Attacking Cascade System Decision Maker on AGNews
94AccuracyLLM w/o cascade
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| LLM w/o cascadeCascade system=Qwen2.5 + BERT-base + Mistral-7B + BERT-base + Phi-3.5-MoE2026.05 | 94 | 112.58 | 8.12 | 100 | 100 | |
| InitialCascade system=Qwen2.5 + BERT-base + Mistral-7B + BERT-base + Phi-3.5-MoE2026.05 | 89.5 | 52.31 | 4.13 | 55 | 29 | |
| Joint-target attackCascade system=Qwen2.5 + BERT-base + Mistral-7B + BERT-base + Phi-3.5-MoE, Setting=P=12026.05 | 77.5 | 105.49 | 7.39 | 56 | 47.5 | |
| Single-target attackCascade system=Qwen2.5 + BERT-base + Mistral-7B + BERT-base + Phi-3.5-MoE, Setting=SLM only2026.05 | 76 | 91.41 | 6.83 | 66 | 45.5 | |
| Random noiseCascade system=Qwen2.5 + BERT-base + Mistral-7B + BERT-base + Phi-3.5-MoE2026.05 | 72.5 | 64.14 | 5.07 | 57.5 | 17.5 | |
| Single-target attackCascade system=Qwen2.5 + BERT-base + Mistral-7B + BERT-base + Phi-3.5-MoE, Setting=DM only2026.05 | 70.5 | 72.46 | 5.74 | 58.5 | 39 | |
| Joint-target attackCascade system=Qwen2.5 + BERT-base + Mistral-7B + BERT-base + Phi-3.5-MoE, Setting=P=0.82026.05 | 68 | 89.74 | 6.42 | 57 | 39 | |
| Joint-target attackCascade system=Qwen2.5 + BERT-base + Mistral-7B + BERT-base + Phi-3.5-MoE, Setting=P=0.62026.05 | 59.5 | 77.31 | 5.61 | 58 | 30.5 | |
| Joint-target attackCascade system=Qwen2.5 + BERT-base + Mistral-7B + BERT-base + Phi-3.5-MoE, Setting=P=0.42026.05 | 50 | 60.57 | 4.84 | 56 | 22 | |
| Joint-target attackCascade system=Qwen2.5 + BERT-base + Mistral-7B + BERT-base + Phi-3.5-MoE, Setting=P=0.22026.05 | 42 | 49.88 | 4.02 | 60.5 | 14.5 | |
| Joint-target attackCascade system=Qwen2.5 + BERT-base + Mistral-7B + BERT-base + Phi-3.5-MoE, Setting=P=02026.05 | 34.5 | 37.19 | 3.45 | 62 | 7 |