Input Collision Attack on Input Reconstruction Dataset
91.8BERTScore (First)Original
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| OriginalModel=Qwen2.5-Math-7B2025.08 | 91.8 | 55.2 | 78.3 | 84.2 | 35.5 | 58 | |
| (10^8, 10^{-5})-DPModel=Qwen2.5-Math-7B2025.08 | 87.9 | 27.4 | 31.7 | 79 | 10 | 14.3 | |
| OriginalModel=LLaMA-3.1-8B2025.08 | 87.3 | 65.2 | 76.4 | 82.5 | 44.3 | 56.4 | |
| OriginalModel=LLaMA-3.2-3B-Instruct2025.08 | 78.2 | 66.8 | 82 | 73.2 | 45.6 | 62.1 | |
| (10^8, 10^{-5})-DPModel=LLaMA-3.1-8B2025.08 | 34.3 | 52.6 | 61.4 | 32.8 | 28.4 | 41.9 | |
| (10^8, 10^{-5})-DPModel=LLaMA-3.2-3B-Instruct2025.08 | 22.3 | 59.2 | 76 | 26.1 | 36 | 51.7 | |
| KV-CloakModel=LLaMA-3.2-3B-Instruct2025.08 | 6.9 | 7 | 6.9 | 0 | 0 | 0 | |
| KV-CloakModel=LLaMA-3.1-8B2025.08 | 6.9 | 6.9 | 6.9 | 0 | 0 | 0 | |
| KV-CloakModel=Qwen2.5-Math-7B2025.08 | 6.9 | 6.9 | 7 | 0 | 0 | 0 |