Cover Image

Confundo: Learning to Generate Robust Poison for Practical RAG Systems

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Hu, Haoyang, Jiang, Zhejun, Lyu, Yueming, Zhang, Junyuan, Liu, Yi, Chow, Ka-Ho
Format:	Preprint
Published:	2026
Subjects:	Cryptography and Security Machine Learning
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Building Gradient Bridges: Label Leakage from Restricted Gradient Sharing in Federated Learning
by: Zhang, Rui, et al.
Published: (2024)

On the Adversarial Robustness of Graph Neural Networks with Graph Reduction
by: Wu, Kerui, et al.
Published: (2024)

RADAR: Defending RAG Dynamically against Retrieval Corruption
by: Chen, Ziyuan, et al.
Published: (2026)

Imperio: Language-Guided Backdoor Attacks for Arbitrary Model Control
by: Chow, Ka-Ho, et al.
Published: (2024)

On the Efficiency of Privacy Attacks in Federated Learning
by: Tabassum, Nawrin, et al.
Published: (2024)

On the Robustness of Graph Reduction Against GNN Backdoor
by: Zhu, Yuxuan, et al.
Published: (2024)

PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models
by: Zou, Wei, et al.
Published: (2024)

Practical Poisoning Attacks against Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Sybil-based Virtual Data Poisoning Attacks in Federated Learning
by: Zhu, Changxun, et al.
Published: (2025)

On Evaluating the Poisoning Robustness of Federated Learning under Local Differential Privacy
by: Wang, Zijian, et al.
Published: (2025)

Poison with Style: A Practical Poisoning Attack on Code Large Language Models
by: Tran, Khang, et al.
Published: (2026)

Byzantine Failures Harm the Generalization of Robust Distributed Learning Algorithms More Than Data Poisoning
by: Boudou, Thomas, et al.
Published: (2025)

Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation
by: Liu, Yinuo, et al.
Published: (2025)

Poisoning Web-Scale Training Datasets is Practical
by: Carlini, Nicholas, et al.
Published: (2023)

Semantic Chameleon: Corpus-Dependent Poisoning Attacks and Defenses in RAG Systems
by: Thornton, Scott
Published: (2026)

Architecture Matters: Comparing RAG Systems under Knowledge Base Poisoning
by: Korn, Samuel
Published: (2026)

EnCAgg: Enhanced Clustering Aggregation for Robust Federated Learning against Dynamic Model Poisoning
by: Zhang, Tianyun, et al.
Published: (2026)

Geminio: Language-Guided Gradient Inversion Attacks in Federated Learning
by: Shan, Junjie, et al.
Published: (2024)

Towards Efficient and Certified Recovery from Poisoning Attacks in Federated Learning
by: Jiang, Yu, et al.
Published: (2024)

Transferable Availability Poisoning Attacks
by: Liu, Yiyong, et al.
Published: (2023)

Traceback of Poisoning Attacks to Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

FuncPoison: Poisoning Function Library to Hijack Multi-agent Autonomous Driving Systems
by: Long, Yuzhen, et al.
Published: (2025)

FedRDF: A Robust and Dynamic Aggregation Function against Poisoning Attacks in Federated Learning
by: Campos, Enrique Mármol, et al.
Published: (2024)

Adaptive and Robust Data Poisoning Detection and Sanitization in Wearable IoT Systems using Large Language Models
by: Mithsara, W. K. M, et al.
Published: (2025)

Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs
by: Wang, Linlin, et al.
Published: (2025)

Visualizing the Shadows: Unveiling Data Poisoning Behaviors in Federated Learning
by: Zhang, Xueqing, et al.
Published: (2024)

GShield: Mitigating Poisoning Attacks in Federated Learning
by: M., Sameera K., et al.
Published: (2025)

UTrace: Poisoning Forensics for Private Collaborative Learning
by: Rose, Evan, et al.
Published: (2024)

ControlNET: A Firewall for RAG-based LLM System
by: Yao, Hongwei, et al.
Published: (2025)

Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks
by: Gosch, Lukas, et al.
Published: (2024)

Like Oil and Water: Group Robustness Methods and Poisoning Defenses May Be at Odds
by: Panaitescu-Liess, Michael-Andrei, et al.
Published: (2025)

Shake to Leak: Fine-tuning Diffusion Models Can Amplify the Generative Privacy Risk
by: Li, Zhangheng, et al.
Published: (2024)

Online Poisoning Attack Against Reinforcement Learning under Black-box Environments
by: Li, Jianhui, et al.
Published: (2024)

Harmless Backdoor-based Client-side Watermarking in Federated Learning
by: Luo, Kaijing, et al.
Published: (2024)

Data Poisoning Attacks in Intelligent Transportation Systems: A Survey
by: Wang, Feilong, et al.
Published: (2024)

Local Environment Poisoning Attacks on Federated Reinforcement Learning
by: Ma, Evelyn, et al.
Published: (2023)

Eyes-on-Me: Scalable RAG Poisoning through Transferable Attention-Steering Attractors
by: Chen, Yen-Shan, et al.
Published: (2025)

Secure Retrieval-Augmented Generation against Poisoning Attacks
by: Cheng, Zirui, et al.
Published: (2025)

Assessing the Effectiveness of Membership Inference on Generative Music
by: Chow, Kurtis, et al.
Published: (2025)

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)