{"total":20,"rows":[{"id":"2509.20324","title":"RAG Security and Privacy: Formalizing the Threat Model and Attack Surface","created":"2025-09-24","cited_by_count":8,"area":"rag"},{"id":"2601.03979","title":"SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems","created":"2026-01-07","cited_by_count":7,"area":"rag"},{"id":"2510.06719","title":"Differentially Private Synthetic Text Generation for Retrieval-Augmented Generation (RAG)","created":"2025-10-08","cited_by_count":6,"area":"rag"},{"id":"2605.24312","title":"Five Queries Are Enough: Query-Efficient and Surrogate-Free Membership Inference Attacks on RAG via Entailment","created":"2026-05-23","cited_by_count":4,"area":"rag"},{"id":"2508.09105","title":"SMA: Who Said That? Auditing Membership Leakage in Semi-Black-box RAG Controlling","created":"2025-08-12","cited_by_count":3,"area":"rag"},{"id":"2511.07637","title":"Private-RAG: Answering Multiple Queries with LLMs while Keeping Your Data Private","created":"2025-11-10","cited_by_count":3,"area":"rag"},{"id":"2511.11347","title":"Privacy Challenges and Solutions in Retrieval-Augmented Generation-Enhanced LLMs for Healthcare Chatbots: A Review of Applications, Risks, and Future Directions","created":"2025-11-14","cited_by_count":3,"area":"rag"},{"id":"2511.12043","title":"BudgetLeak: Membership Inference Attacks on RAG Systems via the Generation Budget Side Channel","created":"2025-11-15","cited_by_count":3,"area":"rag"},{"id":"2601.15678","title":"Connect the Dots: Knowledge Graph-Guided Crawler Attack on Retrieval-Augmented Generation Systems","created":"2026-01-22","cited_by_count":3,"area":"rag"},{"id":"2505.00443","title":"Distributed Retrieval-Augmented Generation","created":"2025-05-01","cited_by_count":2,"area":"rag"},{"id":"2507.23229","title":"Fine-Grained Privacy Extraction from Retrieval-Augmented Generation Systems via Knowledge Asymmetry Exploitation","created":"2025-07-31","cited_by_count":2,"area":"rag"},{"id":"2603.11501","title":"KEPo: Knowledge Evolution Poison on Graph-based Retrieval-Augmented Generation","created":"2026-03-12","cited_by_count":1,"area":"rag"},{"id":"2603.06025","title":"Sensitivity-Aware Retrieval-Augmented Intent Clarification","created":"2026-03-06","cited_by_count":0,"area":"rag"},{"id":"2604.20932","title":"Adaptive Defense Orchestration for RAG: A Sentinel-Strategist Architecture against Multi-Vector Attacks","created":"2026-04-22","cited_by_count":0,"area":"rag"},{"id":"2605.00955","title":"E-MIA: Exam-Style Black-Box Membership Inference Attacks against RAG Systems","created":"2026-05-01","cited_by_count":0,"area":"rag"},{"id":"2605.02255","title":"On the Privacy of LLMs: An Ablation Study","created":"2026-05-04","cited_by_count":0,"area":"rag"},{"id":"2606.03354","title":"ImageAuditor: Membership Inference Attack against Image-based Retrieval-Augmented Generation","created":"2026-06-02","cited_by_count":0,"area":"rag"},{"id":"2606.25533","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2608.12675","title":"Privacy-Preserving RAG by Concealing Sensitive Information from External LLMs","created":"2026-08-13","cited_by_count":0,"area":"rag"},{"id":"2609.14649","title":"CIG-MIA: Context-Induced Information Gain Membership Inference Attacks against Retrieval-Augmented Generation","created":"2026-09-13","cited_by_count":0,"area":"rag"}],"next_cursor":null}