RAG Poisoning Attack (Document-Level Targeting) on BioASQ
48.9RSR@5CorpusPoisoning
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| CorpusPoisoningRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini2025.12 | 48.9 | 5.32 | 14.93 | 2.3 | |
| MIRAGERetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini2025.12 | 40.2 | 25.12 | 46.77 | 5.77 | |
| Prompt InjectionRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini2025.12 | 33.8 | 7.99 | 25.44 | 5.16 | |
| PoisonedRAG-BRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini2025.12 | 32.2 | 13.98 | 26.4 | 5.61 | |
| PARADOXRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini2025.12 | 13.3 | 21.05 | 45.11 | 5.24 | |
| DIGARetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini2025.12 | 0.2 | 0 | 0 | 2 | |
| GCG AttackRetriever=Qwen3-Embedding-8B, Backend LLM=GPT-4o mini2025.12 | 0 | — | — | 1.93 |