Enhanced Collision Attack on Input Reconstruction (Last split)
1BERTScoreOriginal
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| OriginalModel=LLaMA-7B2025.08 | 1 | 1 | |
| OriginalModel=LLaMA-3.2-1B2025.08 | 1 | 0.994 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.2-1B2025.08 | 1 | 0.994 | |
| OriginalModel=LLaMA-7B, Protect Type=Original2025.08 | 1 | 1 | |
| OriginalModel=LLaMA-3.2-1B, Protect Type=Original2025.08 | 1 | 0.994 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.2-1B, Protect Type=(10^8, 10^-5)-DP2025.08 | 1 | 0.994 | |
| (10^8, 10^-5)-DPModel=LLaMA-7B2025.08 | 0.991 | 0.979 | |
| (10^8, 10^-5)-DPModel=LLaMA-7B, Protect Type=(10^8, 10^-5)-DP2025.08 | 0.991 | 0.979 | |
| OriginalModel=LLaMA-3.1-8B-Distilled2025.08 | 0.829 | 0.552 | |
| OriginalModel=LLaMA-3.1-8B-Distilled, Protect Type=Original2025.08 | 0.829 | 0.552 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.1-8B-Distilled2025.08 | 0.824 | 0.543 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.1-8B-Distilled, Protect Type=(10^8, 10^-5)-DP2025.08 | 0.824 | 0.543 | |
| KV-CloakModel=LLaMA-3.2-1B2025.08 | 0.051 | 0.002 | |
| KV-CloakModel=LLaMA-3.2-1B, Protect Type=KV-Cloak2025.08 | 0.051 | 0.002 | |
| KV-CloakModel=LLaMA-3.1-8B-Distilled2025.08 | 0.041 | 0.003 | |
| KV-CloakModel=LLaMA-3.1-8B-Distilled, Protect Type=KV-Cloak2025.08 | 0.041 | 0.003 | |
| KV-CloakModel=LLaMA-7B2025.08 | 0.036 | 0.044 | |
| KV-CloakModel=LLaMA-7B, Protect Type=KV-Cloak2025.08 | 0.036 | 0.044 |