{"total":60,"rows":[{"id":"2409.10102","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","created":"2024-09-16","cited_by_count":83,"area":"rag"},{"id":"2501.00879","title":"TrustRAG: Enhancing Robustness and Trustworthiness in Retrieval-Augmented Generation","created":"2025-01-01","cited_by_count":40,"area":"rag"},{"id":"2411.03284","title":"SMoA: Improving Multi-agent Large Language Models with Sparse Mixture-of-Agents","created":"2024-11-05","cited_by_count":30,"area":"agents"},{"id":"2504.21668","title":"Traceback of Poisoning Attacks to Retrieval-Augmented Generation","created":"2025-04-30","cited_by_count":28,"area":"rag"},{"id":"2505.11548","title":"One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems","created":"2025-05-15","cited_by_count":28,"area":"rag"},{"id":"2506.17784","title":"AnyMAC: Cascading Flexible Multi-Agent Collaboration via Next-Agent Prediction","created":"2025-06-21","cited_by_count":25,"area":"agents"},{"id":"2501.14050","title":"GraphRAG under Fire","created":"2025-01-23","cited_by_count":24,"area":"rag"},{"id":"2502.17832","title":"MM-PoisonRAG: Disrupting Multimodal RAG with Local and Global Poisoning Attacks","created":"2025-02-25","cited_by_count":24,"area":"mllm"},{"id":"2408.04585","title":"Towards Resilient and Efficient LLMs: A Comparative Study of Efficiency, Performance, and Adversarial Robustness","created":"2024-08-08","cited_by_count":22,"area":null},{"id":"2505.18543","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-05-24","cited_by_count":18,"area":"rag"},{"id":"2505.19864","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","created":"2025-05-26","cited_by_count":17,"area":"rag"},{"id":"2502.04951","title":"Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search","created":"2025-02-07","cited_by_count":16,"area":null},{"id":"2506.06151","title":"Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2025-06-06","cited_by_count":16,"area":"rag"},{"id":"2412.16708","title":"Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks","created":"2024-12-21","cited_by_count":14,"area":"rag"},{"id":"2502.20995","title":"The RAG Paradox: A Black-Box Attack Exploiting Unintentional Vulnerabilities in Retrieval-Augmented Generation Systems","created":"2025-02-28","cited_by_count":14,"area":"rag"},{"id":"2503.06254","title":"Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation","created":"2025-03-08","cited_by_count":12,"area":"lr"},{"id":"2509.13772","title":"Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation","created":"2025-09-17","cited_by_count":12,"area":"rag"},{"id":"2504.02181","title":"A Survey of Scaling in Large Language Model Reasoning","created":"2025-04-02","cited_by_count":10,"area":"lr"},{"id":"2412.14191","title":"Ontology-Aware RAG for Improved Question-Answering in Cybersecurity Education","created":"2024-12-10","cited_by_count":9,"area":null},{"id":"2504.02132","title":"One Pic is All it Takes: Poisoning Visual Document Retrieval Augmented Generation with a Single Image","created":"2025-04-02","cited_by_count":8,"area":"rag"},{"id":"2509.20324","title":"RAG Security and Privacy: Formalizing the Threat Model and Attack Surface","created":"2025-09-24","cited_by_count":8,"area":"rag"},{"id":"2601.03979","title":"SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems","created":"2026-01-07","cited_by_count":7,"area":"rag"},{"id":"2506.06355","title":"LLMs as World Models: Data-Driven and Human-Centered Pre-Event Simulation for Disaster Impact Assessment","created":"2025-06-02","cited_by_count":6,"area":null},{"id":"2503.06950","title":"CtrlRAG: Black-box Document Poisoning Attacks for Retrieval-Augmented Generation of Large Language Models","created":"2025-03-10","cited_by_count":5,"area":"rag"},{"id":"2505.12574","title":"Uncovering Competing Poisoning Attacks in Retrieval-Augmented Generation","created":"2025-05-18","cited_by_count":5,"area":"rag"},{"id":"2507.18202","title":"Safeguarding RAG Pipelines with GMTP: A Gradient-based Masked Token Probability Method for Poisoned Document Detection","created":"2025-07-24","cited_by_count":5,"area":"rag"},{"id":"2509.15159","title":"AIP: Subverting Retrieval-Augmented Generation via Adversarial Instructional Prompt","created":"2025-09-18","cited_by_count":5,"area":"rag"},{"id":"2510.10008","title":"RIPRAG: Hack a Black-box Retrieval-Augmented Generation Question-Answering System with Reinforcement Learning","created":"2025-10-11","cited_by_count":5,"area":"lr"},{"id":"2505.13506","title":"EcoSafeRAG: Efficient Security through Context Analysis in Retrieval-Augmented Generation","created":"2025-05-16","cited_by_count":4,"area":"rag"},{"id":"2509.23694","title":"SafeSearch: