{"total":16,"rows":[{"id":"2606.12703","title":"SMSR: Certified Defence Against Runtime Memory Poisoning in Persistent LLM Agent Systems","created":"2026-06-10","cited_by_count":4,"area":"rag"},{"id":"2602.04711","title":"Addressing Corpus Knowledge Poisoning Attacks on RAG Using Sparse Attention","created":"2026-02-04","cited_by_count":3,"area":"rag"},{"id":"2604.08304","title":"Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions","created":"2026-04-09","cited_by_count":2,"area":"rag"},{"id":"2605.01782","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","created":"2026-05-03","cited_by_count":1,"area":"rag"},{"id":"2605.22041","title":"RADAR: Defending RAG Dynamically against Retrieval Corruption","created":"2026-05-21","cited_by_count":1,"area":"rag"},{"id":"2606.01212","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","created":"2026-05-31","cited_by_count":1,"area":"rag"},{"id":"2608.06947","title":"When Context Bites: Detecting RAG Poisoning via Document-Level Attention Collapse","created":"2026-08-07","cited_by_count":1,"area":"rag"},{"id":"2608.24977","title":"Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":1,"area":"rag"},{"id":"2604.20932","title":"Adaptive Defense Orchestration for RAG: A Sentinel-Strategist Architecture against Multi-Vector Attacks","created":"2026-04-22","cited_by_count":0,"area":"rag"},{"id":"2605.00460","title":"CleanBase: Detecting Malicious Documents in RAG Knowledge Databases","created":"2026-05-01","cited_by_count":0,"area":"rag"},{"id":"2605.20123","title":"BiRD: A Bidirectional Ranking Defense Mechanism for Retrieval Augmented Generation","created":"2026-05-19","cited_by_count":0,"area":"rag"},{"id":"2606.25721","title":"Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution","created":"2026-06-24","cited_by_count":0,"area":"rag"},{"id":"2608.13010","title":"RAGSieve: Self-Referenced Local Contrast for Knowledge-Poison Detection in Retrieval-Augmented Generation","created":"2026-08-13","cited_by_count":0,"area":"rag"},{"id":"2609.00543","title":"Feedback-Assisted Trust Propagation over Document Relation Graphs for Retrieval-Augmented Generation","created":"2026-09-01","cited_by_count":0,"area":"rag"},{"id":"2609.16818","title":"InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generation","created":"2026-09-15","cited_by_count":0,"area":"rag"},{"id":"2609.27090","title":"Divide and Doubt: Diverse Distributed Poisoning for Retrieval-Augmented Generation","created":"2026-09-22","cited_by_count":0,"area":"rag"}],"next_cursor":null}