Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

ZhuHang Zheng

dblp:435/8754 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2026
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
1 paper
Language models and text generation · 100%
Network and information security
1 paper
Security and privacy of machine learning · 100%

Topics — the 2 heaviest of 3, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Natural language and speech › Language models and text generation › retrieval-augmented generation
robust retrieval-augmented generation
1.012026
Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation · ACL (1) 2026
Security and privacy of machine learning › adversarial attack › large language model attack
adversarial attack on retrieval-augmented generation
1.012026
Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation · ACL (1) 2026

Methods — techniques the papers use, named apart from their topics

evolutionary optimization · 2.0black-box attack · 2.0LLM-based evaluation · 2.0
YearPublicationVenuePosition
2026 Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation
abstract
Existing jamming attacks on Retrieval-Augmented Generation (RAG) systems typically induce explicit refusals or denial-ofservice behaviors, which are conspicuous and easy to detect.In this work, we formalize a subtler availability threat, termed soft failure, which degrades system utility by inducing fluent and coherent yet non-informative responses rather than overt failures.We propose Deceptive Evolutionary Jamming Attack (DEJA), an automated black-box attack framework that generates adversarial documents to trigger such soft failures by exploiting safety-aligned behaviors of large language models.DEJA employs an evolutionary optimization process guided by a fine-grained Answer Utility Score (AUS), computed via an LLM-based evaluator, to systematically degrade the certainty of answers while maintaining high retrieval success.Extensive experiments across multiple RAG configurations and benchmark datasets show that DEJA consistently drives responses toward low-utility soft failures, achieving SASR above 79% while keeping hard-failure rates below 15%, significantly outperforming prior attacks.The resulting adversarial documents exhibit high stealth, evading perplexity-based detection and resisting query paraphrasing, and transfer across model families to proprietary systems without retargeting.
Wentao Zhang 0011, Yan Zhuang 0002, ZhuHang Zheng, Mingfei Zhang, Jiawen Deng 0006, Fuji Ren
ACL (1)3