{"total":19,"rows":[{"id":"2505.18543","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","created":"2025-05-24","cited_by_count":18,"area":"rag"},{"id":"2510.09710","title":"SeCon-RAG: A Two-Stage Semantic Filtering and Conflict-Free Framework for Trustworthy RAG","created":"2025-10-10","cited_by_count":13,"area":"rag"},{"id":"2601.03979","title":"SoK: Privacy Risks and Mitigations in Retrieval-Augmented Generation Systems","created":"2026-01-07","cited_by_count":7,"area":"rag"},{"id":"2602.06616","title":"Confundo: Learning to Generate Robust Poison for Practical RAG Systems","created":"2026-02-06","cited_by_count":5,"area":"rag"},{"id":"2604.08304","title":"Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions","created":"2026-04-09","cited_by_count":2,"area":"rag"},{"id":"2603.11501","title":"KEPo: Knowledge Evolution Poison on Graph-based Retrieval-Augmented Generation","created":"2026-03-12","cited_by_count":1,"area":"rag"},{"id":"2603.25164","title":"PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2026-03-26","cited_by_count":1,"area":"rag"},{"id":"2605.01782","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","created":"2026-05-03","cited_by_count":1,"area":"rag"},{"id":"2605.22041","title":"RADAR: Defending RAG Dynamically against Retrieval Corruption","created":"2026-05-21","cited_by_count":1,"area":"rag"},{"id":"2605.28074","title":"SilentRetrieval: Hijacking Retrieval-Augmented Generation via Semantically-Preserving Adversarial Data Poisoning","created":"2026-05-27","cited_by_count":1,"area":"rag"},{"id":"2606.01212","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","created":"2026-05-31","cited_by_count":1,"area":"rag"},{"id":"2607.00012","title":"PRA-RAG: Provably Robust Aggregation in Retrieval-Augmented Generation against Retrieval Corruption","created":"2026-05-08","cited_by_count":1,"area":"rag"},{"id":"2607.04379","title":"Knowledge Base Poisoning Attacks and Defense for Policy-Aware LLM-RAG Framework","created":"2026-07-05","cited_by_count":1,"area":"rag"},{"id":"2608.24977","title":"Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":1,"area":"rag"},{"id":"2605.20123","title":"BiRD: A Bidirectional Ranking Defense Mechanism for Retrieval Augmented Generation","created":"2026-05-19","cited_by_count":0,"area":"rag"},{"id":"2605.27432","title":"FD-RAG: Federated Dual-System Retrieval-Augmented Generation","created":"2026-05-22","cited_by_count":0,"area":"rag"},{"id":"2608.04756","title":"PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates","created":"2026-08-05","cited_by_count":0,"area":"rag"},{"id":"2609.14685","title":"ViTeGate: Visual-Textual Triggered Knowledge Poisoning for Vision-Language Retrieval-Augmented Generation","created":"2026-09-13","cited_by_count":0,"area":"rag"},{"id":"2610.19549","title":"GraphRAG-LTM: A Layered Threat Modeling Framework for Attacks on Graph Retrieval-Augmented Generation","created":"2026-10-14","cited_by_count":0,"area":"rag"}],"next_cursor":null}