{"id":"https://openalex.org/W7155366917","doi":"https://doi.org/10.1109/tdsc.2026.3686845","title":"Covert Knowledge Poisoning Attacks in Retrieval-Augmented Code Generation","display_name":"Covert Knowledge Poisoning Attacks in Retrieval-Augmented Code Generation","publication_year":2026,"publication_date":"2026-04-23","ids":{"openalex":"https://openalex.org/W7155366917","doi":"https://doi.org/10.1109/tdsc.2026.3686845"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3686845","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3686845","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053312251","display_name":"Y Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Zhang","raw_affiliation_strings":["Information Engineering University, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0009-0004-0938-9339","affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134374794","display_name":"Miao Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Miao Chen","raw_affiliation_strings":["Zhongguancun Laboratory, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhongguancun Laboratory, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134430236","display_name":"Xinlei He","orcid":null},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinlei He","raw_affiliation_strings":["Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0007-3879-9080","affiliations":[{"raw_affiliation_string":"Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128640223","display_name":"Tianshuo Cong","orcid":null},"institutions":[{"id":"https://openalex.org/I4210132990","display_name":"State Key Laboratory of Cryptology","ror":"https://ror.org/02pn5rj08","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210132990"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianshuo Cong","raw_affiliation_strings":["School of Cryptologic Science and Engineering and Shandong Key Laboratory of Artificial Intelligence Security, Shandong University, Jinan, China"],"raw_orcid":"https://orcid.org/0000-0003-3189-8223","affiliations":[{"raw_affiliation_string":"School of Cryptologic Science and Engineering and Shandong Key Laboratory of Artificial Intelligence Security, Shandong University, Jinan, China","institution_ids":["https://openalex.org/I4210132990"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100665809","display_name":"Ke Xu","orcid":"https://orcid.org/0000-0001-8669-3909"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ke Xu","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-2587-8517","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100350268","display_name":"Qi Li","orcid":"https://orcid.org/0000-0003-2004-6885"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Li","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-8776-8730","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.48998682,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"4","first_page":"8649","last_page":"8666"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.3411000072956085,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.3411000072956085,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.11500000208616257,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.052400000393390656,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4763000011444092},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.4724000096321106},{"id":"https://openalex.org/keywords/electronic-mail","display_name":"Electronic mail","score":0.3068999946117401},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.2919999957084656},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.2761000096797943}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7897999882698059},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6990000009536743},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4763000011444092},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.4724000096321106},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.3068999946117401},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2919999957084656},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2761000096797943},{"id":"https://openalex.org/C115925183","wikidata":"https://www.wikidata.org/wiki/Q1412694","display_name":"Knowledge-based systems","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.24779999256134033},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.24709999561309814}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3686845","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3686845","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1451020459","display_name":null,"funder_award_id":"62402273","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5252299824","display_name":null,"funder_award_id":"62425201","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7155321176","display_name":null,"funder_award_id":"62132011","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7488493096","display_name":null,"funder_award_id":"62221003","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Retrieval-Augmented":[0],"Code":[1],"Generation":[2],"(RACG)":[3],"systems":[4],"enhance":[5],"code":[6,89,214],"generation":[7],"by":[8,106],"dynamically":[9],"integrating":[10],"examples":[11],"retrieved":[12,117],"from":[13],"open":[14],"knowledge":[15,26,61],"bases,":[16],"but":[17],"their":[18,41,245],"reliance":[19],"on":[20,80,136],"external":[21],"sources":[22],"exposes":[23],"them":[24,103],"to":[25,46,127,184],"poisoning.":[27],"While":[28],"prior":[29],"attacks":[30],"inject":[31],"explicit":[32,231],"vulnerable":[33,88,131,221],"code,":[34],"such":[35],"payloads":[36],"are":[37,228],"easily":[38],"detected,":[39],"limiting":[40],"real-world":[42,198],"impact":[43],"and":[44,99,109,140,154,174,238],"failing":[45],"probe":[47],"the":[48,66,120,200,212,262],"full":[49],"attack":[50,63,158,189,201],"surface.":[51],"To":[52],"overcome":[53],"this":[54],"limitation,":[55],"we":[56],"propose":[57],"Arachne,":[58],"a":[59,185],"covert":[60],"poisoning":[62,194],"that,":[64],"for":[65,166,179,265,271],"first":[67],"time,":[68],"achieves":[69,157,202],"fine-grained":[70],"control":[71],"over":[72,192],"vulnerability":[73,107,146,168],"types":[74],"while":[75,219],"evading":[76],"detection.":[77],"Arachne":[78,135,156,181],"relies":[79],"two":[81,197],"mechanisms:":[82],"(1)":[83],"Benign-Appearing":[84],"Fragment":[85],"Construction,":[86],"where":[87],"is":[90],"decomposed":[91],"into":[92],"benign-appearing":[93],"fragments":[94,118],"that":[95,211],"pre":[96],"serve":[97],"compilability":[98],"contextual":[100,125],"cues,":[101],"rendering":[102],"effectively":[104],"undetectable":[105],"analyzers;":[108],"(2)":[110],"Retrieval":[111],"Driven":[112],"Knowledge":[113],"Completion,":[114],"in":[115,163,188,257],"which":[116,227],"activate":[119],"large":[121],"language":[122],"model's":[123],"(LLM)":[124],"reasoning":[126],"autonomously":[128],"generate":[129],"complete":[130],"code.":[132,222],"We":[133],"evaluate":[134],"eight":[137],"mainstream":[138],"LLMs":[139],"four":[141,144],"retrievers":[142],"across":[143,170],"common":[145],"types.":[147],"On":[148],"GPT-4,":[149],"Qwen2.5,":[150],"Gemini":[151],"3-flash,":[152],"Claude-4-sonnet":[153],"DeepSeekCoder,":[155],"success":[159,190,204],"rates":[160],"exceeding":[161],"70%":[162,207],"most":[164],"settings":[165],"each":[167],"type":[169],"CWE-78,":[171],"CWE-295,":[172],"CWE-367,":[173],"CWE-614,":[175],"peaking":[176],"at":[177],"100%":[178],"CWE-367.":[180],"demonstrates":[182],"up":[183],"37%":[186],"improvement":[187],"rate":[191,205],"existing":[193,258],"attacks.":[195],"In":[196],"applications,":[199],"87%":[203],"with":[206],"benign":[208],"utility,":[209],"indicating":[210],"generated":[213],"often":[215],"satisfies":[216],"user":[217],"requirements":[218],"introducing":[220],"Critically,":[223],"our":[224],"poisoned":[225],"samples,":[226],"designed":[229,270],"without":[230],"malicious":[232],"patterns,":[233],"fully":[234],"bypass":[235],"rule-based":[236],"analyzers":[237],"challenge":[239],"state-of-the-art":[240],"LLM":[241],"based":[242],"detectors,":[243],"exemplifying":[244],"stealth":[246],"among":[247],"multiple":[248],"failed":[249],"defense":[250,259,267],"paradigms.":[251],"Our":[252],"findings":[253],"expose":[254],"critical":[255],"limitations":[256],"frameworks,":[260],"highlighting":[261],"urgent":[263],"need":[264],"novel":[266],"mechanisms":[268],"specifically":[269],"RACG":[272],"systems.":[273]},"counts_by_year":[],"updated_date":"2026-07-11T05:44:25.926202","created_date":"2026-04-24T00:00:00"}