Fact-Level RAG Poisoning Attack on FinQA
99.8RSR@5Prompt Injection
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| Prompt InjectionRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 99.8 | 87.68 | 80.16 | 70.94 | 4.8 | |
| MIRAGERetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 99.7 | 99.3 | 95.79 | 62.29 | 5.76 | |
| PARADOXRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 98.2 | 86.46 | 78.31 | 61.51 | 5.58 | |
| PoisonedRAG-BRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 93.1 | 98.6 | 89.47 | 57.79 | 5.1 | |
| CorpusPoisoningRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 66.8 | 63.02 | 62.28 | 34.43 | 3.15 | |
| DIGARetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 36.4 | 1.92 | 1.1 | 2.47 | 1.92 | |
| GCG AttackRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 1.4 | 0 | 0 | 0 | 1.68 |