{"id":"https://openalex.org/W7163208154","doi":"https://doi.org/10.48550/arxiv.2606.01212","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","display_name":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","publication_year":2026,"publication_date":"2026-05-31","ids":{"openalex":"https://openalex.org/W7163208154","doi":"https://doi.org/10.48550/arxiv.2606.01212"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.01212","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.01212","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.01212","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5132815168","display_name":"Yuyang Gong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gong, Yuyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032246834","display_name":"Meng Chen","orcid":"https://orcid.org/0009-0000-6412-6460"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Miaokun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137681268","display_name":"Jiawei Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Jiawei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137690434","display_name":"Zhuo Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Zhuo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000341481","display_name":"Guoxiu He","orcid":"https://orcid.org/0000-0002-1419-7495"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Guoxiu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137669176","display_name":"Wei Lu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lu, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137675287","display_name":"Xiaofeng Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, XiaoFeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137704797","display_name":"Xiaozhong Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Xiaozhong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.36010000109672546,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.36010000109672546,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.08869999647140503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.07450000196695328,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/camouflage","display_name":"Camouflage","score":0.801800012588501},{"id":"https://openalex.org/keywords/public-opinion","display_name":"Public opinion","score":0.3352999985218048},{"id":"https://openalex.org/keywords/second-opinion","display_name":"Second opinion","score":0.31700000166893005},{"id":"https://openalex.org/keywords/opinion-leadership","display_name":"Opinion leadership","score":0.3118000030517578},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.30230000615119934},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.29649999737739563}],"concepts":[{"id":"https://openalex.org/C2776196576","wikidata":"https://www.wikidata.org/wiki/Q196113","display_name":"Camouflage","level":2,"score":0.801800012588501},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7476999759674072},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.517300009727478},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.35179999470710754},{"id":"https://openalex.org/C134698397","wikidata":"https://www.wikidata.org/wiki/Q17946","display_name":"Public opinion","level":3,"score":0.3352999985218048},{"id":"https://openalex.org/C2780674532","wikidata":"https://www.wikidata.org/wiki/Q3397626","display_name":"Second opinion","level":2,"score":0.31700000166893005},{"id":"https://openalex.org/C139268390","wikidata":"https://www.wikidata.org/wiki/Q1850904","display_name":"Opinion leadership","level":2,"score":0.3118000030517578},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.30230000615119934},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.29649999737739563},{"id":"https://openalex.org/C3020580240","wikidata":"https://www.wikidata.org/wiki/Q663272","display_name":"Expert opinion","level":2,"score":0.29580000042915344},{"id":"https://openalex.org/C160697094","wikidata":"https://www.wikidata.org/wiki/Q1233197","display_name":"Oblique case","level":2,"score":0.2935999929904938},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2694000005722046},{"id":"https://openalex.org/C2993014495","wikidata":"https://www.wikidata.org/wiki/Q17946","display_name":"Popular opinion","level":2,"score":0.2563999891281128}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.01212","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.01212","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.01212","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.01212","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6976419687271118}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Retrieval-Augmented":[0],"Generation":[1],"(RAG)":[2],"systems":[3],"are":[4,27,156],"widely":[5],"deployed":[6],"and":[7,43,88,122,131,168],"increasingly":[8],"influential,":[9],"but":[10],"their":[11,40],"reliance":[12],"on":[13,30],"external":[14],"corpora":[15],"exposes":[16],"new":[17,59],"security":[18],"risks":[19],"from":[20,145],"poisoned":[21],"retrieval":[22],"content.":[23],"Existing":[24],"RAG":[25],"attacks":[26],"largely":[28],"focusing":[29],"individual":[31],"queries":[32],"or":[33],"narrow":[34],"topic-local":[35],"query":[36,69,78,120],"sets,":[37],"which":[38,63],"limits":[39],"practical":[41],"reach":[42],"offers":[44],"limited":[45,99],"camouflage":[46],"in":[47,62,84,127],"real-world":[48],"settings.":[49],"In":[50],"this":[51,82],"paper,":[52],"we":[53],"introduce":[54],"discourse-level":[55,104,159,173],"opinion":[56,72,105,115],"manipulation,":[57,160],"a":[58,67,75,85,98],"threat":[60,83],"model":[61],"coordinated":[64],"influence":[65],"across":[66,117],"semantic":[68],"network":[70,121],"induces":[71,113],"shifts":[73,116],"over":[74],"holistic,":[76],"multi-topic":[77],"space.":[79],"We":[80],"formalize":[81],"black-box":[86],"setting":[87],"propose":[89],"DiscourseFlip,":[90],"an":[91],"agentic,":[92],"graph-guided":[93],"attack":[94],"that":[95,110,137,152],"dynamically":[96],"allocates":[97],"poisoning":[100],"budget":[101],"to":[102,171],"maximize":[103],"deviation.":[106],"Extensive":[107],"experiments":[108],"demonstrate":[109],"DiscourseFlip":[111,138],"consistently":[112],"targeted":[114],"the":[118,162],"contextualized":[119],"significantly":[123],"outperforms":[124],"existing":[125,153],"baselines":[126],"terms":[128],"of":[129],"coverage":[130],"effectiveness.":[132],"User":[133],"studies":[134],"further":[135],"confirm":[136],"is":[139],"effective":[140],"while":[141],"remaining":[142],"well":[143],"camouflaged":[144],"user":[146],"detection.":[147],"Moreover,":[148],"systematic":[149],"analyses":[150],"show":[151],"mitigation":[154],"strategies":[155],"ineffective":[157],"against":[158],"underscoring":[161],"urgent":[163],"need":[164],"for":[165],"more":[166],"robust":[167],"adaptive":[169],"defenses":[170],"address":[172],"vulnerabilities.":[174]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-03T00:00:00"}