Cover Image

Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Naseh, Ali, Peng, Yuefeng, Suri, Anshuman, Chaudhari, Harsh, Oprea, Alina, Houmansadr, Amir
Format:	Preprint
Published:	2025
Subjects:	Cryptography and Security Artificial Intelligence Computation and Language Information Retrieval Machine Learning
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Text-to-Image Models Leave Identifiable Signatures: Implications for Leaderboard Security
by: Naseh, Ali, et al.
Published: (2025)

Exploiting Leaderboards for Large-Scale Distribution of Malicious Models
by: Suri, Anshuman, et al.
Published: (2025)

Identifying Models Behind Text-to-Image Leaderboards
by: Naseh, Ali, et al.
Published: (2026)

R1dacted: Investigating Local Censorship in DeepSeek's R1 Language Model
by: Naseh, Ali, et al.
Published: (2025)

Diffence: Fencing Membership Privacy With Diffusion Models
by: Peng, Yuefeng, et al.
Published: (2023)

Mask-based Membership Inference Attacks for Retrieval-Augmented Generation
by: Liu, Mingrui, et al.
Published: (2024)

Data Extraction Attacks in Retrieval-Augmented Generation via Backdoors
by: Peng, Yuefeng, et al.
Published: (2024)

Phantom: General Backdoor Attacks on Retrieval Augmented Language Generation
by: Chaudhari, Harsh, et al.
Published: (2024)

Retrieval-Augmented Review Generation for Poisoning Recommender Systems
by: Yang, Shiyi, et al.
Published: (2025)

A Decentralized Retrieval Augmented Generation System with Source Reliabilities Secured on Blockchain
by: Lu, Yining, et al.
Published: (2025)

Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models
by: Gong, Yuyang, et al.
Published: (2025)

Differentially Private Datastore Generation for Retrieval-Augmented Inference
by: Abouelenein, Abdelrahman, et al.
Published: (2026)

Membership Inference Attacks on Vision-Language-Action Models
by: Peng, Yuefeng, et al.
Published: (2026)

OSLO: One-Shot Label-Only Membership Inference Attacks
by: Peng, Yuefeng, et al.
Published: (2024)

DrunkAgent: Stealthy Memory Corruption in LLM-Powered Recommender Agents
by: Yang, Shiyi, et al.
Published: (2025)

Membership Inference Attacks on LLM-based Recommender Systems
by: He, Jiajie, et al.
Published: (2025)

Improving User Privacy in Personalized Generation: Client-Side Retrieval-Augmented Modification of Server-Side Generated Speculations
by: Salemi, Alireza, et al.
Published: (2026)

Synthetic Query Generation for Privacy-Preserving Deep Retrieval Systems using Differentially Private Language Models
by: Carranza, Aldo Gael, et al.
Published: (2023)

BiRD: A Bidirectional Ranking Defense Mechanism for Retrieval Augmented Generation
by: Gao, Chengcai, et al.
Published: (2026)

SoK: Agentic Retrieval-Augmented Generation (RAG): Taxonomy, Architectures, Evaluation, and Research Directions
by: Mishra, Saroj, et al.
Published: (2026)

DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation
by: Gong, Yuyang, et al.
Published: (2026)

Your RAG is Unfair: Exposing Fairness Vulnerabilities in Retrieval-Augmented Generation via Backdoor Attacks
by: Bagwe, Gaurav, et al.
Published: (2025)

Membership Inference Attacks on Recommender System: A Survey
by: He, Jiajie, et al.
Published: (2025)

The RAG Paradox: A Black-Box Attack Exploiting Unintentional Vulnerabilities in Retrieval-Augmented Generation Systems
by: Choi, Chanwoo, et al.
Published: (2025)

Iteratively Prompting Multimodal LLMs to Reproduce Natural and AI-Generated Images
by: Naseh, Ali, et al.
Published: (2024)

Synthetic Data Can Mislead Evaluations: Membership Inference as Machine Text Detection
by: Naseh, Ali, et al.
Published: (2025)

ProveRAG: Provenance-Driven Vulnerability Analysis with Automated Retrieval-Augmented LLMs
by: Fayyazi, Reza, et al.
Published: (2024)

Traceback of Poisoning Attacks to Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

PIR-RAG: A System for Private Information Retrieval in Retrieval-Augmented Generation
by: Wang, Baiqiang, et al.
Published: (2025)

Practical Poisoning Attacks against Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Secure Retrieval-Augmented Generation against Poisoning Attacks
by: Cheng, Zirui, et al.
Published: (2025)

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Exposing Privacy Risks in Graph Retrieval-Augmented Generation
by: Liu, Jiale, et al.
Published: (2025)

Grounded Cache Routing for Retrieval-Augmented Generation: When Is It Safe to Reuse an Answer?
by: Shah, Syed Huma
Published: (2026)

BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models
by: Xue, Jiaqi, et al.
Published: (2024)

Exposing Citation Vulnerabilities in Generative Engines
by: Mochizuki, Riku, et al.
Published: (2025)

A Bayesian Approach to Membership Inference for Statistical Release
by: Oakley, Lisa, et al.
Published: (2026)

Toward a Principled Framework for Agent Safety Measurement
by: Lin, Shuyi, et al.
Published: (2026)

MoRSE: Bridging the Gap in Cybersecurity Expertise with Retrieval Augmented Generation
by: Simoni, Marco, et al.
Published: (2024)

Retrieval Augmented Generation Based LLM Evaluation For Protocol State Machine Inference With Chain-of-Thought Reasoning
by: Maklad, Youssef, et al.
Published: (2025)