{"id":"https://openalex.org/W7134032797","doi":"https://doi.org/10.1145/3800948","title":"<i>Push and Pull</i> : Defending against Retrieval Poisoning Attacks via Embedding Space Reshaping","display_name":"<i>Push and Pull</i> : Defending against Retrieval Poisoning Attacks via Embedding Space Reshaping","publication_year":2026,"publication_date":"2026-03-06","ids":{"openalex":"https://openalex.org/W7134032797","doi":"https://doi.org/10.1145/3800948"},"language":"en","primary_location":{"id":"doi:10.1145/3800948","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3800948","pdf_url":null,"source":{"id":"https://openalex.org/S4394735545","display_name":"ACM Transactions on Information Systems","issn_l":"1046-8188","issn":["1046-8188","1558-2868"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113269092","display_name":"Longzhu He","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Longzhu He","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0001-7842-6605","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xiyu Zhang","orcid":"https://orcid.org/0009-0000-4506-3927"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiyu Zhang","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0000-4506-3927","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128244617","display_name":"Quan Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Quan Liu","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0003-1609-7089","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128265193","display_name":"Chaozhuo Li","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chaozhuo Li","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-8179-7503","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128268551","display_name":"Zheng Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210100255","display_name":"Beijing Academy of Artificial Intelligence","ror":"https://ror.org/016a74861","country_code":"CN","type":"other","lineage":["https://openalex.org/I4210100255"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zheng Liu","raw_affiliation_strings":["Beijing Academy of Artificial Intelligence, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7765-8466","affiliations":[{"raw_affiliation_string":"Beijing Academy of Artificial Intelligence, Beijing, China","institution_ids":["https://openalex.org/I4210100255"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123811034","display_name":"Pengpeng Zhou","orcid":null},"institutions":[{"id":"https://openalex.org/I4210117754","display_name":"Chinese Academy of Civil Aviation Science and Technology","ror":"https://ror.org/023zynq23","country_code":"CN","type":"nonprofit","lineage":["https://openalex.org/I4210117754"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengpeng Zhou","raw_affiliation_strings":["China Academy of Civil Aviation Science and Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-5359-1540","affiliations":[{"raw_affiliation_string":"China Academy of Civil Aviation Science and Technology, Beijing, China","institution_ids":["https://openalex.org/I4210117754"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036865453","display_name":"Sen Su","orcid":"https://orcid.org/0000-0003-4266-7527"},"institutions":[{"id":"https://openalex.org/I10535382","display_name":"Chongqing University of Posts and Telecommunications","ror":"https://ror.org/03dgaqz26","country_code":"CN","type":"education","lineage":["https://openalex.org/I10535382"]},{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sen Su","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China and Chongqing University of Posts and Telecommunications, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0003-4266-7527","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China and Chongqing University of Posts and Telecommunications, Chongqing, China","institution_ids":["https://openalex.org/I10535382","https://openalex.org/I139759216"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.22276342,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"44","issue":"4","first_page":"1","last_page":"31"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.508400022983551,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.508400022983551,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.20640000700950623,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.04809999838471413,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.7768999934196472},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6764000058174133},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5788000226020813},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.477400004863739},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4575999975204468},{"id":"https://openalex.org/keywords/adversarial-information-retrieval","display_name":"Adversarial information retrieval","score":0.37770000100135803},{"id":"https://openalex.org/keywords/query-expansion","display_name":"Query expansion","score":0.35690000653266907}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8844000101089478},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.7768999934196472},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6764000058174133},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5788000226020813},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.5156000256538391},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.477400004863739},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4575999975204468},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38370001316070557},{"id":"https://openalex.org/C116425068","wikidata":"https://www.wikidata.org/wiki/Q4686695","display_name":"Adversarial information retrieval","level":5,"score":0.37770000100135803},{"id":"https://openalex.org/C99016210","wikidata":"https://www.wikidata.org/wiki/Q5488129","display_name":"Query expansion","level":2,"score":0.35690000653266907},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.34709998965263367},{"id":"https://openalex.org/C90288658","wikidata":"https://www.wikidata.org/wiki/Q3318149","display_name":"Human\u2013computer information retrieval","level":3,"score":0.34549999237060547},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.3255000114440918},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30410000681877136},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.30250000953674316},{"id":"https://openalex.org/C44291984","wikidata":"https://www.wikidata.org/wiki/Q1074173","display_name":"Question