Fact-Level RAG Poisoning Attack on BioASQ
75.7RSR@5MIRAGE
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| MIRAGERetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 75.7 | 70.54 | 78.34 | 10.44 | 5.64 | |
| PoisonedRAG-BRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 69.6 | 57.33 | 56.32 | 10.92 | 5.79 | |
| CorpusPoisoningRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 66 | 14.85 | 37.58 | 2.12 | 2.31 | |
| Prompt InjectionRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 59.6 | 25.34 | 38.93 | 8.22 | 4.67 | |
| PARADOXRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 38.8 | 31.19 | 64.95 | 11.34 | 5.67 | |
| DIGARetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 0.8 | 0 | 0 | 0 | 2.08 | |
| GCG AttackRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 0 | — | — | — | 1.85 |