Enhanced Collision Attack on Input Reconstruction (First split)
100BERTScoreOriginal
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| OriginalModel=LLaMA-7B, Protect Type=Original2025.08 | 100 | 100 | |
| OriginalModel=LLaMA-3.2-1B, Protect Type=Original2025.08 | 100 | 99.4 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.2-1B, Protect Type=(10^8, 10^-5)-DP2025.08 | 97.3 | 96.6 | |
| OriginalModel=LLaMA-3.1-8B-Distilled, Protect Type=Original2025.08 | 88.5 | 85.8 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.1-8B-Distilled, Protect Type=(10^8, 10^-5)-DP2025.08 | 52.6 | 53 | |
| (10^8, 10^-5)-DPModel=LLaMA-7B, Protect Type=(10^8, 10^-5)-DP2025.08 | 10.9 | 9.7 | |
| KV-CloakModel=LLaMA-3.2-1B, Protect Type=KV-Cloak2025.08 | 5.1 | 0.2 | |
| KV-CloakModel=LLaMA-3.1-8B-Distilled, Protect Type=KV-Cloak2025.08 | 4.1 | 0.3 | |
| KV-CloakModel=LLaMA-7B, Protect Type=KV-Cloak2025.08 | 3.6 | 4.4 |