Image de couverture de livre

One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems

Fuente: arXiv

Enregistré dans:

Détails bibliographiques
Auteurs principaux:	Chang, Zhiyuan, Li, Mingyang, Jia, Xiaojun, Wang, Junjie, Huang, Yuekai, Jiang, Ziyou, Liu, Yang, Wang, Qing
Format:	Preprint
Publié:	2025
Sujets:	Cryptography and Security Artificial Intelligence
Accès en ligne:	Acceder al recurso
Tags:	Ajouter un tag Pas de tags, Soyez le premier à ajouter un tag!

Documents similaires

Mimicking the Familiar: Dynamic Command Generation for Information Theft Attacks in LLM Tool-Learning System
par: Jiang, Ziyou, et autres
Publié: (2025)

Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems
par: Wang, Haowei, et autres
Publié: (2025)

Know Thy Enemy: Securing LLMs Against Prompt Injection via Diverse Data Synthesis and Instruction-Level Chain-of-Thought Learning
par: Chang, Zhiyuan, et autres
Publié: (2026)

Fall into a Pit, Gain in a Wit: Cognitive-Guided Harmful Meme Detection via Misjudgment Risk Pattern Retrieval
par: Wang, Wenshuo, et autres
Publié: (2025)

Knowledge Poisoning Attacks on Medical Multi-Modal Retrieval-Augmented Generation
par: Yang, Peiru, et autres
Publié: (2026)

PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models
par: Zou, Wei, et autres
Publié: (2024)

Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation
par: Liu, Yinuo, et autres
Publié: (2025)

PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systems
par: Wang, Haozhen, et autres
Publié: (2026)

RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation
par: Zhao, Tianzhe, et autres
Publié: (2025)

SynAT: Enhancing Security Knowledge Bases via Automatic Synthesizing Attack Tree from Crowd Discussions
par: Jiang, Ziyou, et autres
Publié: (2026)

Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning
par: Deng, Gelei, et autres
Publié: (2024)

The Gradient Puppeteer: Adversarial Domination in Gradient Leakage Attacks through Model Poisoning
par: Xiang, Kunlan, et autres
Publié: (2025)

CODE: A Contradiction-Based Deliberation Extension Framework for Overthinking Attacks on Retrieval-Augmented Generation
par: Zhang, Xiaolei, et autres
Publié: (2026)

AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery
par: Wang, Haowei, et autres
Publié: (2025)

MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks
par: Chen, Tailun, et autres
Publié: (2025)

From Allies to Adversaries: Manipulating LLM Tool-Calling through Adversarial Injection
par: Wang, Haowei, et autres
Publié: (2024)

Play Guessing Game with LLM: Indirect Jailbreak Attack with Implicit Clues
par: Chang, Zhiyuan, et autres
Publié: (2024)

Traceback of Poisoning Attacks to Retrieval-Augmented Generation
par: Zhang, Baolei, et autres
Publié: (2025)

CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models
par: Li, Chunyang, et autres
Publié: (2025)

Exploring the Security Threats of Knowledge Base Poisoning in Retrieval-Augmented Code Generation
par: Lin, Bo, et autres
Publié: (2025)

Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generation
par: Qi, Zhisheng, et autres
Publié: (2026)

Retrieval-Augmented Review Generation for Poisoning Recommender Systems
par: Yang, Shiyi, et autres
Publié: (2025)

Hidden in the Metadata: Stealth Poisoning Attacks on Multimodal Retrieval-Augmented Generation
par: Edemacu, Kennedy, et autres
Publié: (2026)

Practical Poisoning Attacks against Retrieval-Augmented Generation
par: Zhang, Baolei, et autres
Publié: (2025)

Secure Retrieval-Augmented Generation against Poisoning Attacks
par: Cheng, Zirui, et autres
Publié: (2025)

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation
par: Zhang, Baolei, et autres
Publié: (2025)

KEPo: Knowledge Evolution Poison on Graph-based Retrieval-Augmented Generation
par: Chen, Qizhi, et autres
Publié: (2026)

Adversarial Hubness Detector: Detecting Hubness Poisoning in Retrieval-Augmented Generation Systems
par: Habler, Idan, et autres
Publié: (2026)

RefineRAG: Word-Level Poisoning Attacks via Retriever-Guided Text Refinement
par: Wang, Ziye, et autres
Publié: (2026)

Disabling Self-Correction in Retrieval-Augmented Generation via Stealthy Retriever Poisoning
par: Dai, Yanbo, et autres
Publié: (2025)

RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis
par: Tan, Xue, et autres
Publié: (2024)

Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation
par: Li, Yuying, et autres
Publié: (2024)

UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation
par: Geng, Runpeng, et autres
Publié: (2025)

Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions
par: Xu, Yuming, et autres
Publié: (2026)

PatUntrack: Automated Generating Patch Examples for Issue Reports without Tracked Insecure Code
par: Jiang, Ziyou, et autres
Publié: (2024)

Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation
par: Zhang, Baolei, et autres
Publié: (2025)

Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications
par: Zhang, Quan, et autres
Publié: (2024)

Fine-Grained Privacy Extraction from Retrieval-Augmented Generation Systems via Knowledge Asymmetry Exploitation
par: Chen, Yufei, et autres
Publié: (2025)

PoisonCatcher: Revealing and Identifying LDP Poisoning Attacks in IIoT
par: Shuai, Lisha, et autres
Publié: (2024)

Tricking Retrievers with Influential Tokens: An Efficient Black-Box Corpus Poisoning Attack
par: Wang, Cheng, et autres
Publié: (2025)