Cover Image

DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Gong, Yuyang, Chen, Miaokun, Liu, Jiawei, Chen, Zhuo, He, Guoxiu, Lu, Wei, Wang, XiaoFeng, Liu, Xiaozhong
Format:	Preprint
Published:	2026
Subjects:	Computation and Language Artificial Intelligence Cryptography and Security Information Retrieval
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models
by: Gong, Yuyang, et al.
Published: (2025)

FlippedRAG: Black-Box Opinion Manipulation Adversarial Attacks to Retrieval-Augmented Generation Models
by: Chen, Zhuo, et al.
Published: (2025)

RobustMask: Certified Robustness against Adversarial Neural Ranking Attack via Randomized Masking
by: Liu, Jiawei, et al.
Published: (2025)

Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Models
by: Chen, Zhuo, et al.
Published: (2024)

Practical Poisoning Attacks against Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Multi-granular Adversarial Attacks against Black-box Neural Ranking Models
by: Liu, Yu-An, et al.
Published: (2024)

Secure Retrieval-Augmented Generation against Poisoning Attacks
by: Cheng, Zirui, et al.
Published: (2025)

MAWSEO: Adversarial Wiki Search Poisoning for Illicit Online Promotion
by: Lin, Zilong, et al.
Published: (2023)

Unveiling the Resilience of LLM-Enhanced Search Engines against Black-Hat SEO Manipulation
by: Chen, Pei, et al.
Published: (2026)

Traceback of Poisoning Attacks to Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models
by: Zhang, Yucheng, et al.
Published: (2024)

The RAG Paradox: A Black-Box Attack Exploiting Unintentional Vulnerabilities in Retrieval-Augmented Generation Systems
by: Choi, Chanwoo, et al.
Published: (2025)

Mask-based Membership Inference Attacks for Retrieval-Augmented Generation
by: Liu, Mingrui, et al.
Published: (2024)

IndirectAD: Practical Data Poisoning Attacks against Recommender Systems for Item Promotion
by: Wang, Zihao, et al.
Published: (2025)

Your RAG is Unfair: Exposing Fairness Vulnerabilities in Retrieval-Augmented Generation via Backdoor Attacks
by: Bagwe, Gaurav, et al.
Published: (2025)

Few-shot Model Extraction Attacks against Sequential Recommender Systems
by: Zhang, Hui, et al.
Published: (2024)

LocalAlign: Enabling Generalizable Prompt Injection Defense via Generation of Near-Target Adversarial Examples for Alignment Training
by: Gong, Yuyang, et al.
Published: (2026)

Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Exposing Privacy Risks in Graph Retrieval-Augmented Generation
by: Liu, Jiale, et al.
Published: (2025)

Connect the Dots: Knowledge Graph-Guided Crawler Attack on Retrieval-Augmented Generation Systems
by: Yao, Mengyu, et al.
Published: (2026)

Retrieval-Augmented Review Generation for Poisoning Recommender Systems
by: Yang, Shiyi, et al.
Published: (2025)

KG-DF: A Black-box Defense Framework against Jailbreak Attacks Based on Knowledge Graphs
by: Liu, Shuyuan, et al.
Published: (2025)

MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks
by: Chen, Tailun, et al.
Published: (2025)

SafeRAG: Benchmarking Security in Retrieval-Augmented Generation of Large Language Model
by: Liang, Xun, et al.
Published: (2025)

ProveRAG: Provenance-Driven Vulnerability Analysis with Automated Retrieval-Augmented LLMs
by: Fayyazi, Reza, et al.
Published: (2024)

BiRD: A Bidirectional Ranking Defense Mechanism for Retrieval Augmented Generation
by: Gao, Chengcai, et al.
Published: (2026)

Manipulating Recommender Systems: A Survey of Poisoning Attacks and Countermeasures
by: Nguyen, Thanh Toan, et al.
Published: (2024)

PIR-RAG: A System for Private Information Retrieval in Retrieval-Augmented Generation
by: Wang, Baiqiang, et al.
Published: (2025)

The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems
by: Song, Hongru, et al.
Published: (2025)

Trans-RAG: Query-Centric Vector Transformation for Secure Cross-Organizational Retrieval
by: Liu, Yu, et al.
Published: (2026)

Differentially Private Datastore Generation for Retrieval-Augmented Inference
by: Abouelenein, Abdelrahman, et al.
Published: (2026)

BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models
by: Xue, Jiaqi, et al.
Published: (2024)

Membership Inference Attacks on Recommender System: A Survey
by: He, Jiajie, et al.
Published: (2025)

MoRSE: Bridging the Gap in Cybersecurity Expertise with Retrieval Augmented Generation
by: Simoni, Marco, et al.
Published: (2024)

A Decentralized Retrieval Augmented Generation System with Source Reliabilities Secured on Blockchain
by: Lu, Yining, et al.
Published: (2025)

Adversarial Attacks to Multi-Modal Models
by: Dou, Zhihao, et al.
Published: (2024)

RAID: An In-Training Defense against Attribute Inference Attacks in Recommender Systems
by: Feng, Xiaohua, et al.
Published: (2025)

Rotated Robustness: A Training-Free Defense against Bit-Flip Attacks on Large Language Models
by: Liu, Deng, et al.
Published: (2026)

Retrieval Pivot Attacks in Hybrid RAG: Measuring and Mitigating Amplified Leakage from Vector Seeds to Graph Expansion
by: Thornton, Scott
Published: (2026)