Research
Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection
Publication date not yet evaluated · Added arxiv.org
Page published
Coverage timeline
Single-source research — one report is available.
Why it matters
RAG-based intrusion detection systems introduce a retrieval layer vulnerable to knowledge poisoning and prompt injection, and this work measures the attack impact and proposes concrete defenses defenders can adopt to harden LLM-driven security pipelines.
The paper "Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection" presents RAG-IDS, a three-tier multi-agent intrusion detection framework with a retrieval-boundary defense combining soft trust scoring, label-embedding consistency checking (LECC), and prompt sanitization. Experiments on CIC-UNSW-NB15 show recovery under knowledge poisoning and reduced label-flip success under prompt injection when using multi-document retrieval.