Collision Attack on Input Reconstruction (last)
89.4BERTScoreOriginal
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| OriginalModel=LLaMA-3.2-1B2025.08 | 89.4 | 68 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.2-1B2025.08 | 84.9 | 60.4 | |
| OriginalModel=LLaMA-3.1-8B-Distilled2025.08 | 63.5 | 41.3 | |
| OriginalModel=LLaMA-7B2025.08 | 61.1 | 43.6 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.1-8B-Distilled2025.08 | 56.6 | 35.1 | |
| (10^8, 10^-5)-DPModel=LLaMA-7B2025.08 | 34.4 | 19.7 | |
| KV-CloakModel=LLaMA-7B2025.08 | 7.1 | 0 | |
| KV-CloakModel=LLaMA-3.2-1B2025.08 | 6.9 | 0 | |
| KV-CloakModel=LLaMA-3.1-8B-Distilled2025.08 | 6.9 | 0 | |
| OriginalModel=LLaMA-3.2-1B, Protect Type=Original2025.08 | 0.894 | 0.68 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.2-1B, Protect Type=(10^8, 10^-5)-DP2025.08 | 0.849 | 0.604 | |
| OriginalModel=LLaMA-3.1-8B-Distilled, Protect Type=Original2025.08 | 0.635 | 0.413 | |
| OriginalModel=LLaMA-7B, Protect Type=Original2025.08 | 0.611 | 0.436 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.1-8B-Distilled, Protect Type=(10^8, 10^-5)-DP2025.08 | 0.566 | 0.351 | |
| (10^8, 10^-5)-DPModel=LLaMA-7B, Protect Type=(10^8, 10^-5)-DP2025.08 | 0.344 | 0.197 | |
| KV-CloakModel=LLaMA-7B, Protect Type=KV-Cloak2025.08 | 0.071 | 0 | |
| KV-CloakModel=LLaMA-3.2-1B, Protect Type=KV-Cloak2025.08 | 0.069 | 0 | |
| KV-CloakModel=LLaMA-3.1-8B-Distilled, Protect Type=KV-Cloak2025.08 | 0.069 | 0 |