Knowledge Poisoning Attack on HotpotQA
5ASRWithout Attack
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Without Attack2026.01 | 5 | — | |
| CEM Attacktrigger fragment length=52026.01 | 61 | 1 | |
| CEM Attacktrigger fragment length=42026.01 | 63 | 1 | |
| Baseline2026.01 | 64 | 1 | |
| CEM Attacktrigger fragment length=12026.01 | 64 | 1 | |
| CEM Attacktrigger fragment length=32026.01 | 64 | 1 | |
| CRCPModel=DeepSeek-R1, Defense Method=SeconRAG2026.06 | 65.34 | — | |
| Disinformation2026.01 | 66 | 1 | |
| CEM Attacktrigger fragment length=22026.01 | 66 | 1 | |
| CRCPModel=GPT-4o, Defense Method=TrustRAG2026.06 | 68.85 | — | |
| CRCPModel=DeepSeek-R1, Defense Method=TrustRAG2026.06 | 69.07 | — | |
| CRCPModel=LLaMA-2-7B, Defense Method=SeconRAG2026.06 | 70.58 | — | |
| CRCPModel=Qwen2.5-7B, Defense Method=TrustRAG2026.06 | 70.68 | — | |
| CRCPModel=Qwen2.5-7B, Defense Method=SeconRAG2026.06 | 70.85 | — | |
| CRCPModel=DeepSeek-R1, Defense Method=ASTUTERAG2026.06 | 71.25 | — | |
| CRCPModel=GPT-4o, Defense Method=ASTUTERAG2026.06 | 71.49 | — | |
| CRCPModel=LLaMA-2-7B, Defense Method=TrustRAG2026.06 | 72.34 | — | |
| CRCPModel=Qwen2.5-7B, Defense Method=ASTUTERAG2026.06 | 73.72 | — | |
| CRCPModel=GPT-4o, Defense Method=SeconRAG2026.06 | 74.72 | — | |
| CRCPModel=LLaMA-2-7B, Defense Method=ASTUTERAG2026.06 | 76.3 | — | |
| CRCPModel=Qwen2.5-7B, Defense Method=InstructRAG2026.06 | 77.32 | — | |
| CRCPModel=GPT-4o, Defense Method=InstructRAG2026.06 | 77.32 | — | |
| CRCPModel=DeepSeek-R1, Defense Method=InstructRAG2026.06 | 79.01 | — | |
| CRCPModel=LLaMA-2-7B, Defense Method=InstructRAG2026.06 | 80.37 | — | |
| CRCPModel=LLaMA-2-7B, Defense Method=VanillaRAG2026.06 | 90.12 | — | |
| CRCPModel=Qwen2.5-7B, Defense Method=VanillaRAG2026.06 | 91.36 | — | |
| CRCPModel=GPT-4o, Defense Method=VanillaRAG2026.06 | 91.76 | — | |
| CRCPModel=DeepSeek-R1, Defense Method=VanillaRAG2026.06 | 95.01 | — |