{"total":19,"rows":[{"id":"2502.06872","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","created":"2025-02-08","cited_by_count":30,"area":"rag"},{"id":"2412.18295","title":"Pirates of the RAG: Adaptively Attacking LLMs to Leak Knowledge Bases","created":"2024-12-24","cited_by_count":18,"area":"rag"},{"id":"2505.18543","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-05-24","cited_by_count":18,"area":"rag"},{"id":"2504.19101","title":"Privacy-Preserving Federated Embedding Learning for Localized Retrieval-Augmented Generation","created":"2025-04-27","cited_by_count":8,"area":"rag"},{"id":"2510.06719","title":"Differentially Private Synthetic Text Generation for Retrieval-Augmented Generation (RAG)","created":"2025-10-08","cited_by_count":6,"area":"rag"},{"id":"2605.24312","title":"Five Queries Are Enough: Query-Efficient and Surrogate-Free Membership Inference Attacks on RAG via Entailment","created":"2026-05-23","cited_by_count":4,"area":"rag"},{"id":"2505.08728","title":"Securing RAG: A Risk Assessment and Mitigation Framework","created":"2025-05-13","cited_by_count":3,"area":"rag"},{"id":"2505.00443","title":"Distributed Retrieval-Augmented Generation","created":"2025-05-01","cited_by_count":2,"area":"rag"},{"id":"2510.02964","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","created":"2025-10-03","cited_by_count":2,"area":"rag"},{"id":"2602.09319","title":"Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generation","created":"2026-02-10","cited_by_count":2,"area":"rag"},{"id":"2608.24977","title":"Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":1,"area":"rag"},{"id":"2508.01084","title":"Provably Secure Retrieval-Augmented Generation","created":"2025-08-01","cited_by_count":0,"area":"rag"},{"id":"2508.02872","title":"Highlight & Summarize: RAG without the jailbreaks","created":"2025-08-04","cited_by_count":0,"area":"rag"},{"id":"2511.10128","title":"RAGFort: Dual-Path Defense Against Proprietary Knowledge Base Extraction in Retrieval-Augmented Generation","created":"2025-11-13","cited_by_count":0,"area":"rag"},{"id":"2603.17292","title":"SEAL-Tag: Self-Tag Evidence Aggregation with Probabilistic Circuits for PII-Safe Retrieval-Augmented Generation","created":"2026-03-18","cited_by_count":0,"area":"rag"},{"id":"2604.10717","title":"Detecting RAG Extraction Attack via Dual-Path Runtime Integrity Game","created":"2026-04-12","cited_by_count":0,"area":"rag"},{"id":"2605.05818","title":"LeakDojo: Decoding the Leakage Threats of RAG Systems","created":"2026-05-07","cited_by_count":0,"area":"rag"},{"id":"2608.09001","title":"Mind the Hook: Source-Level Auditing of Privacy Defenses in Retrieval-Augmented Generation","created":"2026-08-10","cited_by_count":0,"area":"rag"},{"id":"2608.12675","title":"Privacy-Preserving RAG by Concealing Sensitive Information from External LLMs","created":"2026-08-13","cited_by_count":0,"area":"rag"}],"next_cursor":null}