Inference Cost Attack on HotpotQA
100wAANo Attack
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| No AttackRAG configuration=default2026.05 | 100 | — | 100 | 1 | |
| CREEP+-RTaskMA-GRPO=true, RAG configuration=default2026.05 | 97 | 100 | 90 | 1.1 | |
| CREEP+-GTaskMA-GRPO=true, RAG configuration=default2026.05 | 97 | 100 | 89 | 1.11 | |
| CREEP-GTaskMA-GRPO=false, RAG configuration=default2026.05 | 94 | 100 | 85 | 1.04 | |
| CREEP-GDecoyMA-GRPO=false, RAG configuration=default2026.05 | 92 | 98 | 36 | 1.36 | |
| CREEP+-GDecoyMA-GRPO=true, RAG configuration=default2026.05 | 90 | 100 | 61 | 1.74 | |
| CREEP+-RDecoyMA-GRPO=true, RAG configuration=default2026.05 | 89 | 99 | 71 | 1.37 | |
| CREEP-RTaskMA-GRPO=false, RAG configuration=default2026.05 | 88 | 90 | 84 | 0.99 | |
| CREEP+-GContraMA-GRPO=true, RAG configuration=default2026.05 | 85 | 100 | 55 | 1.94 | |
| CREEP-RContraMA-GRPO=false, RAG configuration=default2026.05 | 77 | 100 | 64 | 1.94 | |
| CREEP+-RContraMA-GRPO=true, RAG configuration=default2026.05 | 69 | 99 | 21 | 2.41 | |
| CREEP-GContraMA-GRPO=false, RAG configuration=default2026.05 | 63 | 98 | 50 | 1.74 | |
| CREEP-RDecoyMA-GRPO=false, RAG configuration=default2026.05 | 59 | 69 | 46 | 1.09 | |
| PoisonedRAGRAG configuration=default2026.05 | 53 | 99 | 60 | 1.52 | |
| Context-Agnostic AttackRAG configuration=default2026.05 | 37 | 42 | 31 | 1.29 | |
| ICL-Genetic Attack (Agnostic)RAG configuration=default2026.05 | 12.35 | 14 | 5.77 | 1.06 | |
| ParadoxRAG configuration=default2026.05 | 2 | 81 | 70 | 1.21 |