Fingerprint Spoofing on LLMmap official query set (8:2)
95LLMmap Attack Success Rate (ASR)GhostPrint
Evaluation results
| Method | Links | |
|---|---|---|
| GhostPrintTransfer Setting=Gemma-1.1-2B → Gemma-1.1-7B2026.06 | 95 | |
| Original (target)Transfer Setting=Gemma-1.1-2B → Gemma-1.1-7B2026.06 | 92 | |
| Original (target)Transfer Setting=Phi-3-mini → Phi-3-medium2026.06 | 91 | |
| Original (target)Transfer Setting=Qwen2-1.5B → Qwen2-7B2026.06 | 81 | |
| GhostPrintTransfer Setting=Phi-3-mini → Phi-3-medium2026.06 | 80 | |
| GhostPrintTransfer Setting=Qwen2-1.5B → Qwen2-7B2026.06 | 76 | |
| Query DetectionTransfer Setting=Qwen2-1.5B → Qwen2-7B2026.06 | 70 | |
| Query DetectionTransfer Setting=Phi-3-mini → Phi-3-medium2026.06 | 70 | |
| RewritingTransfer Setting=Qwen2-1.5B → Qwen2-7B2026.06 | 40 | |
| Query DetectionTransfer Setting=Gemma-1.1-2B → Gemma-1.1-7B2026.06 | 35 | |
| Token SuppressionTransfer Setting=Gemma-1.1-2B → Gemma-1.1-7B2026.06 | 28 | |
| RewritingTransfer Setting=Gemma-1.1-2B → Gemma-1.1-7B2026.06 | 20 | |
| 5-shot ICLTransfer Setting=Gemma-1.1-2B → Gemma-1.1-7B2026.06 | 15 | |
| Original (weak)Transfer Setting=Gemma-1.1-2B → Gemma-1.1-7B2026.06 | 12 | |
| Token SuppressionTransfer Setting=Qwen2-1.5B → Qwen2-7B2026.06 | 6 | |
| Original (weak)Transfer Setting=Phi-3-mini → Phi-3-medium2026.06 | 6 | |
| Token SuppressionTransfer Setting=Phi-3-mini → Phi-3-medium2026.06 | 5 | |
| Original (weak)Transfer Setting=Qwen2-1.5B → Qwen2-7B2026.06 | 4 | |
| 5-shot ICLTransfer Setting=Qwen2-1.5B → Qwen2-7B2026.06 | 0 | |
| RewritingTransfer Setting=Phi-3-mini → Phi-3-medium2026.06 | 0 | |
| 5-shot ICLTransfer Setting=Phi-3-mini → Phi-3-medium2026.06 | 0 |