mlsanityData to 14 Oct 2026

Toward Robust RALMs: Revealing the Impact of Imperfect Retrieval on Retrieval-Augmented Language Models

arXiv 2410.15107 ↗First posted 19 Oct 2024cs.CLcited by 8

On the map: Retrieval-augmented generation → Privacy and security of RAG

Abstract (arXiv)

Retrieval Augmented Language Models (RALMs) have gained significant attention for their ability to generate accurate answer and improve efficiency. However, RALMs are inherently vulnerable to imperfect information due to their reliance on the imperfect retriever or knowledge source. We identify three common scenarios-unanswerable, adversarial, conflicting-where retrieved document sets can confuse RALM with plausible real-world examples. We present the first comprehensive investigation to assess how well RALMs detect and handle such problematic scenarios. Among these scenarios, to systematically examine adversarial robustness we propose a new adversarial attack method, Generative model-based ADVersarial attack (GenADV) and a novel metric Robustness under Additional Document (RAD). Our findings reveal that RALMs often fail to identify the unanswerability or contradiction of a document set, which frequently leads to hallucinations. Moreover, we show the addition of an adversary significantly degrades RALM's performance, with the model becoming even more vulnerable when the two scenarios overlap (adversarial+unanswerable). Our research identifies critical areas for assessing and enhancing the robustness of RALMs, laying the foundation for the development of more robust models.

Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Privacy and security of RAG, one of 15 directions in Retrieval-augmented generation. Builds on 49 of its 52 references that are in the map. First posted on arXiv 19 Oct 2024.

Builds on

49 of 52 references.

References · 49

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2023GPT-4 Technical Reportcited by 18,396
  3. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  4. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
  5. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
  6. 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,944
  7. 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,824
  8. 2023Qwen Technical Reportcited by 3,344
  9. 2023Mistral 7Bcited by 3,164
  10. 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
  11. 2020REALM: Retrieval-Augmented Language Model Pre-Trainingcited by 2,141
  12. 2023Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflectioncited by 1,839
37 more
  1. 2020Leveraging Passage Retrieval with Generative Models for Open Domain Question Answeringcited by 1,210
  2. 2023PaLM 2 Technical Reportcited by 1,162
  3. 2022When Not to Trust Language Models: Investigating Effectiveness of Parametric and Non-Parametric Memoriescited by 1,128
  4. 2022Atlas: Few-shot Learning with Retrieval Augmented Language Modelscited by 952
  5. 2024Gemma: Open Models Based on Gemini Research and Technologycited by 916
  6. 2023Large Language Models Can Be Easily Distracted by Irrelevant Contextcited by 841
  7. 2023REPLUG: Retrieval-Augmented Black-Box Language Modelscited by 792
  8. 2017Reading Wikipedia to Answer Open-Domain Questionscited by 777
  9. 2023In-Context Retrieval-Augmented Language Modelscited by 702
  10. 2019Latent Retrieval for Weakly Supervised Open Domain Question Answeringcited by 695
  11. 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
  12. 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 571
  13. 2023Is ChatGPT a General-Purpose Natural Language Processing Task Solver?cited by 488
  14. 2021ColBERTv2: Effective and Efficient Retrieval via Lightweight Late Interactioncited by 476
  15. 2023Making Retrieval-Augmented Language Models Robust to Irrelevant Contextcited by 369
  16. 2021Entity-Based Knowledge Conflicts in Question Answeringcited by 356
  17. 2023Adaptive Chameleon or Stubborn Sloth: Revealing the Behavior of Large Language Models in Knowledge Conflictscited by 341
  18. 2022Selection-Inference: Exploiting Large Language Models for Interpretable Logical Reasoningcited by 334
  19. 2023RECOMP: Improving Retrieval-Augmented LMs with Compression and Selective Augmentationcited by 256
  20. 2022Out-of-Distribution Detection and Selective Generation for Conditional Language Modelscited by 197
  21. 2023RA-DIT: Retrieval-Augmented Dual Instruction Tuningcited by 195
  22. 2023Chain-of-Note: Enhancing Robustness in Retrieval-Augmented Language Modelscited by 184
  23. 2020How Context Affects Language Models' Factual Predictionscited by 181
  24. 2022Large Language Models with Controllable Working Memorycited by 169
  25. 2019Combating Adversarial Misspellings with Robust Word Recognitioncited by 163
  26. 2023Orca 2: Teaching Small Language Models How to Reasoncited by 159
  27. 2023Investigating the Factual Knowledge Boundary of Large Language Models with Retrieval Augmentationcited by 147
  28. 2022Rich Knowledge Sources Bring Complex Knowledge Conflicts: Recalibrating Models to Reflect Conflicting Evidencecited by 144
  29. 2020Contextualized Perturbation for Textual Adversarial Attackcited by 136
  30. 2023Evaluating Open-Domain Question Answering in the Era of Large Language Modelscited by 111
  31. 2023Won't Get Fooled Again: Answering Questions with False Premisescited by 48
  32. 2020Challenges in Information-Seeking QA: Unanswerable Questions and Paragraph Retrievalcited by 44
  33. 2022Synthetic Disinformation Attacks on Automated Fact Verification Systemscited by 44
  34. 2021Attacking Open-domain Question Answering by Injecting Misinformationcited by 41
  35. 2022Standing on the Shoulders of Giant Frozen Language Modelscited by 33
  36. 2022Phrase-level Textual Adversarial Attack with Label Preservationcited by 23
  37. 2022TASA: Deceiving Question Answering Models by Twin Answer Sentences Attackcited by 15

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 3; 2026: 5.

8 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024Enhancing Noise Robustness of Retrieval-Augmented Language Models with Adaptive Adversarial Training
  2. 2025Do Retrieval-Augmented Language Models Adapt to Varying User Needs?
  3. 2023Why So Gullible? Enhancing the Robustness of Retrieval-Augmented Models against Counterfactual Noise
  4. 2024Evaluating Robustness of Generative Search Engine on Adversarial Factual Questions
  5. 2024On the Vulnerability of Applying Retrieval-Augmented Generation within Knowledge-Intensive Application Domains
  6. 2026Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation
  7. 2024Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks
  8. 2025Evaluating the Retrieval Robustness of Large Language Models