ResearchBenchmarksBackdoor Attack on Healthcare Advice ScenarioBackdoor Attack on Healthcare Advice ScenarioFollow3.14Average Turn CountRareBN3.07883.49193.9054.3181May 30, 2026Evaluation resultsMethodMethodLinksAverage Turn CountTarget Generation Rate (TGR)AIR (Total)AIR (Novice)AIR (General)AIR (Expert)Attack Success Rate (ASR)False Positive Rate (FPR)Clean Accuracy (CACC)True Response Rate (TRR)Effective Attack Success Rate (EASR)RareBN2026.053.14—2111.8348.51000100021FreqBN2026.053.15—5567.621.275.81004100055PAB2026.053.251008810063.6100840.510098.273.9MTHB2026.054.58—1911.86.139.49401001.117.9BrieFool2026.054.67—95.9021.210099923