{"total":86,"rows":[{"id":"2501.00309","title":"Retrieval-Augmented Generation with Graphs (GraphRAG)","created":"2024-12-31","cited_by_count":172,"area":"rag"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2406.05870","title":"Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents","created":"2024-06-09","cited_by_count":102,"area":"rag"},{"id":"2409.10102","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","created":"2024-09-16","cited_by_count":83,"area":"rag"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2406.18382","title":"Adversarial Search Engine Optimization for Large Language Models","created":"2024-06-26","cited_by_count":40,"area":null},{"id":"2504.03957","title":"Practical Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-04-04","cited_by_count":36,"area":"rag"},{"id":"2410.08811","title":"PoisonBench: Assessing Large Language Model Vulnerability to Data Poisoning","created":"2024-10-11","cited_by_count":33,"area":"safety"},{"id":"2502.01386","title":"Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models","created":"2025-02-03","cited_by_count":33,"area":"rag"},{"id":"2501.11759","title":"Poison-RAG: Adversarial Data Poisoning Attacks on Retrieval-Augmented Generation in Recommender Systems","created":"2025-01-20","cited_by_count":32,"area":"rag"},{"id":"2409.08045","title":"Unleashing Worms and Extracting Data: Escalating the Outcome of Attacks against RAG-based Inference in Scale and Severity Using Jailbreaking","created":"2024-09-12","cited_by_count":30,"area":"safety"},{"id":"2410.15267","title":"When Machine Unlearning Meets Retrieval-Augmented Generation (RAG): Keep Secret or Forget Knowledge?","created":"2024-10-20","cited_by_count":24,"area":"rag"},{"id":"2501.14050","title":"GraphRAG under Fire","created":"2025-01-23","cited_by_count":24,"area":"rag"},{"id":"2411.14033","title":"LLM-based Multi-Agent Systems: Techniques and Business Perspectives","created":"2024-11-21","cited_by_count":22,"area":"agents"},{"id":"2505.18543","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-05-24","cited_by_count":18,"area":"rag"},{"id":"2410.03537","title":"Ward: Provable RAG Dataset Inference via LLM Watermarks","created":"2024-10-04","cited_by_count":16,"area":"safety"},{"id":"2506.06151","title":"Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2025-06-06","cited_by_count":16,"area":"rag"},{"id":"2601.07072","title":"Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems","created":"2026-01-11","cited_by_count":16,"area":"safety"},{"id":"2409.19993","title":"Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges","created":"2024-09-30","cited_by_count":15,"area":"safety"},{"id":"2506.04202","title":"TracLLM: A Generic Framework for Attributing Long Context LLMs","created":"2025-06-04","cited_by_count":13,"area":null},{"id":"2510.09710","title":"SeCon-RAG: A Two-Stage Semantic Filtering and Conflict-Free Framework for Trustworthy RAG","created":"2025-10-10","cited_by_count":13,"area":"rag"},{"id":"2503.06254","title":"Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation","created":"2025-03-08","cited_by_count":12,"area":"lr"},{"id":"2509.13772","title":"Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation","created":"2025-09-17","cited_by_count":12,"area":"rag"},{"id":"2407.13757","title":"Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-07-18","cited_by_count":11,"area":"rag"},{"id":"2510.13842","title":"ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checking","created":"2025-10-11","cited_by_count":10,"area":"rag"},{"id":"2511.01268","title":"Rescuing the Unpoisoned: Efficient Defense against Knowledge Corruption Attacks on RAG Systems","created":"2025-11-03","cited_by_count":9,"area":"rag"},{"id":"2407.20181","title":"Blockchain for Large Language Model Security and Safety: A Holistic Survey","created":"2024-07-26","cited_by_count":8,"area":"safety"},{"id":"2504.02132","title":"One Pic is All it Takes: Poisoning Visual Document Retrieval Augmented Generation with a Single Image","created":"2025-04-02","cited_by_count":8,"area":"rag"},{"id":"2506.11415","title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs","created":"2025-06-13","cited_by_count":8,"area":"rag"},{"id":"2509.20324","title":"RAG Security and Privacy: Formalizing the Threat Model and Attack Surface","created":"2025-09-24","cited_by_count":8,"area":"rag"},{"id":"2408.05061","title":"A Jailbroken GenAI Model Can