Preprint
Jul 2026
RAGuard: A Layered Defense Framework for Retrieval-Augmented Generation Systems Against Data Poisoning
RAGuard, a layered defense against corpus-poisoning attacks on RAG pipelines, is introduced, showing that keyword-preserving poisons leave lexical retrievers such as BM25 essentially unaffected, an observation that delineates the boundary of the threat model.
Pushkal Kumar, Tucker Nielson, Tanish Kolhe et al.
· 3 citations
· ⚡1