Inversion Attack on Input Reconstruction (First split)
100BERTScoreOriginal
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| OriginalModel=LLaMA-7B2025.08 | 100 | 100 | |
| OriginalModel=LLaMA-3.2-1B2025.08 | 100 | 99.4 | |
| OriginalModel=LLaMA-7B, Protect Type=Original2025.08 | 100 | 100 | |
| OriginalModel=LLaMA-3.2-1B, Protect Type=Original2025.08 | 100 | 99.4 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.2-1B2025.08 | 63.3 | 62.2 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.2-1B, Protect Type=(10^8, 10^-5)-DP2025.08 | 63.3 | 62.2 | |
| OriginalModel=Qwen2.5-Math-7B2025.08 | 22.9 | 18.6 | |
| (10^8, 10^{-5})-DPModel=Qwen2.5-Math-7B2025.08 | 10.8 | 1.8 | |
| KV-CloakModel=Qwen2.5-Math-7B2025.08 | 9.9 | 1.1 | |
| KV-CloakModel=LLaMA-3.1-8B-Distilled2025.08 | 9.3 | 0.2 | |
| KV-CloakModel=LLaMA-3.1-8B-Distilled, Protect Type=KV-Cloak2025.08 | 9.3 | 0.2 | |
| KV-CloakModel=LLaMA-7B2025.08 | 9.1 | 6.8 | |
| KV-CloakModel=LLaMA-7B, Protect Type=KV-Cloak2025.08 | 9.1 | 6.8 | |
| KV-CloakModel=LLaMA-3.2-3B-Instruct2025.08 | 8.8 | 0 | |
| (10^8, 10^-5)-DPModel=LLaMA-7B2025.08 | 8.5 | 6.5 | |
| KV-CloakModel=LLaMA-3.2-1B2025.08 | 8.5 | 0.9 | |
| (10^8, 10^-5)-DPModel=LLaMA-7B, Protect Type=(10^8, 10^-5)-DP2025.08 | 8.5 | 6.5 | |
| KV-CloakModel=LLaMA-3.2-1B, Protect Type=KV-Cloak2025.08 | 8.5 | 0.9 | |
| OriginalModel=LLaMA-3.1-8B-Distilled2025.08 | 8.3 | 0 | |
| OriginalModel=LLaMA-3.1-8B-Distilled, Protect Type=Original2025.08 | 8.3 | 0 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.1-8B-Distilled2025.08 | 7.9 | 0.3 | |
| (10^8, 10^-5)-DPModel=LLaMA-3.1-8B-Distilled, Protect Type=(10^8, 10^-5)-DP2025.08 | 7.9 | 0.3 | |
| KV-CloakModel=LLaMA-3.1-8B2025.08 | 7.6 | 0.4 | |
| (10^8, 10^{-5})-DPModel=LLaMA-3.1-8B2025.08 | 7.6 | 0.3 | |
| OriginalModel=LLaMA-3.1-8B2025.08 | 7.1 | 0 | |
| (10^8, 10^{-5})-DPModel=LLaMA-3.2-3B-Instruct2025.08 | 6.1 | 0 | |
| OriginalModel=LLaMA-3.2-3B-Instruct2025.08 | 5.5 | 0 |