Dense retrievers have achieved state-of-the-art performance in various information retrieval tasks, but their robustness against tokenizer poisoning remains underexplored. In this work, we assess the vulnerability of dense retrieval systems to poisoned tokenizers by evaluating models such as BERT, Dense Passage Retrieval (DPR), Contriever, SimCSE, and ANCE. We find that supervised models like BERT and DPR experience significant performance degradation when tokenizers are compromised, while unsupervised models like ANCE show greater resilience. Our experiments reveal that even small perturbations can severely impact retrieval accuracy, highlighting the need for robust defenses in critical applications.
@article{arxiv.2410.20315,
title = {Deep Learning Based Dense Retrieval: A Comparative Study},
author = {Ming Zhong and Zhizhi Wu and Nanako Honda},
journal= {arXiv preprint arXiv:2410.20315},
year = {2024}
}