-03","cited_by_count":9,"area":"rag"},{"id":"2511.05797","title":"When AI Meets the Web: Prompt Injection Risks in Third-Party AI Chatbot Plugins","created":"2025-11-08","cited_by_count":9,"area":"safety"},{"id":"2504.02132","title":"One Pic is All it Takes: Poisoning Visual Document Retrieval Augmented Generation with a Single Image","created":"2025-04-02","cited_by_count":8,"area":"rag"},{"id":"2506.11415","title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs","created":"2025-06-13","cited_by_count":8,"area":"rag"},{"id":"2602.03100","title":"Risky-Bench: Probing Agentic Safety Risks under Real-World Deployment","created":"2026-02-03","cited_by_count":8,"area":"agents"},{"id":"2505.15753","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","created":"2025-05-21","cited_by_count":7,"area":"safety"},{"id":"2508.03793","title":"AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption","created":"2025-08-05","cited_by_count":7,"area":"rag"},{"id":"2601.03979","title":"SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems","created":"2026-01-07","cited_by_count":7,"area":"rag"},{"id":"2603.23530","title":"Did You Forget What I Asked? Prospective Memory Failures in Large Language Models","created":"2026-03-07","cited_by_count":6,"area":null},{"id":"2504.14858","title":"Retrieval is Not Enough: Enhancing RAG Reasoning through Test-Time Critique and Optimization","created":"2025-04-21","cited_by_count":5,"area":"lr"},{"id":"2504.20769","title":"Chain-of-Defensive-Thought: Structured Reasoning Elicits Robustness in Large Language Models against Reference Corruption","created":"2025-04-29","cited_by_count":5,"area":"lr"},{"id":"2505.12574","title":"Uncovering Competing Poisoning Attacks in Retrieval-Augmented Generation","created":"2025-05-18","cited_by_count":5,"area":"rag"},{"id":"2505.19260","title":"ALRPHFS: Adversarially Learned Risk Patterns with Hierarchical Fast \\& Slow Reasoning for Robust Agent Defense","created":"2025-05-25","cited_by_count":5,"area":"agents"},{"id":"2507.18202","title":"Safeguarding RAG Pipelines with GMTP: A Gradient-based Masked Token Probability Method for Poisoned Document Detection","created":"2025-07-24","cited_by_count":5,"area":"rag"},{"id":"2510.10008","title":"RIPRAG: Hack a Black-box Retrieval-Augmented Generation Question-Answering System with Reinforcement Learning","created":"2025-10-11","cited_by_count":5,"area":"lr"},{"id":"2601.06189","title":"Rational Synthesizers or Heuristic Followers? Analyzing LLMs in RAG-based Question-Answering","created":"2026-01-08","cited_by_count":5,"area":"rag"},{"id":"2604.16966","title":"Visual Inception: Compromising Long-term Planning in Agentic Recommenders via Multimodal Memory Poisoning","created":"2026-04-18","cited_by_count":5,"area":"agents"},{"id":"2604.18874","title":"How Adversarial Environments Mislead Agentic AI?","created":"2026-04-20","cited_by_count":5,"area":"agents"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2505.13506","title":"EcoSafeRAG: Efficient Security through Context Analysis in Retrieval-Augmented Generation","created":"2025-05-16","cited_by_count":4,"area":"rag"},{"id":"2505.17118","title":"After Retrieval, Before Generation: Enhancing the Trustworthiness of Large Language Models in Retrieval-Augmented Generation","created":"2025-05-21","cited_by_count":4,"area":"rag"},{"id":"2506.03100","title":"Retrieval-Augmented Generation as Noisy In-Context Learning: A Unified Theory and Risk Bounds","created":"2025-06-03","cited_by_count":4,"area":"rag"},{"id":"2512.08289","title":"MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks","created":"2025-12-09","cited_by_count":4,"area":"rag"},{"id":"2512.16059","title":"ContextLeak: Auditing Leakage in Private In-Context Learning Methods","created":"2025-12-18","cited_by_count":4,"area":null},{"id":"2606.12703","title":"SMSR: Certified Defence Against Runtime Memory Poisoning in Persistent LLM Agent Systems","created":"2026-06-10","cited_by_count":4,"area":"rag"},{"id":"2412.12632","title":"What