{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T16:18:56Z","timestamp":1781021936515,"version":"3.54.1"},"reference-count":80,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62171352"],"award-info":[{"award-number":["62171352"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62572386"],"award-info":[{"award-number":["62572386"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Key Research and Development Program of Shaanxi Program","award":["2024GX-ZDCYL-01-14"],"award-info":[{"award-number":["2024GX-ZDCYL-01-14"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Sci. Eng."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tnse.2026.3654070","type":"journal-article","created":{"date-parts":[[2026,1,14]],"date-time":"2026-01-14T20:40:58Z","timestamp":1768423258000},"page":"6211-6224","source":"Crossref","is-referenced-by-count":1,"title":["SafeRAG: Secure Cloud-Based Retrieval-Augmented Generation for LLM-Empowered Voice Assistants"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7057-8452","authenticated-orcid":false,"given":"Yuan","family":"Chang","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Xi'an Jiaotong University, Xi'an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5215-7443","authenticated-orcid":false,"given":"Tom H.","family":"Luan","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Xi'an Jiaotong University, Xi'an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Siran","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Xi'an Jiaotong University, Xi'an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3810-7076","authenticated-orcid":false,"given":"Yuntao","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Xi'an Jiaotong University, Xi'an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3641289"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/comst.2025.3576176"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3412383"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2024.01.120"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2025.3611881"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3571730"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3703155"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3701228"},{"key":"ref10","first-page":"9459","article-title":"Retrieval-augmented generation for knowledge-intensive nlp tasks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Lewis","year":"2020"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-acl.267"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP49660.2025.10889013"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.emnlp-main.1247"},{"key":"ref14","article-title":"Privacy-preserving retrieval-augmented generation with differential privacy","author":"Koga","year":"2024"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICICCI.2010.119"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/s11280-024-01273-4"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3078099"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3288453"},{"key":"ref19","first-page":"3929","article-title":"Retrieval augmented language model pre-training","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Guu","year":"2020"},{"key":"ref20","first-page":"2206","article-title":"Improving language models by retrieving from trillions of tokens","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Borgeaud","year":"2022"},{"issue":"251","key":"ref21","first-page":"1","article-title":"Atlas: Few-shot learning with retrieval augmented language models","volume":"24","author":"Izacard","year":"2023","journal-title":"J. Mach. Learn. Res."},{"key":"ref22","article-title":"GraphRAFT: Retrieval augmented fine-tuning for knowledge graphs on graph databases","author":"Clemedtson","year":"2025"},{"key":"ref23","article-title":"Assistant with bard: A step toward a more personal assistant","author":"Hsiao","year":"2023"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SEENG59157.2023.00010"},{"key":"ref25","article-title":"Introducing alexa, the next generation of alexa","author":"Panay","year":"2025"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1177\/1088467x251361073"},{"key":"ref27","first-page":"698","article-title":"NaturalSpeech 2: Latent diffusion models are natural and zero-shot speech and singing synthesizers","volume-title":"Proc. 12th Int. Conf. Learn. Representations","author":"Shen","year":"2024"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.privatenlp-1.2"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-acl.197"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipm.2025.104150"},{"key":"ref31","article-title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","author":"Qi","year":"2024"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.emnlp-main.921"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2024.3445343"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2021.3117587"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/tnse.2025.3580800"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2024.3369630"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3402173"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3583252"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2025.3549052"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2023.103827"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ICMC60390.2024.00008"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-79228-4_1"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2023.107399"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.jik.2024.100597"},{"key":"ref45","article-title":"Multi-tier privacy protection for large language models using differential privacy","author":"Gao","year":"2024","journal-title":"Authorea"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3382630"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-46447-2_33"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53015-3_12"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-34618-8_19"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-17259-6_5"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-99-8733-7_4"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3396395"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1287\/opre.2021.2205"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3607916"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3189531"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2021.3073772"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2024.3405070"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2022.3227014"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3214303"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-12229-8_2"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2022.3185327"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2023.3285070"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3620373"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3534834"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/tbdata.2025.3618474"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2004.838101"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1016\/S0899-8256(03)00121-0"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2025.3546910"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44987-6_28"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/937503.937506"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2020.2972923"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2024.02.024"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1186\/s13638-020-01665-w"},{"key":"ref74","first-page":"1","article-title":"The Dolev-Yao intruder is the most powerful attacker","volume-title":"Proc. 16th Annu. Symp. Log. Comput. Sci.","volume":"1","author":"Cervesato","year":"2001"},{"key":"ref75","volume-title":"Bayes\u2019 Rule: A Tutorial Introduction to Bayesian Analysis","author":"Stone","year":"2013"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2017.48"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0054851"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1186\/s12859-015-0564-6"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-1258"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-96884-1_20"}],"container-title":["IEEE Transactions on Network Science and Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6488902\/11264281\/11353015.pdf?arnumber=11353015","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,5]],"date-time":"2026-02-05T20:41:52Z","timestamp":1770324112000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11353015\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":80,"URL":"https:\/\/doi.org\/10.1109\/tnse.2026.3654070","relation":{},"ISSN":["2327-4697","2334-329X"],"issn-type":[{"value":"2327-4697","type":"electronic"},{"value":"2334-329X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}