{"total":27,"rows":[{"id":"2512.16962","title":"MemoryGraft: Persistent Compromise of LLM Agents via Poisoned Experience Retrieval","created":"2025-12-18","cited_by_count":72,"area":"rag"},{"id":"2510.25025","title":"Secure Retrieval-Augmented Generation against Poisoning Attacks","created":"2025-10-28","cited_by_count":19,"area":"rag"},{"id":"2505.18543","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-05-24","cited_by_count":18,"area":"rag"},{"id":"2510.09710","title":"SeCon-RAG: A Two-Stage Semantic Filtering and Conflict-Free Framework for Trustworthy RAG","created":"2025-10-10","cited_by_count":13,"area":"rag"},{"id":"2510.13842","title":"ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checking","created":"2025-10-11","cited_by_count":10,"area":"rag"},{"id":"2509.20324","title":"RAG Security and Privacy: Formalizing the Threat Model and Attack Surface","created":"2025-09-24","cited_by_count":8,"area":"rag"},{"id":"2603.03919","title":"When Safety Becomes a Vulnerability: Exploiting LLM Alignment Homogeneity for Transferable Blocking in RAG","created":"2026-03-04","cited_by_count":4,"area":"rag"},{"id":"2603.21654","title":"Towards Secure Retrieval-Augmented Generation: A Comprehensive Review of Threats, Defenses and Benchmarks","created":"2026-03-23","cited_by_count":4,"area":"rag"},{"id":"2506.04390","title":"Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAG","created":"2025-06-04","cited_by_count":3,"area":"rag"},{"id":"2508.18652","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","created":"2025-08-26","cited_by_count":3,"area":"rag"},{"id":"2601.00274","title":"Making Theft Useless: Adulteration-Based Protection of Proprietary Knowledge Graphs in GraphRAG Systems","created":"2026-01-01","cited_by_count":2,"area":"rag"},{"id":"2510.00586","title":"Eyes-on-Me: Scalable RAG Poisoning through Transferable Attention-Steering Attractors","created":"2025-10-01","cited_by_count":1,"area":"rag"},{"id":"2602.08668","title":"Retrieval Pivot Attacks in Hybrid RAG: Measuring and Mitigating Amplified Leakage from Vector Seeds to Graph Expansion","created":"2026-02-09","cited_by_count":1,"area":"rag"},{"id":"2604.00387","title":"RAGShield: Detecting Numerical Claim Manipulation in Government RAG Systems","created":"2026-04-01","cited_by_count":1,"area":"rag"},{"id":"2605.26754","title":"Cordon-MAS: Defending RAG against Knowledge Poisoning via Information-Flow Control","created":"2026-05-26","cited_by_count":1,"area":"rag"},{"id":"2605.28074","title":"SilentRetrieval: Hijacking Retrieval-Augmented Generation via Semantically-Preserving Adversarial Data Poisoning","created":"2026-05-27","cited_by_count":1,"area":"rag"},{"id":"2606.01212","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","created":"2026-05-31","cited_by_count":1,"area":"rag"},{"id":"2508.01084","title":"Provably Secure Retrieval-Augmented Generation","created":"2025-08-01","cited_by_count":0,"area":"rag"},{"id":"2508.02872","title":"Highlight & Summarize: RAG without the jailbreaks","created":"2025-08-04","cited_by_count":0,"area":"rag"},{"id":"2604.20932","title":"Adaptive Defense Orchestration for RAG: A Sentinel-Strategist Architecture against Multi-Vector Attacks","created":"2026-04-22","cited_by_count":0,"area":"rag"},{"id":"2605.07273","title":"From Clouds to Hallucinations: Atmospheric Retrieval Hijacking in Remote Sensing Vision-Language RAG","created":"2026-05-08","cited_by_count":0,"area":"rag"},{"id":"2606.12469","title":"Influence Factors on RAG Poisoning","created":"2026-06-09","cited_by_count":0,"area":"rag"},{"id":"2606.25533","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2607.23838","title":"TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation","created":"2026-07-26","cited_by_count":0,"area":"rag"},{"id":"2608.02678","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","created":"2026-08-02","cited_by_count":0,"area":"rag"},{"id":"2608.08100","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","created":"2026-08-08","cited_by_count":0,"area":"rag"},{"id":"2610.04691","title":"RAGStress: A controlled benchmark for evaluating retrieval-augmented generation under knowledge-base degradation","created":"2026-10-03","cited_by_count":0,"area":"rag"}],"next_cursor":null}