Malicious Agent on PoisonRAG
27ASR@3No Defense
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| No DefenseTopology=Random2025.12 | 27 | — | |
| No DefenseTopology=Star, Backbone LLM=GPT-4o-mini2025.08 | 26 | — | |
| No DefenseTopology=Random, Backbone LLM=GPT-4o-mini2025.08 | 24.67 | — | |
| No DefenseTopology=Star2025.12 | 24.33 | — | |
| TAMTopology=Random, Backbone LLM=GPT-4o-mini2025.08 | 23.67 | 49.78 | |
| No DefenseTopology=Chain, Backbone LLM=GPT-4o-mini2025.08 | 22.33 | — | |
| TAMTopology=Random2025.12 | 20.67 | 50.22 | |
| No DefenseTopology=Chain2025.12 | 20.33 | — | |
| TAMTopology=Star, Backbone LLM=GPT-4o-mini2025.08 | 19.67 | 66.22 | |
| No DefenseTopology=Tree, Backbone LLM=GPT-4o-mini2025.08 | 18 | — | |
| No DefenseTopology=Tree2025.12 | 17.67 | — | |
| DOMINANTTopology=Random2025.12 | 17.67 | 64.89 | |
| TAMTopology=Chain2025.12 | 17 | 51.56 | |
| DOMINANTTopology=Random, Backbone LLM=GPT-4o-mini2025.08 | 17 | 65.33 | |
| TAMTopology=Star2025.12 | 16 | 66.22 | |
| DOMINANTTopology=Star2025.12 | 15.67 | 64.44 | |
| BlindGuardTopology=Chain2025.12 | 14.67 | 80.89 | |
| TAMTopology=Chain, Backbone LLM=GPT-4o-mini2025.08 | 14.67 | 52 | |
| DOMINANTTopology=Chain2025.12 | 14.33 | 66.67 | |
| DOMINANTTopology=Tree, Backbone LLM=GPT-4o-mini2025.08 | 14.33 | 65.33 | |
| DOMINANTTopology=Tree2025.12 | 13.67 | 64.89 | |
| DOMINANTTopology=Star, Backbone LLM=GPT-4o-mini2025.08 | 13.67 | 65.33 | |
| PREMTopology=Random, Backbone LLM=GPT-4o-mini2025.08 | 13.67 | 62.22 | |
| TAMTopology=Tree2025.12 | 13.33 | 58.22 | |
| PREMTopology=Star2025.12 | 13.33 | 62.67 | |
| BlindGuardTopology=Random2025.12 | 12.33 | 81.78 | |
| TAMTopology=Tree, Backbone LLM=GPT-4o-mini2025.08 | 12 | 56.44 | |
| PREMTopology=Random2025.12 | 11 | 61.33 | |
| DOMINANTTopology=Chain, Backbone LLM=GPT-4o-mini2025.08 | 11 | 64 | |
| BlindGuardTopology=Star2025.12 | 10.33 | 87.11 | |
| BlindGuardTopology=Chain, Backbone LLM=GPT-4o-mini2025.08 | 10 | 81.78 | |
| BlindGuardTopology=Star, Backbone LLM=GPT-4o-mini2025.08 | 10 | 89.33 | |
| PREMTopology=Tree2025.12 | 9 | 59.11 | |
| PREMTopology=Star, Backbone LLM=GPT-4o-mini2025.08 | 9 | 62.22 | |
| BlindGuardTopology=Tree2025.12 | 8.33 | 75.56 | |
| PREMTopology=Tree, Backbone LLM=GPT-4o-mini2025.08 | 8.33 | 62.22 | |
| PREMTopology=Chain2025.12 | 7 | 58.67 | |
| BlindGuardTopology=Tree, Backbone LLM=GPT-4o-mini2025.08 | 7 | 76.89 | |
| G-SafeguardTopology=Random, Backbone LLM=GPT-4o-mini2025.08 | 7 | 98.67 | |
| BlindGuardTopology=Random, Backbone LLM=GPT-4o-mini2025.08 | 6.67 | 82.67 | |
| XG-GuardTopology=Random2025.12 | 6.33 | 99.56 | |
| G-SafeguardTopology=Star2025.12 | 6 | 100 | |
| PREMTopology=Chain, Backbone LLM=GPT-4o-mini2025.08 | 6 | 61.33 | |
| XG-GuardTopology=Tree2025.12 | 5 | 99.11 | |
| G-SafeguardTopology=Tree2025.12 | 4.33 | 99.11 | |
| G-SafeguardTopology=Chain2025.12 | 4 | 100 | |
| G-SafeguardTopology=Chain, Backbone LLM=GPT-4o-mini2025.08 | 4 | 100 | |
| XG-GuardTopology=Chain2025.12 | 3.67 | 99.56 | |
| G-SafeguardTopology=Random2025.12 | 3.67 | 97.78 | |
| G-SafeguardTopology=Tree, Backbone LLM=GPT-4o-mini2025.08 | 3 | 100 | |
| XG-GuardTopology=Star2025.12 | 2.33 | 98.67 | |
| G-SafeguardTopology=Star, Backbone LLM=GPT-4o-mini2025.08 | 1.67 | 100 |