Skip to content

UvA-DARE (Digital Academic Repository) Unsupervised Corpus Poisoning Attacks in Continuous Space for Dense Retrieval

· 1 citation · 49 references

TL;DR

This paper trains a perturbation model with the objective of maintaining the geometric distance between the original and adversarial document embeddings, while also maximizing the token-level dissimilarity be-tween the original and adversarial documents.

View source

Similar papers

#artificial intelligence Preprint Sep 2026

Micro-Collaborative Poisoning: A Distributed Attack on RAG Systems

The results indicate that Micro-Collaborative Poisoning is not driven by a single dominant poisoned passage, but by the accumulation of weak adversarial signals across retrieved sources, which achieves downstream influence while leaving a weaker explicit poisoning signature than direct poisoning.

Pedro Pereira, Eva Maia, Isabel Praça · 0 citations
Preprint Aug 2026

DSPrompt: Dynamic Soft Prompt Defense Against M-RAG Corruption

DSPrompt is proposed, a Dynamic Soft Prompt defense framework that directly reshapes the retriever's embedding semantics, without modifying the retrieval pipeline, and is consistently outperforming existing defense baselines at a fraction of their computational cost.

Chang Liu, Y. Lai, Ming-Yue Cui et al. · 0 citations
Aug 2026

Deep Supervised Adversarial Robust Hashing for Retrieval.

Deep Supervised Adversarial Robust Hashing (DSARH), an end-to-end framework that leverages similarity matrices and learnable hash codes to construct gradient-based worst-case perturbations, enabling efficient adversarial training and robust feature learning for retrieval, is proposed.

Xing-Wei Zhang, Gang Zhou, Xiaolong Zheng et al. · 0 citations
Open access Sep 2026

Adversarial Robustness in URL-Based Phishing Detection: Problem-Space Evaluation and Robust Feature Engineering

A set of robust features that capture stable domain characteristics, including lexical word validity, homoglyph disguises, brand impersonation, subdomain depth, character entropy, and transport-related signals are proposed, which substantially improves robustness under adversarial conditions.

Merve Yıldırım · 0 citations
Book Open access Aug 2026

Black-Box Embedding Inversion Attack on Vector Databases

A novel black-box image embedding inversion attack that reconstructs high-fidelity images using only query access to the embedding model or API, and introduces an embedding-guided cross-attention mechanism, where image embeddings serve as conditional signals to steer the generation process.

Lichao Sun, Yun-Cheng Wu, Hai-Chao Sha et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.