{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T09:18:46Z","timestamp":1784107126469,"version":"3.55.0"},"reference-count":51,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100004750","name":"Chinese Aeronautical Establishment Aeronautical Science Foundation","doi-asserted-by":"publisher","award":["2024Z071051004"],"award-info":[{"award-number":["2024Z071051004"]}],"id":[{"id":"10.13039\/501100004750","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["71771006"],"award-info":[{"award-number":["71771006"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["72033001"],"award-info":[{"award-number":["72033001"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Expert Systems with Applications"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1016\/j.eswa.2026.132023","type":"journal-article","created":{"date-parts":[[2026,3,31]],"date-time":"2026-03-31T03:57:17Z","timestamp":1774929437000},"page":"132023","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":1,"special_numbering":"C","title":["PrivTabRAG: A data-model co-design framework for privacy-preserving retrieval-augmented generation on tabular data"],"prefix":"10.1016","volume":"321","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7578-9470","authenticated-orcid":false,"given":"Yinchi","family":"Ge","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2569-1824","authenticated-orcid":false,"given":"Hui","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-3670-7896","authenticated-orcid":false,"given":"Haohang","family":"Sun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-6187-5214","authenticated-orcid":false,"given":"Zhenyuan","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8941-7571","authenticated-orcid":false,"given":"Haijun","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.eswa.2026.132023_bib0001","series-title":"Proceedings of the 2016 ACM SIGSAC conference on computer and communications security","first-page":"308","article-title":"Deep learning with differential privacy","author":"Abadi","year":"2016"},{"key":"10.1016\/j.eswa.2026.132023_bib0002","unstructured":"Abhishek, I. (2018). Mobile price classification [dataset]. https:\/\/www.kaggle.com\/datasets\/iabhishekofficial\/mobile-price-classification\/data. Accessed: 2024-06-20."},{"key":"10.1016\/j.eswa.2026.132023_bib0003","series-title":"International conference on information systems security and privacy","article-title":"Is my data in your retrieval database? Membership inference attacks against retrieval augmented generation","author":"Anderson","year":"2025"},{"key":"10.1016\/j.eswa.2026.132023_bib0004","series-title":"Usenix security symposium","article-title":"\u201dwhat do you want from theory alone?\u201d Experimenting with tight auditing of differentially private synthetic data generation","author":"Annamalai","year":"2024"},{"key":"10.1016\/j.eswa.2026.132023_bib0005","unstructured":"Becker, B., & Kohavi, R. (1996). Adult [dataset]. UCI Machine Learning Repository. 10.24432\/C5XW20."},{"issue":"2","key":"10.1016\/j.eswa.2026.132023_bib0006","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2450142.2450148","article-title":"A learning theory approach to noninteractive database privacy","volume":"60","author":"Blum","year":"2013","journal-title":"Journal of the ACM (JACM)"},{"key":"10.1016\/j.eswa.2026.132023_bib0007","series-title":"The thirty-eighth annual conference on neural information processing systems","article-title":"TableRAG: Million-token table understanding with language models","author":"Chen","year":"2024"},{"key":"10.1016\/j.eswa.2026.132023_bib0008","unstructured":"Cortez, P., Cerdeira, A., Almeida, F., Matos, T., & Reis, J. (2009). Wine quality [dataset]. UCI Machine Learning Repository. 10.24432\/C56S3T."