New CRCP framework targets RAG corpus poisoning attacks

Researchers have developed a new framework called CRCP to address corpus poisoning attacks in Retrieval-Augmented Generation (RAG) systems. Existing attacks often fail when faced with realistic RAG pipelines that include chunking and reranking stages. CRCP aims to overcome this by optimizing for retrieval relevance, reranker consistency, and robustness across chunk boundaries, demonstrating significantly higher attack success rates in experiments. AI

IMPACT Highlights a realism gap in RAG security evaluations, suggesting new methods are needed to defend against sophisticated poisoning attacks.

RANK_REASON Academic paper detailing a new method for evaluating RAG system security. [lever_c_demoted from research: ic=1 ai=1.0]

Read on arXiv cs.AI →

• arXiv
• CRCP
• Retrieval-Augmented Generation

• paper
• safety

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →