Downstream generation on NQ
90ASR (Substring)Baseline
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| BaselinePoison Method=Joint-GCG, Top-k=52026.03 | 90 | 92 | 8 | |
| BaselinePoison Method=Macro Avg, Top-k=52026.03 | 67.8 | 75.6 | 16.5 | |
| BaselinePoison Method=PoisonedRAG, Top-k=52026.03 | 61.2 | 65.3 | 28.6 | |
| BaselinePoison Method=LIAR-RAG, Top-k=52026.03 | 52.2 | 69.6 | 13 | |
| RAGuardPoison Method=Joint-GCG, Top-k=52026.03 | 37 | 36 | 35 | |
| RAGuardPoison Method=Macro Avg, Top-k=52026.03 | 30.2 | 30.7 | 40.6 | |
| RAGuardPoison Method=PoisonedRAG, Top-k=52026.03 | 27.6 | 29 | 36.7 | |
| RAGuardPoison Method=LIAR-RAG, Top-k=52026.03 | 26.1 | 27 | 50 | |
| GRADAPoison Method=PoisonedRAG, Top-k=52026.03 | 3.1 | 6.1 | 53.1 | |
| GRADAPoison Method=Joint-GCG, Top-k=52026.03 | 3 | 6 | 54 | |
| ProGRankAttack Type=Joint-GCG2026.03 | 3 | 2.4 | 33.3 | |
| GRADAPoison Method=Macro Avg, Top-k=52026.03 | 2.8 | 5.5 | 56.7 | |
| ProGRankAttack Type=PoisonedRAG2026.03 | 2.4 | 3 | 57.9 | |
| GRADAPoison Method=LIAR-RAG, Top-k=52026.03 | 2.2 | 4.3 | 63 | |
| GMTPPoison Method=PoisonedRAG, Top-k=52026.03 | 2 | 9.2 | 25.5 | |
| GMTPPoison Method=Joint-GCG, Top-k=52026.03 | 2 | 10 | 26 | |
| ProGRankAttack Type=Macro Avg2026.03 | 1.6 | 3.4 | 36.5 | |
| GMTPPoison Method=Macro Avg, Top-k=52026.03 | 1.3 | 9.3 | 28 | |
| ProGRankAttack Type=LIAR-RAG2026.03 | 1.2 | 2.2 | 18.6 | |
| ProGRankPoison Method=PoisonedRAG, Top-k=52026.03 | 0 | 0 | 59.6 | |
| GMTPPoison Method=LIAR-RAG, Top-k=52026.03 | 0 | 8.7 | 32.6 | |
| ProGRankPoison Method=LIAR-RAG, Top-k=52026.03 | 0 | 0 | 20 | |
| ProGRankPoison Method=Joint-GCG, Top-k=52026.03 | 0 | 0 | 35 | |
| ProGRankPoison Method=Macro Avg, Top-k=52026.03 | 0 | 0 | 38.2 |