Share your thoughts, 1 month free Claude Pro on usSee more
WorkDL logo mark

RADAR: Defending RAG Dynamically against Retrieval Corruption

About

While RAG systems are increasingly deployed in dynamic web search, temporal volatility amplifies their vulnerability to adversarial attacks. Existing static-oriented defenses struggle to handle evolving threats and incur prohibitive storage costs in dynamic settings. We propose RADAR, a framework that models reliable context selection as a graph-based energy minimization problem, solved exactly via Max-Flow Min-Cut. By incorporating a Bayesian memory node, RADAR recursively updates a belief state instead of archiving raw historical documents, effectively balancing stability against attacks with adaptability to genuine knowledge shifts. Experiments on a novel dynamic dataset show that RADAR achieves superior robustness and response quality with minimal storage overhead compared to the baselines.

Ziyuan Chen, Yueming Lyu, Yi Liu, Weixiang Han, Jing Dong, Caifeng Shan, Tieniu Tan• 2026

Related benchmarks

TaskDatasetResultRank
Question AnsweringRQA
ASR16
130
Question AnsweringNQ
Accuracy62.4
113
Retrieval Question AnsweringRQA
Accuracy76
72
Question Answering under PIA attackBio
Accuracy75.2
60
Question AnsweringTQA
Accuracy72.2
60
Retrieval-Augmented GenerationBio
Accuracy74.02
42
Question AnsweringNQ Poison Attack (test)
Attack Success Rate7
35
Question AnsweringNQ (test)
Accuracy67
30
Question AnsweringDynamic Evidence Streams
Accuracy57.7
24
Dynamic Retrieval-Augmented GenerationBio (test)
Accuracy74.02
24
Showing 10 of 16 rows

Other info

Follow for update