发表机构
Fudan University; Shanghai Pudong Research Institute of Cryptology（复旦大学; 上海浦东密码学研究院）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
本研究提出测量框架，分析10个AI搜索平台的引用实例，发现低门槛发布内容可进入AI搜索引用，且该路径可通过商业手段实现，揭示了AI搜索的脆弱性。
AI 中文摘要
随着越来越多用户向AI系统询问信息，AI搜索平台正成为获取网络信息的常用入口。与传统搜索将关键词映射到排名网页不同，AI搜索会在用户看到来源前，先检索网页、筛选来源、选择引用内容并生成答案。这一选择层可能会放大来源偏差，使来源选择成为一个安全问题。如果某平台反复引用新用户可轻松发布帖子的域名，这些域名上的普通发布内容可能会成为进入AI搜索引用和答案文本的间接路径。测量这一路径颇具难度：平台几乎不披露引用选择的相关信息，引用内容会随时间变化，且网络包含大量背景内容，导致后续答案变化难以归因于我们的帖子。我们提出一种测量框架，用于识别和测量这种低门槛发布路径，该框架结合了跨平台引用映射、发布门槛测试以及标记控制发布实验。在10个AI搜索平台上，我们分析了6356个独特来源域名的17211个引用实例，发现：（1）引用集中在平台特定来源中，前20个域名占每个平台引用量的20.5%至70.8%，22个接受测试的发布平台中，有15个与被引用来源域名相关，且在账户注册和发布方面均为低或中等门槛；（2）在我们的实验中，在偏好平台上的普通发布内容改变了进入AI搜索输出的内容：10个平台中有8个在7天内引用了一个虚构概念，且一个高偏好平台的文章比20多个匹配的低偏好帖子具有更大的引用影响；（3）这一路径可通过商业手段实现：14美元的GEO购买产生了13条公开帖子，且一个AI搜索平台在1小时内引用了我们设计标记的GEO发布内容。
英文摘要
As more users ask AI systems for information, AI-search platforms are becoming a common gateway to web information. Unlike traditional search, which maps keywords to ranked pages, AI search retrieves pages, filters sources, selects citations, and generates answers before users see sources. This selection layer may amplify source bias and turn source choice into a security question. If a platform repeatedly cites domains where new users can publish posts easily, ordinary publication on those domains can become an indirect path into AI-search citations and answer text. Measuring this path is hard: platforms reveal little about citation selection, citations change over time, and the web contains so much background content that later answer changes are hard to attribute to our posts. We present a measurement framework for identifying and measuring this low-barrier publication path, combining cross-platform citation mapping, publication-barrier testing, and marker-controlled publication experiments. Across 10 AI-search platforms, we analyze 17,211 citation instances over 6,356 unique source domains and find: (1) citations concentrate in platform-specific sources, with top-20 domains capturing 20.5--70.8% of per-platform citations, and 15 of 22 tested publication platforms tied to cited source domains had low or medium barriers for both account setup and posting; (2) in our experiments, ordinary publication on preferred platforms changed what entered AI-search outputs: 8 of 10 platforms cited a fabricated concept within seven days, and one high-preference-platform article had greater citation impact than over 20 matched low-preference posts; and (3) this path is commercially available: a $14 GEO purchase produced 13 public posts, and one AI-search platform cited GEO-posted content with our designed markers within one hour.