answering","level":2,"score":0.2969000041484833},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2948000133037567},{"id":"https://openalex.org/C161156560","wikidata":"https://www.wikidata.org/wiki/Q1638872","display_name":"Document retrieval","level":2,"score":0.2800000011920929},{"id":"https://openalex.org/C97854310","wikidata":"https://www.wikidata.org/wiki/Q19541","display_name":"Search engine","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C551230270","wikidata":"https://www.wikidata.org/wiki/Q4368942","display_name":"Data retrieval","level":2,"score":0.2538999915122986}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3800948","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3800948","pdf_url":null,"source":{"id":"https://openalex.org/S4394735545","display_name":"ACM Transactions on Information Systems","issn_l":"1046-8188","issn":["1046-8188","1558-2868"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4931243360042572,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1755690126","display_name":"\u9690\u79c1\u4fdd\u62a4\u7684\u6570\u636e\u96c6\u6210\u4e0e\u5171\u4eab\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"62072052","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":53,"referenced_works":["https://openalex.org/W2160319865","https://openalex.org/W2883128230","https://openalex.org/W2889787757","https://openalex.org/W2912924812","https://openalex.org/W3099700870","https://openalex.org/W3115947671","https://openalex.org/W3155807546","https://openalex.org/W4309674289","https://openalex.org/W4313483736","https://openalex.org/W4323655724","https://openalex.org/W4327810158","https://openalex.org/W4361866125","https://openalex.org/W4362515116","https://openalex.org/W4384918448","https://openalex.org/W4386436506","https://openalex.org/W4387561528","https://openalex.org/W4388886073","https://openalex.org/W4388994228","https://openalex.org/W4388994251","https://openalex.org/W4389984066","https://openalex.org/W4390602555","https://openalex.org/W4391418506","https://openalex.org/W4391766565","https://openalex.org/W4391801218","https://openalex.org/W4392088196","https://openalex.org/W4392930030","https://openalex.org/W4393147129","https://openalex.org/W4393147971","https://openalex.org/W4393161188","https://openalex.org/W4396882099","https://openalex.org/W4398229669","https://openalex.org/W4398795271","https://openalex.org/W4399062487","https://openalex.org/W4399643011","https://openalex.org/W4400187156","https://openalex.org/W4400208050","https://openalex.org/W4400460572","https://openalex.org/W4400484832","https://openalex.org/W4400528650","https://openalex.org/W4401042773","https://openalex.org/W4402264526","https://openalex.org/W4402670290","https://openalex.org/W4402692877","https://openalex.org/W4403560390","https://openalex.org/W4404330874","https://openalex.org/W4404534210","https://openalex.org/W4404781805","https://openalex.org/W4405738694","https://openalex.org/W4406032661","https://openalex.org/W4407405718","https://openalex.org/W4407771189","https://openalex.org/W4408977202","https://openalex.org/W4416251333"],"related_works":[],"abstract_inverted_index":{"Retrieval-Augmented":[0],"Generation":[1,154],"(RAG)":[2],"improves":[3,220],"the":[4,50,72,91,114,139,169,185],"performance":[5],"of":[6,93,116,123,141,172,187],"Large":[7],"Language":[8],"Models":[9],"(LLMs)":[10],"by":[11,45,70,101],"retrieving":[12],"and":[13,137,159,208,233],"integrating":[14],"relevant":[15],"information":[16,173],"from":[17,98,174],"external":[18],"knowledge":[19],"bases,":[20],"which":[21],"helps":[22],"generate":[23],"more":[24],"accurate":[25,127],"responses.":[26,143],"However,":[27],"RAG":[28,188],"is":[29],"vulnerable":[30],"to":[31,41,65,121,133],"retrieval":[32,51,67,73,135,191],"poisoning":[33,68,192],"attacks":[34,69],",":[35,59,155,158],"where":[36],"attackers":[37],"can":[38],"induce":[39],"LLM":[40,234],"produce":[42],"inaccurate":[43],"responses":[44],"injecting":[46],"malicious":[47,99,180],"documents":[48,100],"into":[49],"process.":[52],"In":[53],"this":[54],"article,":[55],"we":[56],"propose":[57],"ShieldRAG":[58,76,145,196,218],"a":[60,78,83,94,117],"novel":[61],"defense":[62],"framework":[63],"designed":[64],"counteract":[66],"reshaping":[71],"embedding":[74,92,115],"space.":[75],"leverages":[77],"dual-strategy":[79],"effect":[80],"realized":[81],"via":[82],"majority-consensus":[84],"mechanism:":[85],"\u2460":[86],"Push":[87],":":[88,112],"Implicitly":[89],"forces":[90],"user":[95,118],"query":[96,119],"away":[97],"filtering":[102,178],"out":[103,179],"their":[104,108],"minority":[105],"signals,":[106],"reducing":[107],"influence.":[109],"\u2461":[110],"Pull":[111],"Aligns":[113],"closer":[120],"that":[122,217],"benign":[124,175],"documents,":[125],"reinforcing":[126],"retrieval.":[128],"These":[129,164],"strategies":[130],"work":[131],"synergistically":[132],"preserve":[134],"integrity":[136],"enhance":[138],"quality":[140],"LLM-generated":[142],"Specifically,":[144],"operates":[146],"through":[147],"three":[148,165],"key":[149],"steps:":[150],"Sliding":[151],"Retrieval":[152],"Explanation":[153],"Keyword":[156],"Aggregation":[157],"Query":[160],"Targeting":[161],"Optimization":[162],".":[163],"steps":[166],"collectively":[167],"ensure":[168],"effective":[170],"integration":[171],"sources":[176],"while":[177,223],"interference,":[181],"thereby":[182],"significantly":[183,219],"enhancing":[184],"robustness":[186],"systems":[189],"against":[190],"attacks.":[193],"We":[194],"evaluate":[195],"on":[197],"four":[198],"open-domain":[199],"Question":[200],"Answering":[201],"(QA)":[202],"datasets:":[203],"Natural":[204],"Questions,":[205],"MS-MARCO,":[206],"HotpotQA,":[207],"2WikiMultiHopQA,":[209],"using":[210],"seven":[211],"representative":[212],"LLMs.":[213],"Extensive":[214],"experiments":[215],"demonstrate":[216],"response":[221],"accuracy":[222],"mitigating":[224],"adversarial":[225],"effects,":[226],"showcasing":[227],"strong":[228],"generalization":[229],"across":[230],"multiple":[231],"datasets":[232],"architectures.":[235]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-03-07T00:00:00"}