Data Extraction Attack on Enron Mail naive defenses
100RRQi et al.
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| Qi et al.Target Model=GPT-4o2025.10 | 100 | 0 | 0 | |
| Zeng et al.Target Model=Claude 3.72025.10 | 100 | 0 | 0 | |
| Cohen et al.Target Model=GPT-4o2025.10 | 100 | 0 | 0 | |
| Jiang et al.Target Model=Claude 3.72025.10 | 100 | 0 | 0 | |
| Jiang et al.Target Model=Gemini 2.02025.10 | 100 | 0 | 0 | |
| Jiang et al.Target Model=GPT-4o2025.10 | 100 | 0 | 0 | |
| Jiang et al.Target Model=DeepSeek-V32025.10 | 100 | 0 | 0 | |
| Zeng et al.Target Model=GPT-4o2025.10 | 99.7 | 0 | 0 | |
| GCG LeakTarget Model=GPT-4o2025.10 | 99.7 | 0 | 0 | |
| GCG LeakTarget Model=Claude 3.72025.10 | 99.3 | 0 | 0 | |
| Qi et al.Target Model=Claude 3.72025.10 | 99 | 0 | 0 | |
| Zeng et al.Target Model=DeepSeek-V32025.10 | 99 | 0 | 2.5 | |
| GCG LeakTarget Model=DeepSeek-V32025.10 | 83.7 | 0.9 | 1.5 | |
| Qi et al.Target Model=Gemini 2.02025.10 | 60.7 | 1.6 | 3.5 | |
| Cohen et al.Target Model=DeepSeek-V32025.10 | 60.7 | 5.7 | 10.2 | |
| Zeng et al.Target Model=Gemini 2.02025.10 | 46.7 | 0 | 0 | |
| Cohen et al.Target Model=Claude 3.72025.10 | 45.7 | 0 | 0 | |
| GCG LeakTarget Model=Gemini 2.02025.10 | 38 | 0 | 1 | |
| Qi et al.Target Model=DeepSeek-V32025.10 | 6.7 | 13 | 20.8 | |
| Cohen et al.Target Model=Gemini 2.02025.10 | 0.3 | 13.6 | 20.7 | |
| SECRETTarget Model=Claude 3.72025.10 | 0.3 | 19.9 | 31.6 | |
| SECRETTarget Model=Gemini 2.02025.10 | 0.3 | 18.1 | 35.8 | |
| SECRETTarget Model=GPT-4o2025.10 | 0 | 20.4 | 32.6 | |
| SECRETTarget Model=DeepSeek-V32025.10 | 0 | 18.6 | 36.2 |