Content Injection on Gemma-2B
92.9Keyword Occurrence (%)Original Attack
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| Original Attack2026.06 | 92.9 | 39.3 | 21.3 | |
| AttackedInference Precision=LLM.int8()2026.06 | 92.9 | — | — | |
| Adaptive Attack2026.06 | 89.7 | 36.7 | 20 | |
| AttackedInference Precision=NF42026.06 | 89.3 | — | — | |
| AttackedInference Precision=FP42026.06 | 80.4 | — | — | |
| GaussianInference Precision=LLM.int8()2026.06 | 2.73 | — | — | |
| QVec2026.06 | 0.33 | 36.1 | 19.5 | |
| OriginalInference Precision=FP322026.06 | 0.07 | — | — | |
| QVecInference Precision=LLM.int8()2026.06 | 0.07 | — | — | |
| OriginalInference Precision=FP322026.06 | 0.07 | — | — | |
| GaussianInference Precision=FP42026.06 | 0.07 | — | — | |
| QVecInference Precision=FP42026.06 | 0.07 | — | — | |
| OriginalInference Precision=FP322026.06 | 0.07 | — | — | |
| GaussianInference Precision=NF42026.06 | 0.07 | — | — | |
| QVecInference Precision=NF42026.06 | 0.07 | — | — |