Pith Number

pith:VD5RVSSK

pith:2026:VD5RVSSKERXVY4OVRFAEQUCRGW

not attested not anchored not stored refs pending

Securing Retrieval-Augmented Generation: A Taxonomy of Attacks, Defenses, and Future Directions

Haoyang Li, Jason Chen Zhang, Lei Chen, Mingtao Zhang, Nicole Hu, Qing Li, Yongqi Zhang, Yuming Xu, Zhiyuan Wen, Zhuohan Ge

Secure RAG is fundamentally about protecting the external knowledge-access pipeline rather than the language model alone.

arxiv:2604.08304 v2 · 2026-04-09 · cs.CR · cs.AI

Open paper page JSON Open Graph Bundle Merged state Verified badge What is a Pith Number?

Add to your LaTeX paper

\usepackage{pith}
\pithnumber{VD5RVSSKERXVY4OVRFAEQUCRGW}

Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge

Record completeness

1 Bitcoin timestamp

2 Internet Archive

3 Author claim open · sign in to claim

4 Citations open

5 Replications open

✓ Portable graph bundle live · download bundle · merged state

The bundle contains the canonical record plus signed events. A mirror can host it anywhere and recompute the same current state with the deterministic merge algorithm.

Claims

C1strongest claim

We propose that secure RAG is fundamentally about the security of the external knowledge-access pipeline. We establish an operational boundary to separate inherent LLM flaws from RAG-introduced or RAG-amplified threats.

C2weakest assumption

That the proposed abstraction of the RAG workflow into six stages and the organization around three trust boundaries and four security surfaces comprehensively captures all RAG-specific threats without significant overlap or omission from the literature.

C3one line summary

This paper establishes a taxonomy of RAG security organized around six workflow stages, three trust boundaries, and four primary security surfaces, while reviewing attacks, defenses, and gaps in current protections.

Cited by

1 paper in Pith

PolyUQuest: Verifiable Structure-Aware Web RAG over Heterogeneous Graphs

Receipt and verification

First computed	2026-05-28T02:04:47.451359Z
Builder	pith-number-builder-2026-05-17-v1
Signature	Pith Ed25519 (`pith-v1-2026-05`) · public key
Schema	pith-number/v1.0

Canonical hash

a8fb1aca4a246f5c71d5894048505135abddc54326082e000d67ce1744eb90a5

Aliases

arxiv: 2604.08304 · arxiv_version: 2604.08304v2 · doi: 10.48550/arxiv.2604.08304 · pith_short_12: VD5RVSSKERXV · pith_short_16: VD5RVSSKERXVY4OV · pith_short_8: VD5RVSSK

Agent API

Resolver JSON Graph JSON Events JSON Schema Signing key

Verify this Pith Number yourself

curl -sH 'Accept: application/ld+json' https://pith.science/pith/VD5RVSSKERXVY4OVRFAEQUCRGW \
  | jq -c '.canonical_record' \
  | python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: a8fb1aca4a246f5c71d5894048505135abddc54326082e000d67ce1744eb90a5

Canonical record JSON

{
  "metadata": {
    "abstract_canon_sha256": "ca6c56f3d7611d3e55bfcad30e987946749fe8abf6113a18a3ac814469503e1e",
    "cross_cats_sorted": [
      "cs.AI"
    ],
    "license": "http://arxiv.org/licenses/nonexclusive-distrib/1.0/",
    "primary_cat": "cs.CR",
    "submitted_at": "2026-04-09T14:38:18Z",
    "title_canon_sha256": "463da7c2692ecfacfb80d86ebacd66d69b2df86fe8c90e5916fdabbe86f17ed7"
  },
  "schema_version": "1.0",
  "source": {
    "id": "2604.08304",
    "kind": "arxiv",
    "version": 2
  }
}