RAG Leakage Attack on ENRON EMAIL
88.3CCLPoR
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| PoRTarget LLM=Gemini-3-flash2026.05 | 88.3 | 100 | 88.4 | 99.9 | |
| PoRTarget LLM=GPT-5.12026.05 | 83.2 | 99 | 85.7 | 98.1 | |
| PoRTarget LLM=o4-mini2026.05 | 73.7 | 88.4 | 84.9 | 96.6 | |
| TGTBTarget LLM=Gemini-3-flash2026.05 | 72.3 | 88.5 | 87.4 | 94.2 | |
| PoRTarget LLM=Qwen-3-8B2026.05 | 70.2 | 87.5 | 88.8 | 92.2 | |
| TGTBTarget LLM=GPT-5.12026.05 | 69.5 | 84.5 | 87 | 97.3 | |
| GEN-PIDETarget LLM=Gemini-3-flash2026.05 | 69.4 | 82.5 | 84.8 | 92.6 | |
| RAG-ThiefTarget LLM=Qwen-3-235B2026.05 | 65.3 | 98.5 | 66 | 99.5 | |
| RAG-ThiefTarget LLM=DeepSeek-V32026.05 | 64.4 | 97.3 | 74.8 | 97.1 | |
| RAG-ThiefTarget LLM=Qwen-3-8B2026.05 | 64.1 | 97.5 | 68.6 | 98.4 | |
| PoRTarget LLM=Qwen-3-235B2026.05 | 46.2 | 58.5 | 81.2 | 93.2 | |
| RAG-ThiefTarget LLM=Gemini-3-flash2026.05 | 44.4 | 61 | 69.4 | 99.9 | |
| GEN-PIDETarget LLM=Qwen-3-235B2026.05 | 43.9 | 62 | 72.7 | 96.7 | |
| GEN-PIDETarget LLM=DeepSeek-V32026.05 | 38.8 | 49.5 | 78.4 | 94.9 | |
| GEN-PIDETarget LLM=o4-mini2026.05 | 38.4 | 47.5 | 84.8 | 95.3 | |
| GEN-PIDETarget LLM=GPT-5.12026.05 | 36.8 | 77.5 | 47.3 | 97.9 | |
| GEN-PIDETarget LLM=Qwen-3-8B2026.05 | 35.4 | 66 | 53.6 | 97.5 | |
| RAG-ThiefTarget LLM=o4-mini2026.05 | 28.4 | 46.7 | 49.3 | 99.4 | |
| IKEATarget LLM=Gemini-3-flash2026.05 | 23.2 | 48 | 48.2 | 83.8 | |
| TGTBTarget LLM=o4-mini2026.05 | 20.7 | 31.7 | 83.3 | 82.7 | |
| DGEATarget LLM=GPT-5.12026.05 | 16.5 | 93 | 17.1 | 96.3 | |
| IKEATarget LLM=GPT-5.12026.05 | 15.4 | 27 | 58.9 | 81.3 | |
| DGEATarget LLM=o4-mini2026.05 | 13.3 | 88.5 | 16.4 | 56.3 | |
| DGEATarget LLM=Qwen-3-235B2026.05 | 13.3 | 98 | 14.3 | 67.5 | |
| DGEATarget LLM=Qwen-3-8B2026.05 | 12.4 | 83.5 | 16.1 | 56.7 | |
| DGEATarget LLM=Gemini-3-flash2026.05 | 11.2 | 83 | 15.2 | 51.1 | |
| TGTBTarget LLM=Qwen-3-8B2026.05 | 10.4 | 14 | 85.5 | 86.3 | |
| DGEATarget LLM=DeepSeek-V32026.05 | 8.1 | 54.8 | 15.4 | 54.5 | |
| PoRTarget LLM=DeepSeek-V32026.05 | 6.8 | 12 | 75.4 | 78.6 | |
| IKEATarget LLM=Qwen-3-8B2026.05 | 6 | 27.5 | 47 | 74.5 | |
| IKEATarget LLM=o4-mini2026.05 | 3.4 | 11.5 | 52.4 | 65 | |
| RAG-ThiefTarget LLM=GPT-5.12026.05 | 3.3 | 4 | 57.6 | 96.4 | |
| IKEATarget LLM=Qwen-3-235B2026.05 | 1.7 | 5 | 50 | 57.7 | |
| IKEATarget LLM=DeepSeek-V32026.05 | 1 | 3.8 | 48.8 | 52.4 | |
| TGTBTarget LLM=Qwen-3-235B2026.05 | 0.5 | 0.5 | 87.1 | 84.2 | |
| TGTBTarget LLM=DeepSeek-V32026.05 | 0.1 | 0.2 | 85.7 | 65.6 |