{"total":17,"rows":[{"id":"2502.01386","title":"Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models","created":"2025-02-03","cited_by_count":33,"area":"rag"},{"id":"2601.03979","title":"SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems","created":"2026-01-07","cited_by_count":7,"area":"rag"},{"id":"2602.06616","title":"Confundo: Learning to Generate Robust Poison for Practical RAG Systems","created":"2026-02-06","cited_by_count":5,"area":"rag"},{"id":"2508.18652","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","created":"2025-08-26","cited_by_count":3,"area":"rag"},{"id":"2601.13112","title":"CODE: A Contradiction-Based Deliberation Extension Framework for Overthinking Attacks on Retrieval-Augmented Generation","created":"2026-01-19","cited_by_count":3,"area":"rag"},{"id":"2604.08304","title":"Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions","created":"2026-04-09","cited_by_count":2,"area":"rag"},{"id":"2606.21842","title":"Agent-Assisted Side-Channel Attacks on Non-Prefix KV Cache in RAG","created":"2026-06-20","cited_by_count":2,"area":"rag"},{"id":"2607.26339","title":"RAGuard: A Layered Defense Framework for Retrieval-Augmented Generation Systems Against Data Poisoning","created":"2026-07-28","cited_by_count":2,"area":"rag"},{"id":"2512.23307","title":"RobustMask: Certified Robustness against Adversarial Neural Ranking Attack via Randomized Masking","created":"2025-12-29","cited_by_count":1,"area":"rag"},{"id":"2609.02774","title":"CodePoisonRAG: Knowledge Poisoning Attacks on Retrieval-Augmented Code Generation","created":"2026-09-02","cited_by_count":1,"area":"rag"},{"id":"2602.06495","title":"Graphs Don't Stay Secret: Practical Subgraph Reconstruction Attacks on Defended Graph RAG","created":"2026-02-06","cited_by_count":0,"area":"rag"},{"id":"2604.18663","title":"Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation","created":"2026-04-20","cited_by_count":0,"area":"rag"},{"id":"2606.25533","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2606.25721","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2607.23838","title":"TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation","created":"2026-07-26","cited_by_count":0,"area":"rag"},{"id":"2608.04756","title":"PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates","created":"2026-08-05","cited_by_count":0,"area":"rag"},{"id":"2608.28389","title":"CamoDocs: A Poisoning Attack Against Retrieval-Augmented Language Models Using Camouflaged Documents","created":"2026-08-28","cited_by_count":0,"area":"rag"}],"next_cursor":null}