{"total":21,"rows":[{"id":"2411.14110","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","created":"2024-11-21","cited_by_count":37,"area":"rag"},{"id":"2502.06872","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","created":"2025-02-08","cited_by_count":30,"area":"rag"},{"id":"2502.00306","title":"Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation","created":"2025-02-01","cited_by_count":26,"area":"rag"},{"id":"2505.15420","title":"Silent Leaks: Implicit Knowledge Extraction Attack on RAG Systems through Benign Queries","created":"2025-05-21","cited_by_count":19,"area":"rag"},{"id":"2412.18295","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","created":"2024-12-24","cited_by_count":18,"area":"rag"},{"id":"2503.15548","title":"Privacy-Aware RAG: Secure and Isolated Knowledge Retrieval","created":"2025-03-17","cited_by_count":10,"area":"rag"},{"id":"2601.03979","title":"SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems","created":"2026-01-07","cited_by_count":7,"area":"rag"},{"id":"2508.17222","title":"Exposing Privacy Risks in Graph Retrieval-Augmented Generation","created":"2025-08-24","cited_by_count":5,"area":"rag"},{"id":"2510.11195","title":"RAG-Pull: Turning Retrieval into a Code-Injection Channel via Invisible Unicode Perturbations","created":"2025-10-13","cited_by_count":4,"area":"rag"},{"id":"2605.24312","title":"Five Queries Are Enough: Query-Efficient and Surrogate-Free Membership Inference Attacks on RAG via Entailment","created":"2026-05-23","cited_by_count":4,"area":"rag"},{"id":"2601.15678","title":"Connect the Dots: Knowledge Graph-Guided Crawler Attack on Retrieval-Augmented Generation Systems","created":"2026-01-22","cited_by_count":3,"area":"rag"},{"id":"2510.02964","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","created":"2025-10-03","cited_by_count":2,"area":"rag"},{"id":"2503.13563","title":"MES-RAG: Bringing Multi-modal, Entity-Storage, and Secure Enhancements to RAG","created":"2025-03-17","cited_by_count":0,"area":"rag"},{"id":"2508.01084","title":"Provably Secure Retrieval-Augmented Generation","created":"2025-08-01","cited_by_count":0,"area":"rag"},{"id":"2511.10128","title":"RAGFort: Dual-Path Defense Against Proprietary Knowledge Base Extraction in Retrieval-Augmented Generation","created":"2025-11-13","cited_by_count":0,"area":"rag"},{"id":"2602.06495","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","created":"2026-02-06","cited_by_count":0,"area":"rag"},{"id":"2604.10717","title":"Detecting RAG Extraction Attack via Dual-Path Runtime Integrity Game","created":"2026-04-12","cited_by_count":0,"area":"rag"},{"id":"2604.15958","title":"A Case Study on the Impact of Anonymization Along the RAG Pipeline","created":"2026-04-17","cited_by_count":0,"area":"rag"},{"id":"2605.05818","title":"LeakDojo: Decoding the Leakage Threats of RAG Systems","created":"2026-05-07","cited_by_count":0,"area":"rag"},{"id":"2605.18762","title":"ALDEN: Boosting Private Data Extraction from Retrieval-Augmented Generation Systems via Active Learning and Distribution Estimation","created":"2026-04-10","cited_by_count":0,"area":"rag"},{"id":"2609.16095","title":"RAG-CT: Mitigating Privacy Risks on Retrieval-Augmented Generation Systems via Scanning Prompt Distribution","created":"2026-09-14","cited_by_count":0,"area":"rag"}],"next_cursor":null}