arXiv Computation and Language
Aug 27

Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution

The paper introduces TRACE, a lightweight framework for detecting corpus poisoning in Retrieval-Augmented Generation systems. TRACE works by tracing answer-related tokens through token influence attribution, first identifying recurrent high-influence keywords across retrieved documents and then verifying their impact on model predictions. Experiments on three QA benchmarks and six large language models show that TRACE achieves strong detection performance while also revealing attacker-specified target answers.

By Yan-Lun Chen, Pin-Yu Chen, Chia-Mu Yu, Ying-Dar Lin, Yu-Sung Wu, Wei-Bin Lee