contrast to these works, Hu et al. (2024) proposed a method called Gradient Guided Prompt Perturbation (GGPP), a way to perturb the RALM, which was experimentally found to be effective in improving the situation by utilizing the SAT probe (Yuksekgonul et al., 2023) and activation (ACT) classifier. A method is proposed to detect this perturbation by prompting the internal state of the perturbed RALM. In addition, by proposing and improving the evaluation method of RALM and the related baseline can also help improve the robustness of the model, Chen et al. (2024) made a series of evaluation system for RALM by focusing on the robustness.