{"id":"https://openalex.org/W7164190187","doi":"https://doi.org/10.1016/j.eswa.2026.133154","title":"SD-RAG: A framework for secure selective disclosure in retrieval-augmented generation against single-turn prompt-leaking attacks","display_name":"SD-RAG: A framework for secure selective disclosure in retrieval-augmented generation against single-turn prompt-leaking attacks","publication_year":2026,"publication_date":"2026-06-10","ids":{"openalex":"https://openalex.org/W7164190187","doi":"https://doi.org/10.1016/j.eswa.2026.133154"},"language":"en","primary_location":{"id":"doi:10.1016/j.eswa.2026.133154","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.eswa.2026.133154","pdf_url":null,"source":{"id":"https://openalex.org/S13144211","display_name":"Expert Systems with Applications","issn_l":"0957-4174","issn":["0957-4174","1873-6793"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Expert Systems with Applications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.eswa.2026.133154","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138391335","display_name":"Aiman Al Masoud","orcid":"https://orcid.org/0009-0001-7040-4292"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Aiman Al Masoud","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0001-7040-4292","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059446425","display_name":"Marco Arazzi","orcid":"https://orcid.org/0000-0002-3371-307X"},"institutions":[{"id":"https://openalex.org/I25217355","display_name":"University of Pavia","ror":"https://ror.org/00s6t1f81","country_code":"IT","type":"education","lineage":["https://openalex.org/I25217355"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Marco Arazzi","raw_affiliation_strings":["University of Pavia, Department of Electrical, Computer and Biomedical Engineering, Via A. Ferrata, 5, Pavia, 27100, Italy"],"raw_orcid":"https://orcid.org/0000-0002-3371-307X","affiliations":[{"raw_affiliation_string":"University of Pavia, Department of Electrical, Computer and Biomedical Engineering, Via A. Ferrata, 5, Pavia, 27100, Italy","institution_ids":["https://openalex.org/I25217355"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085793134","display_name":"Antonino Nocera","orcid":"https://orcid.org/0000-0003-2120-2341"},"institutions":[{"id":"https://openalex.org/I25217355","display_name":"University of Pavia","ror":"https://ror.org/00s6t1f81","country_code":"IT","type":"education","lineage":["https://openalex.org/I25217355"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Antonino Nocera","raw_affiliation_strings":["University of Pavia, Department of Electrical, Computer and Biomedical Engineering, Via A. Ferrata, 5, Pavia, 27100, Italy"],"raw_orcid":"https://orcid.org/0000-0003-2120-2341","affiliations":[{"raw_affiliation_string":"University of Pavia, Department of Electrical, Computer and Biomedical Engineering, Via A. Ferrata, 5, Pavia, 27100, Italy","institution_ids":["https://openalex.org/I25217355"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5085793134"],"corresponding_institution_ids":["https://openalex.org/I25217355"],"apc_list":{"value":3220,"currency":"USD","value_usd":3220},"apc_paid":{"value":3220,"currency":"USD","value_usd":3220},"fwci":12.1051,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.98579495,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"331","issue":null,"first_page":"133154","last_page":"133154"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.761900007724762,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.761900007724762,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.035999998450279236,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13274","display_name":"Expert finding and Q&A systems","score":0.023399999365210533,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.5699999928474426},{"id":"https://openalex.org/keywords/information-sensitivity","display_name":"Information sensitivity","score":0.5631999969482422},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.554099977016449},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.5465999841690063},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4796999990940094},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.4726000130176544},{"id":"https://openalex.org/keywords/mechanism","display_name":"Mechanism (biology)","score":0.40709999203681946}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8755000233650208},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.5699999928474426},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.5631999969482422},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.554099977016449},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.5465999841690063},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5134000182151794},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4796999990940094},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.4726000130176544},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.40709999203681946},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.3720000088214874},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.36010000109672546},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.33340001106262207},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.27900001406669617},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.25850000977516174},{"id":"https://openalex.org/C204806902","wikidata":"https://www.wikidata.org/wiki/Q2333581","display_name":"Semantic security","level":5,"score":0.25679999589920044}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.eswa.2026.133154","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.eswa.2026.133154","pdf_url":null,"source":{"id":"https://openalex.org/S13144211","display_name":"Expert Systems with Applications","issn_l":"0957-4174","issn":["0957-4174","1873-6793"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Expert Systems with Applications","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.eswa.2026.133154","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.eswa.2026.133154","pdf_url":null,"source":{"id":"https://openalex.org/S13144211","display_name":"Expert Systems with Applications","issn_l":"0957-4174","issn":["0957-4174","1873-6793"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Expert Systems with Applications","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7077305316925049}],"awards":[],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W4390692489","https://openalex.org/W4391876619","https://openalex.org/W4402124256","https://openalex.org/W4405728682","https://openalex.org/W4406062884","https://openalex.org/W4412082268","https://openalex.org/W4412439815","https://openalex.org/W4413830359","https://openalex.org/W7133738338"],"related_works":[],"abstract_inverted_index":{"Retrieval-Augmented":[0,105],"Generation":[1],"(RAG)":[2],"has":[3],"attracted":[4],"significant":[5],"attention":[6],"due":[7],"to":[8,11,49,59,64,81,101,135,150,194,223],"its":[9],"ability":[10],"combine":[12],"the":[13,33,39,50,61,111,117,131,137,152,179,199,213,216,228],"generative":[14,62],"capabilities":[15],"of":[16,35,113,154],"Large":[17],"Language":[18],"Models":[19],"(LLMs)":[20],"with":[21,42,141,162],"knowledge":[22],"obtained":[23],"through":[24],"efficient":[25],"retrieval":[26,132],"mechanisms":[27],"over":[28,212],"large-scale":[29],"data":[30,166],"collections.":[31],"Currently,":[32],"majority":[34],"existing":[36],"approaches":[37,56],"overlook":[38],"risks":[40],"associated":[41],"exposing":[43],"sensitive":[44,68,88,142,196],"or":[45],"access-controlled":[46],"information":[47,89,197],"directly":[48],"generation":[51],"model.":[52],"Only":[53],"a":[54,98,147,189,209,224],"few":[55],"propose":[57,97],"techniques":[58],"instruct":[60],"model":[63,167],"refrain":[65],"from":[66,116,198],"disclosing":[67],"information;":[69],"however,":[70],"recent":[71],"studies":[72],"have":[73],"also":[74],"demonstrated":[75],"that":[76,85,168,186,233],"such":[77],"strategies":[78],"remain":[79],"vulnerable":[80],"prompt":[82,91,191,218],"leaking":[83,219],"attacks":[84],"can":[86],"exfiltrate":[87],"via":[90],"injection.":[92],"For":[93],"these":[94],"reasons,":[95],"we":[96,145,176,234],"novel":[99],"approach":[100],"Selective":[102],"Disclosure":[103],"in":[104,215,227],"Generation,":[106],"called":[107],"SD-RAG,":[108],"which":[109],"decouples":[110],"enforcement":[112],"privacy":[114,159,230],"constraints":[115,160],"answer-generation":[118],"process":[119],"itself.":[120],"SD-RAG":[121],"relies":[122,187],"on":[123,178,188],"pre-redaction,":[124],"applying":[125],"sanitization":[126],"and":[127,158],"disclosure":[128],"controls":[129],"during":[130],"phase,":[133],"prior":[134],"augmenting":[136],"question-answering":[138],"LLM\u2019s":[139],"input":[140],"data.":[143],"Moreover,":[144],"introduce":[146],"semantic":[148],"mechanism":[149],"allow":[151],"ingestion":[153],"human-readable":[155],"dynamic":[156],"security":[157],"together":[161],"an":[163,183],"optimized":[164],"graph-based":[165],"supports":[169],"fine-grained,":[170],"policy-aware":[171],"retrieval.":[172],"In":[173],"our":[174],"experiments,":[175],"focus":[177],"single-turn":[180,217],"scenario,":[181,220],"where":[182],"external":[184],"attacker":[185],"malicious":[190],"template":[192],"attempts":[193],"obtain":[195],"system":[200],"by":[201],"asking":[202],"one":[203],"question.":[204],"Our":[205],"experimental":[206],"evaluation":[207],"shows":[208],"promising":[210],"improvement":[211],"baseline":[214],"achieving":[221],"up":[222],"58%":[225],"increase":[226],"keyword-based":[229],"score":[231],"metric":[232],"introduce.":[235]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-06-16T07:32:37.131356","created_date":"2026-06-11T00:00:00"}