{"total":16,"rows":[{"id":"2501.11759","title":"Poison-RAG: Adversarial Data Poisoning Attacks on Retrieval-Augmented Generation in Recommender Systems","created":"2025-01-20","cited_by_count":32,"area":"rag"},{"id":"2412.18295","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","created":"2024-12-24","cited_by_count":18,"area":"rag"},{"id":"2605.24312","title":"Five Queries Are Enough: Query-Efficient and Surrogate-Free Membership Inference Attacks on RAG via Entailment","created":"2026-05-23","cited_by_count":4,"area":"rag"},{"id":"2511.07637","title":"Private-RAG: Answering Multiple Queries with LLMs while Keeping Your Data Private","created":"2025-11-10","cited_by_count":3,"area":"rag"},{"id":"2511.11347","title":"Privacy Challenges and Solutions in Retrieval-Augmented Generation-Enhanced LLMs for Healthcare Chatbots: A Review of Applications, Risks, and Future Directions","created":"2025-11-14","cited_by_count":3,"area":"rag"},{"id":"2511.12043","title":"BudgetLeak: Membership Inference Attacks on RAG Systems via the Generation Budget Side Channel","created":"2025-11-15","cited_by_count":3,"area":"rag"},{"id":"2507.23229","title":"Fine-Grained Privacy Extraction from Retrieval-Augmented Generation Systems via Knowledge Asymmetry Exploitation","created":"2025-07-31","cited_by_count":2,"area":"rag"},{"id":"2510.02964","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","created":"2025-10-03","cited_by_count":2,"area":"rag"},{"id":"2601.00274","title":"Making Theft Useless: Adulteration-Based Protection of Proprietary Knowledge Graphs in GraphRAG Systems","created":"2026-01-01","cited_by_count":2,"area":"rag"},{"id":"2602.06495","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","created":"2026-02-06","cited_by_count":0,"area":"rag"},{"id":"2603.06025","title":"Sensitivity-Aware Retrieval-Augmented Intent Clarification","created":"2026-03-06","cited_by_count":0,"area":"rag"},{"id":"2605.00955","title":"E-MIA: Exam-Style Black-Box Membership Inference Attacks against RAG Systems","created":"2026-05-01","cited_by_count":0,"area":"rag"},{"id":"2605.02255","title":"On the Privacy of LLMs: An Ablation Study","created":"2026-05-04","cited_by_count":0,"area":"rag"},{"id":"2605.17034","title":"Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation","created":"2026-05-16","cited_by_count":0,"area":"rag"},{"id":"2606.03354","title":"ImageAuditor: Membership Inference Attack against Image-based Retrieval-Augmented Generation","created":"2026-06-02","cited_by_count":0,"area":"rag"},{"id":"2609.14649","title":"CIG-MIA: Context-Induced Information Gain Membership Inference Attacks against Retrieval-Augmented Generation","created":"2026-09-13","cited_by_count":0,"area":"rag"}],"next_cursor":null}