{"id":"https://openalex.org/W7172030722","doi":"https://doi.org/10.1145/3770854.3780227","title":"WARP: A Word-Level Backdoor Attack Targeting RAG Systems via Retrieval Corpus Poisoning","display_name":"WARP: A Word-Level Backdoor Attack Targeting RAG Systems via Retrieval Corpus Poisoning","publication_year":2026,"publication_date":"2026-04-20","ids":{"openalex":"https://openalex.org/W7172030722","doi":"https://doi.org/10.1145/3770854.3780227"},"language":null,"primary_location":{"id":"doi:10.1145/3770854.3780227","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3770854.3780227","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 32nd ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.1","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3770854.3780227","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100387644","display_name":"Hui Liu","orcid":"https://orcid.org/0000-0003-1345-5736"},"institutions":[{"id":"https://openalex.org/I40963666","display_name":"Central China Normal University","ror":"https://ror.org/03x1jna21","country_code":"CN","type":"education","lineage":["https://openalex.org/I40963666"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hui Liu","raw_affiliation_strings":["Central China Normal University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1345-5736","affiliations":[{"raw_affiliation_string":"Central China Normal University, Wuhan, China","institution_ids":["https://openalex.org/I40963666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5144099574","display_name":"Yibo Zhou","orcid":"https://orcid.org/0009-0004-2118-1362"},"institutions":[{"id":"https://openalex.org/I40963666","display_name":"Central China Normal University","ror":"https://ror.org/03x1jna21","country_code":"CN","type":"education","lineage":["https://openalex.org/I40963666"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yibo Zhou","raw_affiliation_strings":["Central China Normal University, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0004-2118-1362","affiliations":[{"raw_affiliation_string":"Central China Normal University, Wuhan, China","institution_ids":["https://openalex.org/I40963666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5144139769","display_name":"Liguo Dong","orcid":"https://orcid.org/0009-0001-9695-9624"},"institutions":[{"id":"https://openalex.org/I40963666","display_name":"Central China Normal University","ror":"https://ror.org/03x1jna21","country_code":"CN","type":"education","lineage":["https://openalex.org/I40963666"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liguo Dong","raw_affiliation_strings":["Central China Normal University, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0001-9695-9624","affiliations":[{"raw_affiliation_string":"Central China Normal University, Wuhan, China","institution_ids":["https://openalex.org/I40963666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5144138723","display_name":"Weidong Li","orcid":"https://orcid.org/0000-0002-8165-4385"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weidong Li","raw_affiliation_strings":["Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-8165-4385","affiliations":[{"raw_affiliation_string":"Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005228053","display_name":"Shui Yu","orcid":"https://orcid.org/0000-0003-4485-6743"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shui Yu","raw_affiliation_strings":["University of Technology Sydney, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0003-4485-6743","affiliations":[{"raw_affiliation_string":"University of Technology Sydney, Sydney, Australia","institution_ids":["https://openalex.org/I114017466"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"867","last_page":"878"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":null,"topics":[],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.8438000082969666},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.46650001406669617},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.3476000130176544},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3239000141620636},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.2434999942779541}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.8438000082969666},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.723800003528595},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.47909998893737793},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.46650001406669617},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43149998784065247},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41920000314712524},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.3476000130176544},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3239000141620636},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.2434999942779541},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.21699999272823334}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3770854.3780227","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3770854.3780227","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 32nd ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.1","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3770854.3780227","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3770854.3780227","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 32nd ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.1","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W2753783305","https://openalex.org/W2889787757","https://openalex.org/W2912924812","https://openalex.org/W3034383590","https://openalex.org/W3035367371","https://openalex.org/W3099700870","https://openalex.org/W3107337211","https://openalex.org/W4284670538","https://openalex.org/W4385569963","https://openalex.org/W4389519591","https://openalex.org/W4400526126","https://openalex.org/W4400527475","https://openalex.org/W4400529080","https://openalex.org/W4400529966","https://openalex.org/W4400984349","https://openalex.org/W4401043416","https://openalex.org/W4401863692","https://openalex.org/W4401863775","https://openalex.org/W4401864009","https://openalex.org/W4409166754","https://openalex.org/W4412376959","https://openalex.org/W6929392117"],"related_works":[],"abstract_inverted_index":{"Retrieval-Augmented":[0],"Generation":[1],"(RAG)":[2],"systems":[3],"retrieve":[4],"relevant":[5],"documents":[6,41],"from":[7],"a":[8,32],"corpus":[9,44],"database":[10],"to":[11,50],"mitigate":[12],"issues":[13],"like":[14],"hallucination,":[15],"outdated":[16],"knowledge,":[17],"and":[18],"limited":[19],"domain":[20],"coverage.":[21],"While":[22],"enhancing":[23],"large":[24],"language":[25],"models":[26],"(LLMs)":[27],"performance,":[28],"RAG":[29],"also":[30],"introduces":[31],"new":[33],"attack":[34],"surface:":[35],"adversaries":[36],"can":[37],"inject":[38],"trigger-embedded":[39],"malicious":[40],"into":[42],"the":[43,48],"database,":[45],"potentially":[46],"causing":[47],"LLM":[49],"produce":[51],"attacker-controlled":[52],"outputs.":[53]},"counts_by_year":[],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2026-08-01T00:00:00"}