External Knowledge is Preferred by LLMs? Characterizing and Exploring Chain of Evidence in Imperfect Context for Multi-Hop QA","created":"2024-12-17","cited_by_count":3,"area":null},{"id":"2412.18378","title":"RaSeRec: Retrieval-Augmented Sequential Recommendation","created":"2024-12-24","cited_by_count":3,"area":"rag"},{"id":"2501.13726","title":"RPO: Retrieval Preference Optimization for Robust Retrieval-Augmented Generation","created":"2025-01-23","cited_by_count":3,"area":"rag"},{"id":"2505.06186","title":"Query-driven Document-level Scientific Evidence Extraction from Biomedical Studies","created":"2025-05-09","cited_by_count":3,"area":null},{"id":"2506.04390","title":"Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAG","created":"2025-06-04","cited_by_count":3,"area":"rag"},{"id":"2508.18652","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","created":"2025-08-26","cited_by_count":3,"area":"rag"},{"id":"2512.01335","title":"EmoRAG: Evaluating RAG Robustness to Symbolic Perturbations","created":"2025-12-01","cited_by_count":3,"area":"rag"},{"id":"2602.04711","title":"Addressing Corpus Knowledge Poisoning Attacks on RAG Using Sparse Attention","created":"2026-02-04","cited_by_count":3,"area":"rag"},{"id":"2605.03482","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","created":"2026-05-05","cited_by_count":3,"area":"rag"},{"id":"2608.25776","title":"EVOMAL: Self-Poisoning in Self-Evolving Coding Agents","created":"2026-08-26","cited_by_count":3,"area":"agents"},{"id":"2510.06823","title":"Exposing Citation Vulnerabilities in Generative Engines","created":"2025-10-08","cited_by_count":2,"area":null},{"id":"2602.20091","title":"How Retrieved Context Shapes Internal Representations in RAG","created":"2026-02-23","cited_by_count":2,"area":"rag"},{"id":"2603.22934","title":"ProGRank: Probe-Gradient Reranking to Defend Dense-Retriever RAG from Corpus Poisoning","created":"2026-03-24","cited_by_count":2,"area":"rag"},{"id":"2604.08304","title":"Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions","created":"2026-04-09","cited_by_count":2,"area":"rag"},{"id":"2605.27157","title":"Detecting Is Not Resolving: The Monitoring Control Gap in Retrieval Augmented LLMs","created":"2026-05-26","cited_by_count":2,"area":"rag"},{"id":"2408.11189","title":"Emotional RAG LLMs: Reading Comprehension for the Open Internet","created":"2024-08-20","cited_by_count":1,"area":null},{"id":"2411.16133","title":"Context Awareness Gate For Retrieval Augmented Generation","created":"2024-11-25","cited_by_count":1,"area":"rag"},{"id":"2501.14728","title":"Mitigating GenAI-Powered Evidence Pollution for Out-Of-Context Misinformation Detection","created":"2025-01-24","cited_by_count":1,"area":null},{"id":"2509.25184","title":"Incentive-Aligned Multi-Source LLM Summaries","created":"2025-09-29","cited_by_count":1,"area":null},{"id":"2602.09616","title":"With Argus Eyes: Assessing Retrieval Gaps via Uncertainty Scoring to Detect and Remedy Retrieval Blind Spots","created":"2026-02-10","cited_by_count":1,"area":"rag"},{"id":"2602.09757","title":"Towards Poisoning Robustness Certification for Natural Language Generation","created":"2026-02-10","cited_by_count":1,"area":null},{"id":"2604.00387","title":"RAGShield: Detecting Numerical Claim Manipulation in Government RAG Systems","created":"2026-04-01","cited_by_count":1,"area":"rag"},{"id":"2605.01782","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","created":"2026-05-03","cited_by_count":1,"area":"rag"},{"id":"2605.09033","title":"ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts","created":"2026-05-09","cited_by_count":1,"area":"lr"},{"id":"2605.22041","title":"RADAR: Defending RAG Dynamically against Retrieval Corruption","created":"2026-05-21","cited_by_count":1,"area":"rag"},{"id":"2605.26754","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","created":"2026-05-26","cited_by_count":1,"area":"rag"}],"next_cursor":"100"}