Demo Data from EDBT 2026 / reviewers in the wild / expert
ZhuHang Zheng
dblp:435/8754
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2026
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
1 paper |
Language models and text generation · 100% | |
| Network and information security
1 paper |
Security and privacy of machine learning · 100% |
Topics — the 2 heaviest of 3, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Natural language and speech › Language models and text generation › retrieval-augmented generation
robust retrieval-augmented generation |
1.0 | 1 | 2026 | Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation · ACL (1) 2026 |
Security and privacy of machine learning › adversarial attack › large language model attack
adversarial attack on retrieval-augmented generation |
1.0 | 1 | 2026 | Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation · ACL (1) 2026 |
Methods — techniques the papers use, named apart from their topics
evolutionary optimization · 2.0black-box attack · 2.0LLM-based evaluation · 2.0
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented GenerationabstractExisting jamming attacks on Retrieval-Augmented Generation (RAG) systems typically induce explicit refusals or denial-ofservice behaviors, which are conspicuous and easy to detect.In this work, we formalize a subtler availability threat, termed soft failure, which degrades system utility by inducing fluent and coherent yet non-informative responses rather than overt failures.We propose Deceptive Evolutionary Jamming Attack (DEJA), an automated black-box attack framework that generates adversarial documents to trigger such soft failures by exploiting safety-aligned behaviors of large language models.DEJA employs an evolutionary optimization process guided by a fine-grained Answer Utility Score (AUS), computed via an LLM-based evaluator, to systematically degrade the certainty of answers while maintaining high retrieval success.Extensive experiments across multiple RAG configurations and benchmark datasets show that DEJA consistently drives responses toward low-utility soft failures, achieving SASR above 79% while keeping hard-failure rates below 15%, significantly outperforming prior attacks.The resulting adversarial documents exhibit high stealth, evading perplexity-based detection and resisting query paraphrasing, and transfer across model families to proprietary systems without retargeting. Wentao Zhang 0011, Yan Zhuang 0002, ZhuHang Zheng, Mingfei Zhang, Jiawen Deng 0006, Fuji Ren |
ACL (1) | 3 |