In-domain Corpus Poisoning Attack on MS MARCO
61ASRBaseline
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| Baseline2026.01 | 61 | — | — | — | — | — | 0.97 | |
| CEM Attacktrigger fragment length=42026.01 | 54 | — | — | — | — | — | 0.96 | |
| CEM Attacktrigger fragment length=22026.01 | 52 | — | — | — | — | — | 0.86 | |
| CEM Attacktrigger fragment length=32026.01 | 52 | — | — | — | — | — | 0.96 | |
| CEM Attacktrigger fragment length=52026.01 | 46 | — | — | — | — | — | 0.99 | |
| CEM Attacktrigger fragment length=12026.01 | 44 | — | — | — | — | — | 0.76 | |
| Disinformation2026.01 | 32 | — | — | — | — | — | 0.46 | |
| Without Attack2026.01 | 7 | — | — | — | — | — | — | |
| AGGDNumber of adversarial passages=12024.06 | — | 85.47 | 24.42 | 93.6 | 12.79 | 5.23 | — | |
| Hot FlipNumber of adversarial passages=12024.06 | — | 83.72 | 22.67 | 76.16 | 9.88 | 5.81 | — | |
| RandomNumber of adversarial passages=12024.06 | — | 66.86 | 13.95 | 49.42 | 6.4 | 2.91 | — |