Cascading Adversarial Bias from Injection to Distillation in Language Models
Google TechTalks · 32:31
Phantom is a trigger-based poisoning attack on retrieval-augmented generation (RAG) systems. The attacker places one crafted document in the knowledge base, and it gets retrieved only when the user's query contains a...