Cause Substantial Harm: GenAI-powered Applications are Vulnerable to PromptWares","created":"2024-08-09","cited_by_count":7,"area":"safety"},{"id":"2505.15753","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","created":"2025-05-21","cited_by_count":7,"area":"safety"},{"id":"2508.03793","title":"AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption","created":"2025-08-05","cited_by_count":7,"area":"rag"},{"id":"2510.21144","title":"NeuroGenPoisoning: Neuron-Guided Attacks on Retrieval-Augmented Generation of LLM via Genetic Optimization of External Knowledge","created":"2025-10-24","cited_by_count":7,"area":"rag"},{"id":"2601.03979","title":"SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems","created":"2026-01-07","cited_by_count":7,"area":"rag"},{"id":"2502.14930","title":"RAGVA: Engineering Retrieval Augmented Generation-based Virtual Assistants in Practice","created":"2025-02-20","cited_by_count":6,"area":"rag"},{"id":"2505.06579","title":"POISONCRAFT: Practical Poisoning of Retrieval-Augmented Generation for Large Language Models","created":"2025-05-10","cited_by_count":6,"area":"rag"},{"id":"2604.01350","title":"No Attacker Needed: Unintentional Cross-User Contamination in Shared-State LLM Agents","created":"2026-04-01","cited_by_count":6,"area":"agents"},{"id":"2505.16014","title":"Ranking Free RAG: Replacing Re-ranking with Selection in RAG for Sensitive Domains","created":"2025-05-21","cited_by_count":5,"area":"rag"},{"id":"2503.12217","title":"TFHE-Coder: Evaluating LLM-agentic Fully Homomorphic Encryption Code Generation","created":"2025-03-15","cited_by_count":4,"area":"agents"},{"id":"2506.00281","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","created":"2025-05-30","cited_by_count":4,"area":"rag"},{"id":"2510.11195","title":"RAG-Pull: Turning Retrieval into a Code-Injection Channel via Invisible Unicode Perturbations","created":"2025-10-13","cited_by_count":4,"area":"rag"},{"id":"2603.21654","title":"Towards Secure Retrieval-Augmented Generation: A Comprehensive Review of Threats, Defenses and Benchmarks","created":"2026-03-23","cited_by_count":4,"area":"rag"},{"id":"2504.21680","title":"Hoist with His Own Petard: Inducing Guardrails to Facilitate Denial-of-Service Attacks on Retrieval-Augmented Generation of LLMs","created":"2025-04-30","cited_by_count":3,"area":"rag"},{"id":"2506.03535","title":"Across Programming Language Silos: A Study on Cross-Lingual Retrieval-augmented Code Generation","created":"2025-06-04","cited_by_count":3,"area":"rag"},{"id":"2507.08862","title":"RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation","created":"2025-07-09","cited_by_count":3,"area":"rag"},{"id":"2508.18652","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","created":"2025-08-26","cited_by_count":3,"area":"rag"},{"id":"2510.05310","title":"RAG Makes Guardrails Unsafe? Investigating Robustness of Guardrails under RAG-style Contexts","created":"2025-10-06","cited_by_count":3,"area":"safety"},{"id":"2512.14448","title":"Reasoning-Style Poisoning of LLM Agents via Stealthy Style Transfer: Process-Level Attacks and Runtime Monitoring in RSV Space","created":"2025-12-16","cited_by_count":3,"area":"lr"},{"id":"2601.10758","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","created":"2026-01-14","cited_by_count":3,"area":"agents"},{"id":"2601.20615","title":"DRAINCODE: Stealthy Energy Consumption Attacks on Retrieval-Augmented Code Generation via Context Poisoning","created":"2026-01-28","cited_by_count":3,"area":"rag"},{"id":"2605.03482","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","created":"2026-05-05","cited_by_count":3,"area":"rag"},{"id":"2505.00443","title":"Distributed Retrieval-Augmented Generation","created":"2025-05-01","cited_by_count":2,"area":"rag"},{"id":"2505.14215","title":"Safety Degradation in AI Agents","created":"2025-05-20","cited_by_count":2,"area":"agents"},{"id":"2512.00804","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","created":"2025-11-30","cited_by_count":2,"area":"rag"},{"id":"2512.10422","title":"Cooperative Retrieval-Augmented Generation for Question Answering: Mutual Information Exchange and Ranking by Contrasting Layers","created":"2025-12-11","cited_by_count":2,"area":"rag"},{"id":"2603.29062","title":"CivicShield: A Cross-Domain Defense-in-Depth Framework for Securing Government-Facing AI Chatbots Against Multi-Turn Adversarial