# Prompt Leakage Attack on MedQA Source: [Prompt Leakage Attack on MedQA]() Collection index: [llms.txt]() Data updated: 2026-02-26T05:24:00.771Z Evaluation of model robustness against prompt leakage attacks using the MedQA dataset, measured by Attack Success Rates (ASR) and related metrics. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Prompt Leakage Attack | | Dataset (including any stated split) | MedQA | | Metric | ASR (500) | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 16 of 16 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [ASR (500)](): Higher is better; unit: PERCENT. - [ASR (1000)](): Higher is better; unit: PERCENT. - [ASR (10000)](): Higher is better; unit: PERCENT. - [Win/Loss Ratio](): Higher is better; unit: SCALAR. - [ARPT](): Higher is better; unit: PERCENT. ## Recorded results | Method | ASR (500) | Result date | Report paper | | --- | --- | --- | --- | | SFT | 31.3 | Not recorded | 699e81e66017c4460ffacd1b | | OPTILEAK | 30.7 | Not recorded | 699e81e66017c4460ffacd1b | | OPTILEAK | 29.3 | Not recorded | 699e81e66017c4460ffacd1b | | SFT | 27.3 | Not recorded | 699e81e66017c4460ffacd1b | | SFT | 24 | Not recorded | 699e81e66017c4460ffacd1b | | DPO | 24 | Not recorded | 699e81e66017c4460ffacd1b | | Base | 23.3 | Not recorded | 699e81e66017c4460ffacd1b | | OPTILEAK | 22.7 | Not recorded | 699e81e66017c4460ffacd1b | | Base | 18 | Not recorded | 699e81e66017c4460ffacd1b | | DPO | 18 | Not recorded | 699e81e66017c4460ffacd1b | | Base | 18 | Not recorded | 699e81e66017c4460ffacd1b | | DPO | 17.3 | Not recorded | 699e81e66017c4460ffacd1b | | OPTILEAK | 12.6 | Not recorded | 699e81e66017c4460ffacd1b | | SFT | 8.7 | Not recorded | 699e81e66017c4460ffacd1b | | DPO | 8 | Not recorded | 699e81e66017c4460ffacd1b | | Base | 5.3 | Not recorded | 699e81e66017c4460ffacd1b | ### SFT ASR (500): 31.3. Result ID: 699eb0f25698665ec47e7b4b. [Reporting paper]() Recorded evaluation configuration: {"Model":"Qwen-2.5-14B-Instruct"}. This record does not assert independent reproduction. ### OPTILEAK ASR (500): 30.7. Result ID: 699eb0f25698665ec47e7b4d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Model":"Qwen-2.5-14B-Instruct"}. This record does not assert independent reproduction. ### OPTILEAK ASR (500): 29.3. Result ID: 699eb0f25698665ec47e7b45. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Model":"Qwen-2.5-3B-Instruct"}. This record does not assert independent reproduction. ### SFT ASR (500): 27.3. Result ID: 699eb0f25698665ec47e7b43. [Reporting paper]() Recorded evaluation configuration: {"Model":"Qwen-2.5-3B-Instruct"}. This record does not assert independent reproduction. ### SFT ASR (500): 24. Result ID: 699eb0f25698665ec47e7b47. [Reporting paper]() Recorded evaluation configuration: {"Model":"Qwen-2.5-7B-Instruct"}. This record does not assert independent reproduction. ### DPO ASR (500): 24. Result ID: 699eb0f25698665ec47e7b4c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Model":"Qwen-2.5-14B-Instruct"}. This record does not assert independent reproduction. ### Base ASR (500): 23.3. Result ID: 699eb0f25698665ec47e7b4a. [Reporting paper]() Recorded evaluation configuration: {"Model":"Qwen-2.5-14B-Instruct"}. This record does not assert independent reproduction. ### OPTILEAK ASR (500): 22.7. Result ID: 699eb0f25698665ec47e7b49. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Model":"Qwen-2.5-7B-Instruct"}. This record does not assert independent reproduction. ### Base ASR (500): 18. Result ID: 699eb0f25698665ec47e7b42. [Reporting paper]() Recorded evaluation configuration: {"Model":"Qwen-2.5-3B-Instruct"}. This record does not assert independent reproduction. ### DPO ASR (500): 18. Result ID: 699eb0f25698665ec47e7b44. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Model":"Qwen-2.5-3B-Instruct"}. This record does not assert independent reproduction. ### Base ASR (500): 18. Result ID: 699eb0f25698665ec47e7b46. [Reporting paper]() Recorded evaluation configuration: {"Model":"Qwen-2.5-7B-Instruct"}. This record does not assert independent reproduction. ### DPO ASR (500): 17.3. Result ID: 699eb0f25698665ec47e7b48. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Model":"Qwen-2.5-7B-Instruct"}. This record does not assert independent reproduction. ### OPTILEAK ASR (500): 12.6. Result ID: 699eb0f25698665ec47e7b51. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Model":"Llama-3.1-8B-Instruct"}. This record does not assert independent reproduction. ### SFT ASR (500): 8.7. Result ID: 699eb0f25698665ec47e7b4f. [Reporting paper]() Recorded evaluation configuration: {"Model":"Llama-3.1-8B-Instruct"}. This record does not assert independent reproduction. ### DPO ASR (500): 8. Result ID: 699eb0f25698665ec47e7b50. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Model":"Llama-3.1-8B-Instruct"}. This record does not assert independent reproduction. ### Base ASR (500): 5.3. Result ID: 699eb0f25698665ec47e7b4e. [Reporting paper]() Recorded evaluation configuration: {"Model":"Llama-3.1-8B-Instruct"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.