text: [22] S. Cho, S. Jeong, J. Seo, T. Hwang, and J. C. Park, “Typos that broke the RAG’s back: Genetic attack on RAG 
  pipeline by simulating documents in the wild via low-level perturbations,” arXiv preprint arXiv:2404.13948, 2024. 
  
  [23] J. Chu, Y. Liu, Z. Yang, X. Shen, M. Backes, and Y. Zhang, “Comprehensive assessment of jailbreak attacks against 
  LLMs,” arXiv preprint arXiv:2402.05668, 2024. 
  
  [24] K. Cobbe, V. Kosaraju, M. Bavarian, M. Chen, H. Jun, L. Kaiser, M. Plappert, J. Tworek, J. Hilton, R. Nakano et al., 
  “Training verifiers to solve math word problems,” arXiv preprint arXiv:2110.14168, 2021. 
  
  [25] N. Dalvi, P. Domingos, Mausam, S. Sanghai, and D. Verma, “Adversarial classification,” in Proceedings of the tenth 