},{"key":"10.1016\/j.eswa.2026.132023_bib0009","article-title":"Large language models for chatbot applications handling sensitive information","volume":"299","author":"de Oliveira","year":"2025","journal-title":"Expert Systems with Applications"},{"key":"10.1016\/j.eswa.2026.132023_bib0010","article-title":"Differentially private diffusion models","author":"Dockhorn","year":"2023","journal-title":"Transactions on Machine Learning Research"},{"key":"10.1016\/j.eswa.2026.132023_bib0011","series-title":"Proceedings of the 47th international ACM SIGIR conference on research and development in information retrieval","first-page":"2997","article-title":"Large language models for tabular data: Progresses and future directions","author":"Dong","year":"2024"},{"key":"10.1016\/j.eswa.2026.132023_bib0012","series-title":"Theory of cryptography","article-title":"Calibrating noise to sensitivity in private data analysis","author":"Dwork","year":"2006"},{"key":"10.1016\/j.eswa.2026.132023_bib0013","series-title":"Australasian conference on information security and privacy","first-page":"147","article-title":"RAGLeak: Membership inference attacks on RAG-based large language models","author":"Feng","year":"2025"},{"issue":"2","key":"10.1016\/j.eswa.2026.132023_bib0014","doi-asserted-by":"crossref","first-page":"413","DOI":"10.14778\/3705829.3705855","article-title":"Privacy-enhanced database synthesis for benchmark publishing","volume":"18","author":"Ge","year":"2024","journal-title":"Proceedings of the VLDB Endowment"},{"key":"10.1016\/j.eswa.2026.132023_bib0015","series-title":"Advances in neural information processing systems","first-page":"11631","article-title":"Numerical composition of differential privacy","volume":"vol. 34","author":"Gopi","year":"2021"},{"issue":"4","key":"10.1016\/j.eswa.2026.132023_bib0016","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2025.104150","article-title":"Mitigating privacy risks in retrieval-augmented generation via locally private entity perturbation","volume":"62","author":"He","year":"2025","journal-title":"Information Processing & Management"},{"key":"10.1016\/j.eswa.2026.132023_bib0017","series-title":"International conference on learning representations","article-title":"LoRA: Low-rank adaptation of large language models","author":"Hu","year":"2022"},{"key":"10.1016\/j.eswa.2026.132023_bib0018","series-title":"EACL 2021-16th conference of the european chapter of the association for computational linguistics","first-page":"874","article-title":"Leveraging passage retrieval with generative models for open domain question answering","author":"Izacard","year":"2021"},{"key":"10.1016\/j.eswa.2026.132023_bib0019","unstructured":"Janosi, A., Steinbrunn, W., Pfisterer, M., & Detrano, R. (1989). Heart disease [dataset]. UCI Machine Learning Repository. 10.24432\/C52P4X."},{"issue":"3","key":"10.1016\/j.eswa.2026.132023_bib0020","doi-asserted-by":"crossref","first-page":"535","DOI":"10.1109\/TBDATA.2019.2921572","article-title":"Billion-scale similarity search with GPUs","volume":"7","author":"Johnson","year":"2019","journal-title":"IEEE Transactions on Big Data"},{"key":"10.1016\/j.eswa.2026.132023_bib0021","series-title":"International conference on learning representations","article-title":"PATE-GAN: Generating synthetic data with differential privacy guarantees","author":"Jordon","year":"2018"},{"key":"10.1016\/j.eswa.2026.132023_bib0022","series-title":"Intelligent computing","first-page":"448","article-title":"Tabular embedding model (TEM): Finetuning embedding models for tabular RAG applications","author":"Khanna","year":"2025"},{"key":"10.1016\/j.eswa.2026.132023_bib0023","series-title":"The eleventh international conference on learning representations","article-title":"STasy: Score-based tabular data synthesis","author":"Kim","year":"2023"},{"key":"10.1016\/j.eswa.2026.132023_bib0024","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2025.128047","article-title":"SynCSE: Syntax graph-based contrastive learning of sentence embeddings","volume":"287","author":"Kim","year":"2025","journal-title":"Expert SysTems with Applications"},{"key":"10.1016\/j.eswa.2026.132023_bib0025","series-title":"Proceedings of the 40th international conference on machine learning","article-title":"TabDDPM: Modelling tabular data with diffusion models","author":"Kotelnikov","year":"2023"},{"key":"10.1016\/j.eswa.2026.132023_bib0026","first-page":"9459","article-title":"Retrieval-augmented