Fact-Level RAG Poisoning Attack on TiEBe
100RSR@5MIRAGE
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| MIRAGERetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 100 | 74.4 | 74.8 | 23.2 | 5.54 | |
| PoisonedRAG-BRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 99.9 | 77.48 | 54.35 | 18.12 | 5.31 | |
| Prompt InjectionRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 98.6 | 27.38 | 26.98 | 14.71 | 4.97 | |
| CorpusPoisoningRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 98.3 | 43.74 | 39.17 | 12.11 | 3.1 | |
| PARADOXRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 93.3 | 30.23 | 51.34 | 19.08 | 5.67 | |
| DIGARetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 6.2 | 0 | 0 | 0 | 1.78 | |
| GCG AttackRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini, Targeting Level=Fact-Level2025.12 | 0 | — | — | — | 1.64 |