Cross-family weak-to-weak spoofing on LLMmap Gemma-2B to Qwen2-1.5B
100ASROriginal (target)
Evaluation results
| Method | Links | |
|---|---|---|
| Original (target)Source Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 100 | |
| Original (target)Source Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 78 | |
| GhostPrintSource Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 46.7 | |
| Token SuppressionSource Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 16.7 | |
| Query DetectionSource Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 6.7 | |
| GhostPrintSource Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 4 | |
| RewritingSource Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 3.3 | |
| Token SuppressionSource Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 1 | |
| Original (weak)Source Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 0 | |
| Query DetectionSource Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 0 | |
| RewritingSource Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 0 | |
| 5-shot ICLSource Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 0 | |
| Original (weak)Source Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 0 | |
| 5-shot ICLSource Model=Gemma-2B, Target Model=Qwen2-1.5B2026.06 | 0 |