generation for knowledge-intensive NLP tasks","volume":"33","author":"Lewis","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"key":"10.1016\/j.eswa.2026.132023_bib0027","series-title":"ICASSP 2025 - 2025 IEEE international conference on acoustics, speech and signal processing (icassp)","first-page":"1","article-title":"Generating is believing: Membership inference attacks against retrieval-augmented generation","author":"Li","year":"2025"},{"key":"10.1016\/j.eswa.2026.132023_bib0028","series-title":"Proceedings of the ACM on web conference 2025","first-page":"2894","article-title":"Mask-based membership inference attacks for retrieval-augmented generation","author":"Liu","year":"2025"},{"key":"10.1016\/j.eswa.2026.132023_bib0029","series-title":"Proceedings of the AAAI conference on artificial intelligence","first-page":"26317","article-title":"DP-MemArc: Differential privacy transfer learning for memory efficient language models","volume":"vol. 39","author":"Liu","year":"2025"},{"key":"10.1016\/j.eswa.2026.132023_bib0030","doi-asserted-by":"crossref","first-page":"3","DOI":"10.29012\/jpc.778","article-title":"Winning the nist contest: A scalable and general approach to differentially private synthetic data","volume":"11","author":"MCKENNA","year":"2021","journal-title":"Journal of Privacy and Confidentiality"},{"key":"10.1016\/j.eswa.2026.132023_bib0031","series-title":"Proceedings of the 2024 conference of the north american chapter of the association for computational linguistics: Human language technologies (volume 6: Industry track)","first-page":"464","article-title":"Exploring the impact of table-to-text methods on augmenting LLM-based question answering with domain hybrid data","author":"Min","year":"2024"},{"key":"10.1016\/j.eswa.2026.132023_bib0032","unstructured":"Moro, S., Rita, P., & Cortez, P. (2014). Bank marketing [dataset]. UCI Machine Learning Repository. 10.24432\/C5K306."},{"key":"10.1016\/j.eswa.2026.132023_bib0033","unstructured":"Nasr, M., Carlini, N., Sitawarin, C., Schulhoff, S. V., Hayes, J., Ilie, M., Pluto, J., Song, S., Chaudhari, H., Shumailov, I., Thakurta, A., Xiao, K. Y., Terzis, A., & Tram\u00e8r, F. (2025). The attacker moves second: Stronger adaptive attacks bypass defenses against LLM jailbreaks and prompt injections. https:\/\/arxiv.org\/abs\/2510.09023."},{"key":"10.1016\/j.eswa.2026.132023_bib0034","series-title":"Forty-second international conference on machine learning","article-title":"Privacy amplification through synthetic data: Insights from linear regression","author":"Pierquin","year":"2025"},{"key":"10.1016\/j.eswa.2026.132023_bib0035","unstructured":"Ruggles, S., Flood, S., Sobek, M., Backman, D., Cooper, G., Drew, J. A. R., Richards, S., Rodgers, R., Schroeder, J., & Williams, K. C. W. (2025). IPUMS USA: Version 16.0 [dataset]. 10.18128\/D010.V16.0. Dataset, Minneapolis, MN: IPUMS."},{"key":"10.1016\/j.eswa.2026.132023_bib0036","series-title":"2017 IEEE symposium on security and privacy (SP)","first-page":"3","article-title":"Membership inference attacks against machine learning models","author":"Shokri","year":"2017"},{"key":"10.1016\/j.eswa.2026.132023_bib0037","series-title":"The twelfth international conference on learning representations","article-title":"Privacy-preserving in-context learning with differentially private few-shot generation","author":"Tang","year":"2024"},{"key":"10.1016\/j.eswa.2026.132023_bib0038","unstructured":"Wang, L., Yang, N., Huang, X., Jiao, B., Yang, L., Jiang, D., Majumder, R., & Wei, F. (2022). Text embeddings by weakly-supervised contrastive pre-training. arXiv preprint arXiv: 2212.03533,."