{"total":51,"rows":[{"id":"2501.00309","title":"Retrieval-Augmented Generation with Graphs (GraphRAG)","created":"2024-12-31","cited_by_count":172,"area":"rag"},{"id":"2406.05870","title":"Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents","created":"2024-06-09","cited_by_count":102,"area":"rag"},{"id":"2409.10102","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","created":"2024-09-16","cited_by_count":83,"area":"rag"},{"id":"2504.03957","title":"Practical Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-04-04","cited_by_count":36,"area":"rag"},{"id":"2502.01386","title":"Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models","created":"2025-02-03","cited_by_count":33,"area":"rag"},{"id":"2501.11759","title":"Poison-RAG: Adversarial Data Poisoning Attacks on Retrieval-Augmented Generation in Recommender Systems","created":"2025-01-20","cited_by_count":32,"area":"rag"},{"id":"2410.15267","title":"When Machine Unlearning Meets Retrieval-Augmented Generation (RAG): Keep Secret or Forget Knowledge?","created":"2024-10-20","cited_by_count":24,"area":"rag"},{"id":"2501.14050","title":"GraphRAG under Fire","created":"2025-01-23","cited_by_count":24,"area":"rag"},{"id":"2505.18543","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-05-24","cited_by_count":18,"area":"rag"},{"id":"2506.06151","title":"Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2025-06-06","cited_by_count":16,"area":"rag"},{"id":"2510.09710","title":"SeCon-RAG: A Two-Stage Semantic Filtering and Conflict-Free Framework for Trustworthy RAG","created":"2025-10-10","cited_by_count":13,"area":"rag"},{"id":"2509.13772","title":"Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation","created":"2025-09-17","cited_by_count":12,"area":"rag"},{"id":"2407.13757","title":"Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-07-18","cited_by_count":11,"area":"rag"},{"id":"2510.13842","title":"ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checking","created":"2025-10-11","cited_by_count":10,"area":"rag"},{"id":"2511.01268","title":"Rescuing the Unpoisoned: Efficient Defense against Knowledge Corruption Attacks on RAG Systems","created":"2025-11-03","cited_by_count":9,"area":"rag"},{"id":"2504.02132","title":"One Pic is All it Takes: Poisoning Visual Document Retrieval Augmented Generation with a Single Image","created":"2025-04-02","cited_by_count":8,"area":"rag"},{"id":"2506.11415","title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs","created":"2025-06-13","cited_by_count":8,"area":"rag"},{"id":"2509.20324","title":"RAG Security and Privacy: Formalizing the Threat Model and Attack Surface","created":"2025-09-24","cited_by_count":8,"area":"rag"},{"id":"2508.03793","title":"AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption","created":"2025-08-05","cited_by_count":7,"area":"rag"},{"id":"2510.21144","title":"NeuroGenPoisoning: Neuron-Guided Attacks on Retrieval-Augmented Generation of LLM via Genetic Optimization of External Knowledge","created":"2025-10-24","cited_by_count":7,"area":"rag"},{"id":"2601.03979","title":"SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems","created":"2026-01-07","cited_by_count":7,"area":"rag"},{"id":"2502.14930","title":"RAGVA: Engineering Retrieval Augmented Generation-based Virtual Assistants in Practice","created":"2025-02-20","cited_by_count":6,"area":"rag"},{"id":"2505.06579","title":"POISONCRAFT: Practical Poisoning of Retrieval-Augmented Generation for Large Language Models","created":"2025-05-10","cited_by_count":6,"area":"rag"},{"id":"2505.16014","title":"Ranking Free RAG: Replacing Re-ranking with Selection in RAG for Sensitive Domains","created":"2025-05-21","cited_by_count":5,"area":"rag"},{"id":"2506.00281","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","created":"2025-05-30","cited_by_count":4,"area":"rag"},{"id":"2510.11195","title":"RAG-Pull: Turning Retrieval into a Code-Injection Channel via Invisible Unicode