{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T18:05:14Z","timestamp":1784138714294,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":34,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,7,19]],"date-time":"2026-07-19T00:00:00Z","timestamp":1784419200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"ARC discovery grant","award":["DP250103612"],"award-info":[{"award-number":["DP250103612"]}]},{"name":"ARC discovery grant","award":["DP260101395"],"award-info":[{"award-number":["DP260101395"]}]},{"name":"ARC Research Hub for Human-Robot Teaming for Sustainable and Resilient Construction (ITRH) grant","award":["IH24010016"],"award-info":[{"award-number":["IH24010016"]}]},{"name":"Australian National Health and Medical Research Council (NHMRC) Ideas Grant","award":["APP2021183"],"award-info":[{"award-number":["APP2021183"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,7,20]]},"DOI":"10.1145\/3805712.3809904","type":"proceedings-article","created":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T17:06:26Z","timestamp":1784135186000},"page":"4080-4086","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["When Context Bites: Detecting RAG Poisoning via Document-Level Attention Collapse"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2035-4845","authenticated-orcid":false,"given":"Yingtao","family":"Ren","sequence":"first","affiliation":[{"name":"University of Technology Sydney, Sydney, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3537-8065","authenticated-orcid":false,"given":"Ziyi","family":"Zhao","sequence":"additional","affiliation":[{"name":"University of Technology Sydney, Sydney, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-1637-6764","authenticated-orcid":false,"given":"Yiwei","family":"Fu","sequence":"additional","affiliation":[{"name":"Peking University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7987-3714","authenticated-orcid":false,"given":"Xiao","family":"Luo","sequence":"additional","affiliation":[{"name":"University of Wisconsin - Madison, Madison, Wisconsin, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9244-0318","authenticated-orcid":false,"given":"Yu-Cheng","family":"Chang","sequence":"additional","affiliation":[{"name":"University of Technology Sydney, Sydney, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8371-8197","authenticated-orcid":false,"given":"Chin-Teng","family":"Lin","sequence":"additional","affiliation":[{"name":"University of Technology Sydney, Sydney, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,7,19]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.findings-emnlp.68"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-emnlp.1023"},{"key":"e_1_3_2_1_3_1","volume-title":"INSIDE: LLMs' Internal States Retain the Power of Hallucination Detection. In The Twelfth International Conference on Learning Representations.","author":"Chen Chao","year":"2024","unstructured":"Chao Chen, Kai Liu, Ze Chen, Yi Gu, Yue Wu, Mingyuan Tao, Zhihang Fu, and Jieping Ye. 2024a. INSIDE: LLMs' Internal States Retain the Power of Hallucination Detection. In The Twelfth International Conference on Learning Representations."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.52202\/079017-4136"},{"key":"e_1_3_2_1_5_1","volume-title":"HaloScope: Harnessing Unlabeled LLM Generations for Hallucination Detection. In The Thirty-eighth Annual Conference on Neural Information Processing Systems. https:\/\/openreview.net\/forum?id=nfK0ZXFFSn","author":"Du Xuefeng","year":"2024","unstructured":"Xuefeng Du, Chaowei Xiao, and Yixuan Li. 2024. HaloScope: Harnessing Unlabeled LLM Generations for Hallucination Detection. In The Thirty-eighth Annual Conference on Neural Information Processing Systems. https:\/\/openreview.net\/forum?id=nfK0ZXFFSn"},{"key":"e_1_3_2_1_6_1","unstructured":"Davide Ettori Nastaran Darabi Sina Tayebati Ranganath Krishnan Mahesh Subedar Omesh Tickoo and Amit Ranjan Trivedi. 