Downstream Generation on MS MARCO
92Substring ASRBaseline
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| BaselinePoison Method=Joint-GCG, Top-k=52026.03 | 92 | 93 | 5 | |
| BaselinePoison Method=PoisonedRAG, Top-k=52026.03 | 89 | 94 | 4 | |
| BaselinePoison Method=Macro Avg, Top-k=52026.03 | 79.9 | 89.1 | 8.1 | |
| BaselinePoison Method=LIAR-RAG, Top-k=52026.03 | 58.7 | 80.4 | 15.2 | |
| RAGuardPoison Method=Joint-GCG, Top-k=52026.03 | 40 | 41 | 42 | |
| RAGuardPoison Method=PoisonedRAG, Top-k=52026.03 | 38 | 39 | 43 | |
| RAGuardPoison Method=Macro Avg, Top-k=52026.03 | 37.6 | 38.5 | 45 | |
| RAGuardPoison Method=LIAR-RAG, Top-k=52026.03 | 34.8 | 35.5 | 50 | |
| GMTPPoison Method=PoisonedRAG, Top-k=52026.03 | 13 | 6 | 21 | |
| GMTPPoison Method=Joint-GCG, Top-k=52026.03 | 13 | 6 | 21 | |
| GMTPPoison Method=Macro Avg, Top-k=52026.03 | 11.6 | 6.9 | 22 | |
| GRADAPoison Method=PoisonedRAG, Top-k=52026.03 | 10 | 3 | 40 | |
| GRADAPoison Method=Joint-GCG, Top-k=52026.03 | 10 | 3 | 40 | |
| GRADAPoison Method=Macro Avg, Top-k=52026.03 | 8.8 | 2.7 | 42.6 | |
| GMTPPoison Method=LIAR-RAG, Top-k=52026.03 | 8.7 | 8.7 | 23.9 | |
| GRADAPoison Method=LIAR-RAG, Top-k=52026.03 | 6.5 | 2.2 | 47.8 | |
| ProGRankAttack Type=Macro Avg2026.03 | 4.9 | 1.9 | 42.9 | |
| ProGRankPoison Method=Macro Avg, Top-k=52026.03 | 3.3 | 0 | 44.7 | |
| ProGRankAttack Type=PoisonedRAG2026.03 | 2.8 | 1.1 | 38.2 | |
| ProGRankAttack Type=Joint-GCG2026.03 | 2.7 | 3.4 | 52.1 | |
| ProGRankAttack Type=LIAR-RAG2026.03 | 1.7 | 1 | 38.3 | |
| ProGRankPoison Method=LIAR-RAG, Top-k=52026.03 | 1.1 | 0 | 40 | |
| ProGRankPoison Method=PoisonedRAG, Top-k=52026.03 | 0 | 0 | 40 | |
| ProGRankPoison Method=Joint-GCG, Top-k=52026.03 | 0 | 0 | 54 |