},{"key":"10.1016\/j.eswa.2026.132023_bib0039","first-page":"5776","article-title":"MiniLM: Deep self-attention distillation for task-agnostic compression of pre-trained transformers","volume":"33","author":"Wang","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"key":"10.1016\/j.eswa.2026.132023_bib0040","series-title":"ICML 2025 workshop on reliable and responsible foundation models","article-title":"Efficient and privacy-preserving soft prompt transfer for LLMs","author":"Wang","year":"2025"},{"key":"10.1016\/j.eswa.2026.132023_bib0041","series-title":"The thirty-eight conference on neural information processing systems datasets and benchmarks track","article-title":"HARMONIC: Harnessing LLMs for tabular data synthesis and privacy protection","author":"Wang","year":"2024"},{"key":"10.1016\/j.eswa.2026.132023_bib0042","series-title":"The twelfth international conference on learning representations","article-title":"Privacy-preserving in-context learning for large language models","author":"Wu","year":"2024"},{"key":"10.1016\/j.eswa.2026.132023_bib0043","series-title":"Proceedings of the 47th international ACM SIGIR conference on research and development in information retrieval","first-page":"641","article-title":"C-pack: Packed resources for general chinese embeddings","author":"Xiao","year":"2024"},{"key":"10.1016\/j.eswa.2026.132023_bib0044","series-title":"Advances in neural information processing systems","article-title":"Modeling tabular data using conditional GAN","author":"Xu","year":"2019"},{"key":"10.1016\/j.eswa.2026.132023_bib0045","unstructured":"Yang, A., Li, A., Yang, B., Zhang, B., Hui, B., Zheng, B., Yu, B., Gao, C., Huang, C., Lv, C. et al. (2025). Qwen3 technical report. https:\/\/arxiv.org\/abs\/2505.09388."},{"key":"10.1016\/j.eswa.2026.132023_bib0046","series-title":"Findings of the association for computational linguistics: ACL 2024","first-page":"4505","article-title":"The good and the bad: Exploring privacy issues in retrieval-augmented generation (RAG)","author":"Zeng","year":"2024"},{"key":"10.1016\/j.eswa.2026.132023_bib0047","series-title":"Proceedings of the 2025 conference on empirical methods in natural language processing","first-page":"24538","article-title":"Mitigating the privacy issues in retrieval-augmented generation (rag) via pure synthetic data","author":"Zeng","year":"2025"},{"key":"10.1016\/j.eswa.2026.132023_bib0048","series-title":"Proceedings of the AAAI conference on artificial intelligence","first-page":"1022","article-title":"Portcullis: A scalable and verifiable privacy gateway for third-party LLM inference","volume":"vol. 39","author":"Zhan","year":"2025"},{"issue":"4","key":"10.1016\/j.eswa.2026.132023_bib0049","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3134428","article-title":"PrivBayes: Private data release via Bayesian networks","volume":"42","author":"Zhang","year":"2017","journal-title":"ACM Transactions Database Systems"},{"issue":"8","key":"10.1016\/j.eswa.2026.132023_bib0050","doi-asserted-by":"crossref","first-page":"1981","DOI":"10.14778\/3659437.3659452","article-title":"Reactable: Enhancing react for table question answering","volume":"17","author":"Zhang","year":"2024","journal-title":"Proceedings of the VLDB Endowment"},{"key":"10.1016\/j.eswa.2026.132023_bib0051","series-title":"IJCAI","first-page":"4531","article-title":"Reasoning over hybrid chain for table-and-text open domain question answering","author":"Zhong","year":"2022"}],"container-title":["Expert Systems with Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S095741742600936X?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S095741742600936X?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,6,8]],"date-time":"2026-06-08T16:02:26Z","timestamp":1780934546000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S095741742600936X"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":51,"alternative-id":["S095741742600936X"],"URL":"https:\/\/doi.org\/10.1016\/j.eswa.2026.132023","relation":{},"ISSN":["0957-4174"],"issn-type":[{"value":"0957-4174","type":"print"}],"subject":[],"published":{"date-parts":[[2026,7]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"PrivTabRAG: A data-model co-design framework for privacy-preserving retrieval-augmented generation on tabular data","name":"articletitle","label":"Article Title"},{"value":"Expert Systems with Applications","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.eswa.2026.132023","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"132023"}}