Perturbations","created":"2025-10-13","cited_by_count":4,"area":"rag"},{"id":"2603.21654","title":"Towards Secure Retrieval-Augmented Generation: A Comprehensive Review of Threats, Defenses and Benchmarks","created":"2026-03-23","cited_by_count":4,"area":"rag"},{"id":"2504.21680","title":"Hoist with His Own Petard: Inducing Guardrails to Facilitate Denial-of-Service Attacks on Retrieval-Augmented Generation of LLMs","created":"2025-04-30","cited_by_count":3,"area":"rag"},{"id":"2506.03535","title":"Across Programming Language Silos: A Study on Cross-Lingual Retrieval-augmented Code Generation","created":"2025-06-04","cited_by_count":3,"area":"rag"},{"id":"2507.08862","title":"RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation","created":"2025-07-09","cited_by_count":3,"area":"rag"},{"id":"2508.18652","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","created":"2025-08-26","cited_by_count":3,"area":"rag"},{"id":"2601.20615","title":"DRAINCODE: Stealthy Energy Consumption Attacks on Retrieval-Augmented Code Generation via Context Poisoning","created":"2026-01-28","cited_by_count":3,"area":"rag"},{"id":"2605.03482","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","created":"2026-05-05","cited_by_count":3,"area":"rag"},{"id":"2505.00443","title":"Distributed Retrieval-Augmented Generation","created":"2025-05-01","cited_by_count":2,"area":"rag"},{"id":"2512.00804","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","created":"2025-11-30","cited_by_count":2,"area":"rag"},{"id":"2512.10422","title":"Cooperative Retrieval-Augmented Generation for Question Answering: Mutual Information Exchange and Ranking by Contrasting Layers","created":"2025-12-11","cited_by_count":2,"area":"rag"},{"id":"2605.01782","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","created":"2026-05-03","cited_by_count":1,"area":"rag"},{"id":"2606.01212","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","created":"2026-05-31","cited_by_count":1,"area":"rag"},{"id":"2606.18310","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","created":"2026-06-16","cited_by_count":1,"area":"rag"},{"id":"2601.05260","title":"Quantifying Document Impact in RAG-LLMs","created":"2025-10-27","cited_by_count":0,"area":"rag"},{"id":"2603.17176","title":"Towards Unsupervised Adversarial Document Detection in Retrieval Augmented Generation Systems","created":"2026-03-17","cited_by_count":0,"area":"rag"},{"id":"2605.07273","title":"From Clouds to Hallucinations: Atmospheric Retrieval Hijacking in Remote Sensing Vision-Language RAG","created":"2026-05-08","cited_by_count":0,"area":"rag"},{"id":"2606.03354","title":"ImageAuditor: Membership Inference Attack against Image-based Retrieval-Augmented Generation","created":"2026-06-02","cited_by_count":0,"area":"rag"},{"id":"2606.07783","title":"Evaluating RAG Reliability under Clean, Misleading, and Mixed Retrieval","created":"2026-06-05","cited_by_count":0,"area":"rag"},{"id":"2606.25533","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2607.17535","title":"Salience Induction against Multi-Hop RAG Agents: Threat and Defense","created":"2026-07-20","cited_by_count":0,"area":"rag"},{"id":"2607.23838","title":"TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation","created":"2026-07-26","cited_by_count":0,"area":"rag"},{"id":"2608.02678","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","created":"2026-08-02","cited_by_count":0,"area":"rag"},{"id":"2608.16044","title":"Coverage Is Not Containment: A Fundamental Limit of Admission-Time Defenses Against Coordinated Poisoning of Vector Retrieval","created":"2026-08-17","cited_by_count":0,"area":"rag"},{"id":"2609.25469","title":"RAG-NAROK: Retrieval-Aware Knowledge Corpus Poisoning in RAG with Source-specific Refutation","created":"2026-09-21","cited_by_count":0,"area":"rag"},{"id":"2610.04691","title":"RAGStress: A controlled benchmark for evaluating retrieval-augmented generation under knowledge-base degradation","created":"2026-10-03","cited_by_count":0,"area":"rag"}],"next_cursor":null}