{"total":17,"rows":[{"id":"2512.16962","title":"MemoryGraft: Persistent Compromise of LLM Agents via Poisoned Experience Retrieval","created":"2025-12-18","cited_by_count":72,"area":"rag"},{"id":"2602.04711","title":"Addressing Corpus Knowledge Poisoning Attacks on RAG Using Sparse Attention","created":"2026-02-04","cited_by_count":3,"area":"rag"},{"id":"2605.03482","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","created":"2026-05-05","cited_by_count":3,"area":"rag"},{"id":"2603.22934","title":"ProGRank: Probe-Gradient Reranking to Defend Dense-Retriever RAG from Corpus Poisoning","created":"2026-03-24","cited_by_count":2,"area":"rag"},{"id":"2604.08304","title":"Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions","created":"2026-04-09","cited_by_count":2,"area":"rag"},{"id":"2602.08668","title":"Retrieval Pivot Attacks in Hybrid RAG: Measuring and Mitigating Amplified Leakage from Vector Seeds to Graph Expansion","created":"2026-02-09","cited_by_count":1,"area":"rag"},{"id":"2605.01782","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","created":"2026-05-03","cited_by_count":1,"area":"rag"},{"id":"2605.26754","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","created":"2026-05-26","cited_by_count":1,"area":"rag"},{"id":"2608.06947","title":"When Context Bites: Detecting RAG Poisoning via Document-Level Attention Collapse","created":"2026-08-07","cited_by_count":1,"area":"rag"},{"id":"2608.24977","title":"Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":1,"area":"rag"},{"id":"2603.17176","title":"Towards Unsupervised Adversarial Document Detection in Retrieval Augmented Generation Systems","created":"2026-03-17","cited_by_count":0,"area":"rag"},{"id":"2606.11265","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","created":"2026-06-09","cited_by_count":0,"area":"rag"},{"id":"2606.25721","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2607.23838","title":"TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation","created":"2026-07-26","cited_by_count":0,"area":"rag"},{"id":"2608.13010","title":"RAGSieve: Self-Referenced Local Contrast for Knowledge-Poison Detection in Retrieval-Augmented Generation","created":"2026-08-13","cited_by_count":0,"area":"rag"},{"id":"2609.14649","title":"CIG-MIA: Context-Induced Information Gain Membership Inference Attacks against Retrieval-Augmented Generation","created":"2026-09-13","cited_by_count":0,"area":"rag"},{"id":"2609.16818","title":"InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generation","created":"2026-09-15","cited_by_count":0,"area":"rag"}],"next_cursor":null}