提出逻辑污染攻击,让图增强生成系统推理失效却不改文本内容。
LogicPoison: Logical Attacks on Graph Retrieval-Augmented Generation
- 通过实体替换破坏图结构逻辑连接,不修改文字表面意思。
- 在多个基准上使GraphRAG性能显著下降,攻击隐蔽性强。
- 适合研究模型安全、图神经网络鲁棒性的研究人员参考。
基于图的检索增强生成(GraphRAG)通过结构化知识图谱提升大语言模型的推理能力,其防御传统RAG攻击(如文本投毒、提示注入)具有天然优势。然而本文发现,GraphRAG的安全性本质依赖于底层图的拓扑完整性,可通过隐式破坏逻辑连接而无需修改表层文本语义来攻破。为此,我们提出 extsc{LogicPoison}攻击框架,聚焦于逻辑推理而非注入虚假内容。该方法采用类型保持的实体交换机制,扰动全局逻辑枢纽以破坏整体连通性,并针对查询特定的推理桥接路径进行切断,从而有效将合法推理引导至死胡同,同时保持文本层面的合理性。在多个基准上的全面实验表明, extsc{LogicPoison}成功绕过GraphRAG的防御,显著降低其性能,且在效果与隐蔽性上均优于现有基线。代码已开源。
原文摘要 · Abstract (English)
Graph-based Retrieval-Augmented Generation (GraphRAG) enhances the reasoning capabilities of Large Language Models (LLMs) by grounding their responses in structured knowledge graphs. Leveraging community detection and relation filtering techniques, GraphRAG systems demonstrate inherent resistance to traditional RAG attacks, such as text poisoning and prompt injection. However, in this paper, we find that the security of GraphRAG systems fundamentally relies on the topological integrity of the underlying graph, which can be undermined by implicitly corrupting the logical connections, without altering surface-level text semantics. To exploit this vulnerability, we propose \textsc{LogicPoison}, a novel attack framework that targets logical reasoning rather than injecting false contents. Specifically, \textsc{LogicPoison} employs a type-preserving entity swapping mechanism to perturb both global logic hubs for disrupting overall graph connectivity and query-specific reasoning bridges for severing essential multi-hop inference paths. This approach effectively reroutes valid reasoning into dead ends while maintaining surface-level textual plausibility. Comprehensive experiments across multiple benchmarks demonstrate that \textsc{LogicPoison} successfully bypasses GraphRAG's defenses, significantly degrading performance and outperforming state-of-the-art baselines in both effectiveness and stealth. Our code is available at \textcolor{blue}https://github.com/Jord8061/logicPoison.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。