Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 233papers have no tags yet and are not included in filtered results.
AbstractConfundo uses a fine-tuned generator for RAG poisoning; the authors report attack results on three objective types: factual, opinion, and hallucination.
Confundo turns RAG poisoning into fine-tuning: a small model generates short poison texts for target questions, which are then placed into documents that will be ingested by the knowledge base. It targets the fact that real systems chunk documents and users do not copy preset questions verbatim, weakening specialized poisoning. The attacker has no internal knowledge of the target system and cannot query it, only prepare documents to be ingested.