{"total":27,"rows":[{"id":"2501.02968","title":"FlippedRAG: Black-Box Opinion Manipulation Adversarial Attacks to Retrieval-Augmented Generation Models","created":"2025-01-06","cited_by_count":25,"area":"rag"},{"id":"2505.07546","title":"GRADA: Graph-based Reranking against Adversarial Documents Attack","created":"2025-05-12","cited_by_count":10,"area":"rag"},{"id":"2503.06950","title":"CtrlRAG: Black-box Document Poisoning Attacks for Retrieval-Augmented Generation of Large Language Models","created":"2025-03-10","cited_by_count":5,"area":"rag"},{"id":"2512.08289","title":"MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks","created":"2025-12-09","cited_by_count":4,"area":"rag"},{"id":"2601.13112","title":"CODE: A Contradiction-Based Deliberation Extension Framework for Overthinking Attacks on Retrieval-Augmented Generation","created":"2026-01-19","cited_by_count":3,"area":"rag"},{"id":"2602.04711","title":"Addressing Corpus Knowledge Poisoning Attacks on RAG Using Sparse Attention","created":"2026-02-04","cited_by_count":3,"area":"rag"},{"id":"2508.20083","title":"DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)","created":"2025-08-27","cited_by_count":2,"area":"rag"},{"id":"2508.20408","title":"Fact or Facsimile? Evaluating the Factual Robustness of Modern Retrievers","created":"2025-08-28","cited_by_count":2,"area":"rag"},{"id":"2603.22934","title":"ProGRank: Probe-Gradient Reranking to Defend Dense-Retriever RAG from Corpus Poisoning","created":"2026-03-24","cited_by_count":2,"area":"rag"},{"id":"2604.08304","title":"Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions","created":"2026-04-09","cited_by_count":2,"area":"rag"},{"id":"2604.00387","title":"RAGShield: Detecting Numerical Claim Manipulation in Government RAG Systems","created":"2026-04-01","cited_by_count":1,"area":"rag"},{"id":"2605.26754","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","created":"2026-05-26","cited_by_count":1,"area":"rag"},{"id":"2606.18310","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","created":"2026-06-16","cited_by_count":1,"area":"rag"},{"id":"2607.00012","title":"PRA-RAG: Provably Robust Aggregation in Retrieval-Augmented Generation against Retrieval Corruption","created":"2026-05-08","cited_by_count":1,"area":"rag"},{"id":"2607.04379","title":"Knowledge Base Poisoning Attacks and Defense for Policy-Aware LLM-RAG Framework","created":"2026-07-05","cited_by_count":1,"area":"rag"},{"id":"2510.20768","title":"RAGRank: Using PageRank to Counter Poisoning in CTI LLM Pipelines","created":"2025-10-23","cited_by_count":0,"area":"rag"},{"id":"2606.11265","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","created":"2026-06-09","cited_by_count":0,"area":"rag"},{"id":"2606.25721","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2607.23838","title":"TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation","created":"2026-07-26","cited_by_count":0,"area":"rag"},{"id":"2608.02678","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","created":"2026-08-02","cited_by_count":0,"area":"rag"},{"id":"2608.23965","title":"RAGSentinel: Certifiable Geometric Consensus for Robust Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":0,"area":"rag"},{"id":"2608.28389","title":"CamoDocs: A Poisoning Attack Against Retrieval-Augmented Language Models Using Camouflaged Documents","created":"2026-08-28","cited_by_count":0,"area":"rag"},{"id":"2609.00470","title":"TRIS: A Tri-Layer Retrieval Integrity Sieve Against Knowledge Poisoning","created":"2026-08-31","cited_by_count":0,"area":"rag"},{"id":"2609.00543","title":"Feedback-Assisted Trust Propagation over Document Relation Graphs for Retrieval-Augmented Generation","created":"2026-09-01","cited_by_count":0,"area":"rag"},{"id":"2609.25469","title":"RAG-NAROK: Retrieval-Aware Knowledge Corpus Poisoning in RAG with Source-specific Refutation","created":"2026-09-21","cited_by_count":0,"area":"rag"},{"id":"2609.27090","title":"Divide and Doubt: Diverse Distributed Poisoning for Retrieval-Augmented Generation","created":"2026-09-22","cited_by_count":0,"area":"rag"},{"id":"2610.08571","title":"RAG-PIBench: A Leakage-Aware Benchmark for Prompt-Injection Detection in Trustworthy RAG Systems","created":"2026-10-06","cited_by_count":0,"area":"rag"}],"next_cursor":null}