TopoGuard: Graph-Theory Defense Blocks Split-Knowledge Attacks on RAG Systems
Researchers have developed TopoGuard, a graph-theory-based defense that protects Retrieval-Augmented Generation (RAG) systems from 'split-knowledge' attacks. These attacks combine individually benign documents to mislead AI, bypassing per-document filters like LlamaGuard. TopoGuard detects the hidden relational patterns to block the threat.