RAG Security: Protecting Retrieval-Augmented Generation App