2026. EigenTrack: Spectral Activation Feature Tracking for Hallucination and Out-of-Distribution Detection in LLMs and VLMs. arXiv:2509.15735 [cs.LG] https:\/\/arxiv.org\/abs\/2509.15735"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3637528.3671470"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-acl.314"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3605764.3623985"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.coling-main.580"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3703155"},{"key":"e_1_3_2_1_12_1","unstructured":"Yiming Huang Junyan Zhang Zihao Wang Biquan Bie Yunzhong Qiu Xuming Hu Yi R. Fung and Xinlei He. 2026. RePPL: Recalibrating Perplexity by Uncertainty in Semantic Propagation and Language Generation for Explainable QA Hallucination Detection. arXiv:2505.15386 [cs.CL] https:\/\/arxiv.org\/abs\/2505.15386"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-main.550"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.52202\/075280-1797"},{"key":"e_1_3_2_1_15_1","volume-title":"Xiao Luo, Yusheng Zhao, Chunkit Chan, Yankai Chen, Zhongfen Deng, Yinghui Li, Hai-Tao Zheng, Dongyuan Li, Renhe Jiang, Ming Zhang, Yangqiu Song, and Philip S. Yu.","author":"Li Yangning","year":"2025","unstructured":"Yangning Li, Weizhi Zhang, Yuyao Yang, Wei-Chieh Huang, Yaozu Wu, Junyu Luo, Yuanchen Bei, Henry Peng Zou, Xiao Luo, Yusheng Zhao, Chunkit Chan, Yankai Chen, Zhongfen Deng, Yinghui Li, Hai-Tao Zheng, Dongyuan Li, Renhe Jiang, Ming Zhang, Yangqiu Song, and Philip S. Yu. 2025. Towards Agentic RAG with Deep Reasoning: A Survey of RAG-Reasoning Systems in LLMs. arXiv:2507.09477 [cs.CL] https:\/\/arxiv.org\/abs\/2507.09477"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.acl-long.230"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2025.108388"},{"key":"e_1_3_2_1_18_1","unstructured":"Junyu Luo Weizhi Zhang Ye Yuan Yusheng Zhao Junwei Yang Yiyang Gu Bohan Wu Binqi Chen Ziyue Qiao Qingqing Long Rongcheng Tu Xiao Luo Wei Ju Zhiping Xiao Yifan Wang Meng Xiao Chenwu Liu Jingyang Yuan Shichang Zhang Yiqiao Jin Fan Zhang Xian Wu Hanqing Zhao Dacheng Tao Philip S. Yu and Ming Zhang. 2025. Large Language Model Agent: A Survey on Methodology Applications and Challenges. arXiv:2503.21460 [cs.CL] https:\/\/arxiv.org\/abs\/2503.21460"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2026.findings-acl.856"},{"key":"e_1_3_2_1_20_1","volume-title":"Tong Wu, Chong Xiang, Prateek Mittal, and Aleksandra Korolova.","author":"Shen Zeyu","year":"2025","unstructured":"Zeyu Shen, Basileal Yoseph Imana, Tong Wu, Chong Xiang, Prateek Mittal, and Aleksandra Korolova. 2025. ReliabilityRAG: Effective and Provably Robust Defense for RAG-based Web-Search. In The Thirty-ninth Annual Conference on Neural Information Processing Systems. https:\/\/openreview.net\/forum?id=D9JeNTs5Bu"},{"key":"e_1_3_2_1_21_1","unstructured":"Xiaonan si Meilin Zhu Simeng Qin Lijia Yu Lijun Zhang Shuaitong Liu Xinfeng Li Ranjie Duan Yang Liu and Xiaojun Jia. 2025. SeCon-RAG: A Two-Stage Semantic Filtering and Conflict-Free Framework for Trustworthy RAG. In The Thirty-ninth Annual Conference on Neural Information Processing Systems. https:\/\/openreview.net\/forum?id=tTwZhy8JqY"},{"key":"e_1_3_2_1_22_1","volume-title":"The Thirteenth International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=ztzZDzgfrh","author":"Sun ZhongXiang","year":"2025","unstructured":"ZhongXiang Sun, Xiaoxue Zang, Kai Zheng, Jun Xu, Xiao Zhang, Weijie Yu, Yang Song, and Han Li. 2025. ReDeEP: Detecting Hallucination in Retrieval-Augmented Generation via Mechanistic Interpretability. In The Thirteenth International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=ztzZDzgfrh"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-emnlp.698"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00475"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3726302.3730078"},{"key":"e_1_3_2_1_26_1","unstructured":"Liang