Attacks","created":"2026-03-30","cited_by_count":2,"area":"safety"},{"id":"2506.09630","title":"In-Context Bias Propagation in LLM-Based Tabular Data Generation","created":"2025-06-11","cited_by_count":1,"area":null},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2605.01782","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","created":"2026-05-03","cited_by_count":1,"area":"rag"},{"id":"2605.09033","title":"ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts","created":"2026-05-09","cited_by_count":1,"area":"lr"},{"id":"2605.09822","title":"Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning","created":"2026-05-10","cited_by_count":1,"area":"agents"},{"id":"2606.01212","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","created":"2026-05-31","cited_by_count":1,"area":"rag"},{"id":"2606.18310","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","created":"2026-06-16","cited_by_count":1,"area":"rag"},{"id":"2607.03739","title":"A Failure-Mode Benchmark for Polymorphic Sybil Poisoning in RAG","created":"2026-07-04","cited_by_count":1,"area":null},{"id":"2601.05260","title":"Quantifying Document Impact in RAG-LLMs","created":"2025-10-27","cited_by_count":0,"area":"rag"},{"id":"2603.00172","title":"Hidden in the Metadata: Stealth Poisoning Attacks on Multimodal Retrieval-Augmented Generation","created":"2026-02-26","cited_by_count":0,"area":"mllm"},{"id":"2603.17176","title":"Towards Unsupervised Adversarial Document Detection in Retrieval Augmented Generation Systems","created":"2026-03-17","cited_by_count":0,"area":"rag"},{"id":"2605.01758","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","created":"2026-05-03","cited_by_count":0,"area":"safety"},{"id":"2605.07273","title":"From Clouds to Hallucinations: Atmospheric Retrieval Hijacking in Remote Sensing Vision-Language RAG","created":"2026-05-08","cited_by_count":0,"area":"rag"},{"id":"2605.11996","title":"BadSKP: Backdoor Attacks on Knowledge Graph-Enhanced LLMs with Soft Prompts","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2606.03354","title":"ImageAuditor: Membership Inference Attack against Image-based Retrieval-Augmented Generation","created":"2026-06-02","cited_by_count":0,"area":"rag"},{"id":"2606.07783","title":"Evaluating RAG Reliability under Clean, Misleading, and Mixed Retrieval","created":"2026-06-05","cited_by_count":0,"area":"rag"},{"id":"2606.23892","title":"REALM: A Unified Red-Teaming Benchmark for Physical-World VLMs","created":"2026-06-22","cited_by_count":0,"area":"mllm"},{"id":"2606.25533","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2607.17535","title":"Salience Induction against Multi-Hop RAG Agents: Threat and Defense","created":"2026-07-20","cited_by_count":0,"area":"rag"},{"id":"2607.23838","title":"TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation","created":"2026-07-26","cited_by_count":0,"area":"rag"},{"id":"2608.02678","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","created":"2026-08-02","cited_by_count":0,"area":"rag"},{"id":"2608.11390","title":"Mechanism Design for Generative Engines: From Exploitation toward Win-Win Outcomes","created":"2026-08-11","cited_by_count":0,"area":null},{"id":"2608.16044","title":"Coverage Is Not Containment: A Fundamental Limit of Admission-Time Defenses Against Coordinated Poisoning of Vector Retrieval","created":"2026-08-17","cited_by_count":0,"area":"rag"},{"id":"2609.14723","title":"Detecting and Localizing Segment-Level Poisoning in Multi-Source LLM-Agent Inputs","created":"2026-09-13","cited_by_count":0,"area":"agents"},{"id":"2609.22246","title":"The Corroboration Illusion: When More News Makes LLM Forecasts Less True","created":"2026-09-05","cited_by_count":0,"area":null},{"id":"2609.23700","title":"When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems","created":"2026-09-20","cited_by_count":0,"area":"agents"},{"id":"2609.25469","title":"RAG-NAROK: Retrieval-Aware Knowledge Corpus Poisoning in RAG with Source-specific Refutation","created":"2026-09-21","cited_by_count":0,"area":"rag"},{"id":"2610.01936","title":"Mapping the RAG Landscape: A Four Axis Taxonomy of Efficiency, Defense, Interactivity, and Reasoning","created":"2026-10-01","cited_by_count":0,"area":"lr"},{"id":"2610.04691","title":"RAGStress: A controlled benchmark for evaluating retrieval-augmented generation under knowledge-base degradation","created":"2026-10-03","cited_by_count":0,"area":"rag"}],"next_cursor":null}