Inference Cost Attack on MS-MARCO
100wAA (%)No Attack
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| No AttackRAG configuration=default2026.05 | 100 | — | 100 | 1 | |
| CREEP+-RTaskMA-GRPO=true, RAG configuration=default2026.05 | 78 | 79 | 78 | 1.18 | |
| CREEP+-GTaskMA-GRPO=true, RAG configuration=default2026.05 | 65 | 65 | 63 | 1.21 | |
| CREEP+-RDecoyMA-GRPO=true, RAG configuration=default2026.05 | 64 | 69 | 62 | 1.2 | |
| CREEP+-GContraMA-GRPO=true, RAG configuration=default2026.05 | 60 | 65 | 55 | 1.66 | |
| CREEP-GTaskMA-GRPO=false, RAG configuration=default2026.05 | 47 | 54 | 51 | 1.21 | |
| CREEP-GContraMA-GRPO=false, RAG configuration=default2026.05 | 43 | 57 | 44 | 1.32 | |
| CREEP-RContraMA-GRPO=false, RAG configuration=default2026.05 | 41 | 60 | 29 | 1.7 | |
| CREEP+-RContraMA-GRPO=true, RAG configuration=default2026.05 | 38 | 64 | 21 | 1.81 | |
| CREEP-RTaskMA-GRPO=false, RAG configuration=default2026.05 | 32 | 34 | 34 | 1.11 | |
| CREEP+-GDecoyMA-GRPO=true, RAG configuration=default2026.05 | 26 | 27 | 24 | 1.01 | |
| CREEP-RDecoyMA-GRPO=false, RAG configuration=default2026.05 | 24 | 29 | 28 | 1.1 | |
| PoisonedRAGRAG configuration=default2026.05 | 22 | 51 | 41 | 1.53 | |
| CREEP-GDecoyMA-GRPO=false, RAG configuration=default2026.05 | 15 | 17 | 8 | 1.09 | |
| ICL-Genetic Attack (Agnostic)RAG configuration=default2026.05 | 2 | 2 | 1.5 | 1 | |
| ParadoxRAG configuration=default2026.05 | 0 | 36 | 34 | 1.06 | |
| Context-Agnostic AttackRAG configuration=default2026.05 | — | 0 | — | — |