Tong Ju

Towards Whole-corpus Reconstruction of Heterogeneous RAG Knowledge Bases

Retrieval-Augmented Generation (RAG) systems are increasingly deployed to provide query-based access to large knowledge bases, thereby introducing concrete privacy risks whereby the underlying corpus may be partially or fully extracted through the deployed service. Existing extraction attacks typica…