Knowledge Corruption Attack on HotpotQA (ASR, Memory, Time)
100ASRnanoGCG-OPT
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| nanoGCG-OPTLLM=Llama-3.1-8B-Instruct2026.04 | 100 | 91.1 | 1,244.7 | |
| FlashRTLLM=Llama-3.1-8B-Instruct2026.04 | 100 | 30.1 | 479.7 | |
| nanoGCGLLM=Llama-3.1-8B-Instruct2026.04 | 82 | 90.6 | 1,772.3 | |
| Context ClippingLLM=Llama-3.1-8B-Instruct2026.04 | 78 | 33.2 | 247.6 | |
| Heuristic AttackLLM=Llama-3.1-8B-Instruct2026.04 | 64 | 0 | 0 |