Collision Attack on Input Reconstruction (Mid)
1BERTScoreOriginal
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| OriginalModel=LLaMA-7B2025.08 | 1 | 1 | |
| OriginalModel=LLaMA-3.2-1B2025.08 | 1 | 0.994 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.2-1B2025.08 | 0.995 | 0.989 | |
| (10^8, 10^-5)-DPModel=LLaMA-7B2025.08 | 0.937 | 0.901 | |
| OriginalModel=LLaMA-3.2-1B2025.08 | 0.791 | 0.617 | |
| OriginalModel=LLaMA-3.2-1B, Protect Type=Original2025.08 | 0.791 | 0.617 | |
| OriginalModel=LLaMA-7B2025.08 | 0.769 | 0.562 | |
| OriginalModel=LLaMA-7B, Protect Type=Original2025.08 | 0.769 | 0.562 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.2-1B2025.08 | 0.763 | 0.587 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.2-1B, Protect Type=(10^8, 10^-5)-DP2025.08 | 0.763 | 0.587 | |
| (10^8, 10^-5)-DPModel=LLaMA-7B2025.08 | 0.672 | 0.433 | |
| (10^8, 10^-5)-DPModel=LLaMA-7B, Protect Type=(10^8, 10^-5)-DP2025.08 | 0.672 | 0.433 | |
| OriginalModel=LLaMA-3.1-8B-Distilled2025.08 | 0.492 | 0.227 | |
| OriginalModel=LLaMA-3.1-8B-Distilled, Protect Type=Original2025.08 | 0.492 | 0.227 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.1-8B-Distilled2025.08 | 0.44 | 0.185 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.1-8B-Distilled, Protect Type=(10^8, 10^-5)-DP2025.08 | 0.44 | 0.185 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.1-8B-Distilled2025.08 | 0.267 | 0.122 | |
| OriginalModel=LLaMA-3.1-8B-Distilled2025.08 | 0.251 | 0.112 | |
| KV-CloakModel=LLaMA-3.2-1B2025.08 | 0.074 | 0 | |
| KV-CloakModel=LLaMA-3.2-1B, Protect Type=KV-Cloak2025.08 | 0.074 | 0 | |
| KV-CloakModel=LLaMA-3.1-8B-Distilled2025.08 | 0.07 | 0 | |
| KV-CloakModel=LLaMA-3.1-8B-Distilled, Protect Type=KV-Cloak2025.08 | 0.07 | 0 | |
| KV-CloakModel=LLaMA-7B2025.08 | 0.069 | 0 | |
| KV-CloakModel=LLaMA-7B, Protect Type=KV-Cloak2025.08 | 0.069 | 0 | |
| KV-CloakModel=LLaMA-3.2-1B2025.08 | 0.051 | 0.002 | |
| KV-CloakModel=LLaMA-3.1-8B-Distilled2025.08 | 0.041 | 0.003 | |
| KV-CloakModel=LLaMA-7B2025.08 | 0.036 | 0.044 |