{"total":20,"rows":[{"id":"2502.01386","title":"Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models","created":"2025-02-03","cited_by_count":33,"area":"rag"},{"id":"2504.14891","title":"Retrieval Augmented Generation Evaluation in the Era of Large Language Models: A Comprehensive Survey","created":"2025-04-21","cited_by_count":20,"area":"rag"},{"id":"2505.18543","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-05-24","cited_by_count":18,"area":"rag"},{"id":"2509.13772","title":"Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation","created":"2025-09-17","cited_by_count":12,"area":"rag"},{"id":"2502.03233","title":"Exploring the Security Threats of Knowledge Base Poisoning in Retrieval-Augmented Code Generation","created":"2025-02-05","cited_by_count":9,"area":"rag"},{"id":"2601.03979","title":"SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems","created":"2026-01-07","cited_by_count":7,"area":"rag"},{"id":"2505.06579","title":"POISONCRAFT: Practical Poisoning of Retrieval-Augmented Generation for Large Language Models","created":"2025-05-10","cited_by_count":6,"area":"rag"},{"id":"2509.03787","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","created":"2025-09-04","cited_by_count":6,"area":"rag"},{"id":"2510.11195","title":"RAG-Pull: Turning Retrieval into a Code-Injection Channel via Invisible Unicode Perturbations","created":"2025-10-13","cited_by_count":4,"area":"rag"},{"id":"2512.08289","title":"MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks","created":"2025-12-09","cited_by_count":4,"area":"rag"},{"id":"2603.21654","title":"Towards Secure Retrieval-Augmented Generation: A Comprehensive Review of Threats, Defenses and Benchmarks","created":"2026-03-23","cited_by_count":4,"area":"rag"},{"id":"2505.08728","title":"Securing RAG: A Risk Assessment and Mitigation Framework","created":"2025-05-13","cited_by_count":3,"area":"rag"},{"id":"2512.01335","title":"EmoRAG: Evaluating RAG Robustness to Symbolic Perturbations","created":"2025-12-01","cited_by_count":3,"area":"rag"},{"id":"2601.20615","title":"DRAINCODE: Stealthy Energy Consumption Attacks on Retrieval-Augmented Code Generation via Context Poisoning","created":"2026-01-28","cited_by_count":3,"area":"rag"},{"id":"2510.00586","title":"Eyes-on-Me: Scalable RAG Poisoning through Transferable Attention-Steering Attractors","created":"2025-10-01","cited_by_count":1,"area":"rag"},{"id":"2607.04379","title":"Knowledge Base Poisoning Attacks and Defense for Policy-Aware LLM-RAG Framework","created":"2026-07-05","cited_by_count":1,"area":"rag"},{"id":"2508.01084","title":"Provably Secure Retrieval-Augmented Generation","created":"2025-08-01","cited_by_count":0,"area":"rag"},{"id":"2605.20123","title":"BiRD: A Bidirectional Ranking Defense Mechanism for Retrieval Augmented Generation","created":"2026-05-19","cited_by_count":0,"area":"rag"},{"id":"2607.23838","title":"TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation","created":"2026-07-26","cited_by_count":0,"area":"rag"},{"id":"2609.16818","title":"InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generation","created":"2026-09-15","cited_by_count":0,"area":"rag"}],"next_cursor":null}