Automated Red-Teaming of LLM-Based Search Agents","created":"2025-09-28","cited_by_count":4,"area":"agents"},{"id":"2512.08289","title":"MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks","created":"2025-12-09","cited_by_count":4,"area":"rag"},{"id":"2504.21680","title":"Hoist with His Own Petard: Inducing Guardrails to Facilitate Denial-of-Service Attacks on Retrieval-Augmented Generation of LLMs","created":"2025-04-30","cited_by_count":3,"area":"rag"},{"id":"2507.08862","title":"RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation","created":"2025-07-09","cited_by_count":3,"area":"rag"},{"id":"2508.18652","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","created":"2025-08-26","cited_by_count":3,"area":"rag"},{"id":"2407.21264","title":"Model Attribution in LLM-Generated Disinformation: A Domain Generalization Approach with Supervised Contrastive Learning","created":"2024-07-31","cited_by_count":2,"area":null},{"id":"2603.22934","title":"ProGRank: Probe-Gradient Reranking to Defend Dense-Retriever RAG from Corpus Poisoning","created":"2026-03-24","cited_by_count":2,"area":"rag"},{"id":"2604.08304","title":"Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions","created":"2026-04-09","cited_by_count":2,"area":"rag"},{"id":"2504.00389","title":"CyberBOT: Towards Reliable Cybersecurity Education via Ontology-Grounded Retrieval Augmented Generation","created":"2025-04-01","cited_by_count":1,"area":"rag"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2603.11501","title":"KEPo: Knowledge Evolution Poison on Graph-based Retrieval-Augmented Generation","created":"2026-03-12","cited_by_count":1,"area":"rag"},{"id":"2605.01782","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","created":"2026-05-03","cited_by_count":1,"area":"rag"},{"id":"2606.01212","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","created":"2026-05-31","cited_by_count":1,"area":"rag"},{"id":"2607.00012","title":"PRA-RAG: Provably Robust Aggregation in Retrieval-Augmented Generation against Retrieval Corruption","created":"2026-05-08","cited_by_count":1,"area":"rag"},{"id":"2608.24977","title":"Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":1,"area":"rag"},{"id":"2504.12323","title":"The Other Side of the Coin: Exploring Fairness in Retrieval-Augmented Generation","created":"2025-04-11","cited_by_count":0,"area":"rag"},{"id":"2506.00197","title":"When GPT Spills the Tea: Comprehensive Assessment of Knowledge File Leakage in GPTs","created":"2025-05-30","cited_by_count":0,"area":null},{"id":"2508.05600","title":"Provable one-poison backdoor attacks on linear models and ReLU neural networks","created":"2025-08-07","cited_by_count":0,"area":null},{"id":"2511.04700","title":"Separate the Wheat from the Chaff: Winnowing Down Divergent Views in Retrieval Augmented Generation","created":"2025-11-01","cited_by_count":0,"area":"rag"},{"id":"2603.00172","title":"Hidden in the Metadata: Stealth Poisoning Attacks on Multimodal Retrieval-Augmented Generation","created":"2026-02-26","cited_by_count":0,"area":"mllm"},{"id":"2605.10253","title":"Knowledge Poisoning Attacks on Medical Multi-Modal Retrieval-Augmented Generation","created":"2026-05-11","cited_by_count":0,"area":"rag"},{"id":"2606.11265","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","created":"2026-06-09","cited_by_count":0,"area":"rag"},{"id":"2606.12469","title":"Influence Factors on RAG Poisoning","created":"2026-06-09","cited_by_count":0,"area":"rag"},{"id":"2606.25721","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2607.10402","title":"Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability","created":"2026-07-11","cited_by_count":0,"area":null},{"id":"2607.23838","title":"TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation","created":"2026-07-26","cited_by_count":0,"area":"rag"},{"id":"2608.13010","title":"RAGSieve: Self-Referenced Local Contrast for Knowledge-Poison Detection in Retrieval-Augmented Generation","created":"2026-08-13","cited_by_count":0,"area":"rag"},{"id":"2608.30303","title":"Lazy Grounding: Attacking Search Agents with Factual Evidence","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2609.11758","title":"RAG-Safety-Bench: Reliable Evaluation of Retrieval-Augmented LLM Safety","created":"2026-09-10","cited_by_count":0,"area":"rag"},{"id":"2609.16818","title":"InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generation","created":"2026-09-15","cited_by_count":0,"area":"rag"},{"id":"2609.27090","title":"Divide and Doubt: Diverse Distributed Poisoning for Retrieval-Augmented Generation","created":"2026-09-22","cited_by_count":0,"area":"rag"}],"next_cursor":null}