PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimization.

@inproceedings{jiao-2025-prattack, author = {Yang Jiao and Xiaodong Wang and Kai Yang}, editor = {Nicola Ferro and Maria Maistro and Gabriella Pasi and Omar Alonso and Andrew Trotman and Suzan Verberne}, title = {{PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimization}}, booktitle = {{Proceedings of the 48th International ACM SIGIR Conference on Research and Development in Information Retrieval, SIGIR 2025, Padua, Italy, July 13-18, 2025}}, pages = {656--667}, publisher = {ACM}, year = {2025}, url = {https://doi.org/10.1145/3726302.3730058}, doi = {https://doi.org/10.1145/3726302.3730058} }