Memory-poisoning defense on All four pooled over eight models aggregate
0Consequential ASR (%)TMA-NM
Evaluation results
| Method | Links | |
|---|---|---|
| TMA-NMDefense mechanism=TMA-NM, Model pooling=eight models2026.06 | 0 | |
| prob_detectDefense mechanism=prob_detect, Model pooling=eight models2026.06 | 12 | |
| lineageDefense mechanism=lineage, Model pooling=eight models2026.06 | 19.6 | |
| noneDefense mechanism=none, Model pooling=eight models2026.06 | 38.2 |