Wang Nan Yang Xiaolong Huang Binxing Jiao Linjun Yang Daxin Jiang Rangan Majumder and Furu Wei. 2024. Text Embeddings by Weakly-Supervised Contrastive Pre-training. arXiv:2212.03533 [cs.CL] https:\/\/arxiv.org\/abs\/2212.03533"},{"key":"e_1_3_2_1_27_1","unstructured":"Qianshan Wei Tengchao Yang Yaochen Wang Xinfeng Li Lijun Li Zhenfei Yin Yi Zhan Thorsten Holz Zhiqiang Lin and XiaoFeng Wang. 2025. A-MemGuard: A Proactive Defense Framework for LLM-Based Agent Memory. arXiv:2510.02373 [cs.CR] https:\/\/arxiv.org\/abs\/2510.02373"},{"key":"e_1_3_2_1_28_1","unstructured":"Chong Xiang Tong Wu Zexuan Zhong David Wagner Danqi Chen and Prateek Mittal. 2024. Certifiably Robust RAG against Retrieval Corruption. arXiv:2405.15556 [cs.LG] https:\/\/arxiv.org\/abs\/2405.15556"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"crossref","unstructured":"Yijia Xiao Wanjia Zhao Junkai Zhang Yiqiao Jin Han Zhang Zhicheng Ren Renliang Sun Haixin Wang Guancheng Wan Pan Lu Xiao Luo Yu Zhang James Zou Yizhou Sun and Wei Wang. 2025. Protein Large Language Models: A Comprehensive Survey. arXiv:2502.17504 [q-bio.BM] https:\/\/arxiv.org\/abs\/2502.17504","DOI":"10.18653\/v1\/2025.findings-emnlp.1255"},{"key":"e_1_3_2_1_30_1","unstructured":"Shijia Xu Zhou Wu Xiaolong Jia Yu Wang Kai Liu and April Xiaowen Dong. 2026. Self-Correcting RAG: Enhancing Faithfulness via MMKP Context Selection and NLI-Guided MCTS. arXiv:2604.10734 [cs.CL] https:\/\/arxiv.org\/abs\/2604.10734"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-1259"},{"key":"e_1_3_2_1_32_1","volume-title":"The Twelfth International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=ZS4m74kZpH","author":"Yoran Ori","year":"2024","unstructured":"Ori Yoran, Tomer Wolfson, Ori Ram, and Jonathan Berant. 2024. Making Retrieval-Augmented Language Models Robust to Irrelevant Context. In The Twelfth International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=ZS4m74kZpH"},{"key":"e_1_3_2_1_33_1","volume-title":"The Thirty-ninth Annual Conference on Neural Information Processing Systems.","author":"Zhu Hanyu","year":"2025","unstructured":"Hanyu Zhu, Lance Fiondella, Jiawei Yuan, Kai Zeng, and Long Jiao. 2025. NeuroGenPoisoning: Neuron-Guided Attacks on Retrieval-Augmented Generation of LLM via Genetic Optimization of External Knowledge. In The Thirty-ninth Annual Conference on Neural Information Processing Systems."},{"key":"e_1_3_2_1_34_1","volume-title":"Proceedings of the 34th USENIX Conference on Security Symposium","author":"Zou Wei","year":"2025","unstructured":"Wei Zou, Runpeng Geng, Binghui Wang, and Jinyuan Jia. 2025. PoisonedRAG: knowledge corruption attacks to retrieval-augmented generation of large language models. In Proceedings of the 34th USENIX Conference on Security Symposium (Seattle, WA, USA) (SEC '25). USENIX Association, USA, Article 197, 18 pages."}],"event":{"name":"SIGIR '26: The 49th International ACM SIGIR Conference on Research and Development in Information Retrieval","location":"Melbourne VIC Australia","sponsor":["SIGIR ACM Special Interest Group on Information Retrieval"]},"container-title":["Proceedings of the 49th International ACM SIGIR Conference on Research and Development in Information Retrieval"],"original-title":[],"deposited":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T17:20:02Z","timestamp":1784136002000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3805712.3809904"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,19]]},"references-count":34,"alternative-id":["10.1145\/3805712.3809904","10.1145\/3805712"],"URL":"https:\/\/doi.org\/10.1145\/3805712.3809904","relation":{},"subject":[],"published":{"date-parts":[[2026,7,19]]},"assertion":[{"value":"2026-07-19","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}