RAG Leakage Attack on NFCORPUS
60.5CCLPoR
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| PoRTarget LLM=o4-mini2026.05 | 60.5 | 94.2 | 62.9 | 99.8 | |
| PoRTarget LLM=Qwen-3-8B2026.05 | 54.1 | 91 | 58.5 | 99.3 | |
| PoRTarget LLM=Gemini-3-flash2026.05 | 50.1 | 98.5 | 50.5 | 99.9 | |
| PoRTarget LLM=GPT-5.12026.05 | 43.8 | 84 | 49 | 99.9 | |
| RAG-ThiefTarget LLM=Qwen-3-8B2026.05 | 42.9 | 99.5 | 44.1 | 77.2 | |
| GEN-PIDETarget LLM=Gemini-3-flash2026.05 | 40.5 | 98 | 41.5 | 95.6 | |
| RAG-ThiefTarget LLM=DeepSeek-V32026.05 | 39.2 | 100 | 39.3 | 99.9 | |
| RAG-ThiefTarget LLM=Qwen-3-235B2026.05 | 39 | 100 | 39.2 | 99.9 | |
| GEN-PIDETarget LLM=DeepSeek-V32026.05 | 38.6 | 82.5 | 47.9 | 96.6 | |
| TGTBTarget LLM=Gemini-3-flash2026.05 | 37 | 98 | 37.2 | 99.9 | |
| GEN-PIDETarget LLM=o4-mini2026.05 | 36.2 | 87.5 | 41.5 | 98.9 | |
| TGTBTarget LLM=GPT-5.12026.05 | 35.9 | 100 | 36.1 | 99 | |
| PoRTarget LLM=Qwen-3-235B2026.05 | 27.8 | 42 | 54.1 | 99 | |
| GEN-PIDETarget LLM=GPT-5.12026.05 | 25.6 | 96 | 27.5 | 98.8 | |
| TGTBTarget LLM=o4-mini2026.05 | 21.6 | 55.3 | 34.4 | 91.4 | |
| RAG-ThiefTarget LLM=o4-mini2026.05 | 19.5 | 53 | 26.3 | 99.5 | |
| GEN-PIDETarget LLM=Qwen-3-235B2026.05 | 18.5 | 91 | 20 | 97.7 | |
| TGTBTarget LLM=Qwen-3-8B2026.05 | 17.8 | 38.5 | 38.2 | 87.5 | |
| RAG-ThiefTarget LLM=Gemini-3-flash2026.05 | 17.7 | 34.5 | 30.3 | 99.9 | |
| GEN-PIDETarget LLM=Qwen-3-8B2026.05 | 15.2 | 94 | 16.7 | 99.5 | |
| IKEATarget LLM=GPT-5.12026.05 | 14.2 | 47.5 | 29.3 | 89.6 | |
| PoRTarget LLM=DeepSeek-V32026.05 | 14 | 16.8 | 60.8 | 99.4 | |
| DGEATarget LLM=GPT-5.12026.05 | 11.6 | 97.5 | 11.8 | 97.7 | |
| DGEATarget LLM=Gemini-3-flash2026.05 | 11.1 | 100 | 11.1 | 96.8 | |
| DGEATarget LLM=o4-mini2026.05 | 11 | 98.5 | 11.4 | 93.3 | |
| DGEATarget LLM=Qwen-3-235B2026.05 | 11 | 90 | 12 | 95.4 | |
| DGEATarget LLM=Qwen-3-8B2026.05 | 9.3 | 90.5 | 11.4 | 97.1 | |
| IKEATarget LLM=Gemini-3-flash2026.05 | 8.3 | 31 | 26.6 | 82.9 | |
| DGEATarget LLM=DeepSeek-V32026.05 | 8 | 48.3 | 11.1 | 96 | |
| IKEATarget LLM=Qwen-3-8B2026.05 | 7.6 | 23 | 25.7 | 85.8 | |
| IKEATarget LLM=Qwen-3-235B2026.05 | 7.6 | 32 | 28.1 | 55.1 | |
| RAG-ThiefTarget LLM=GPT-5.12026.05 | 5.5 | 9.5 | 29.2 | 91.9 | |
| IKEATarget LLM=DeepSeek-V32026.05 | 5.5 | 31.8 | 26.7 | 58.7 | |
| IKEATarget LLM=o4-mini2026.05 | 4.2 | 18 | 26.6 | 69.8 | |
| TGTBTarget LLM=Qwen-3-235B2026.05 | 2.1 | 4.5 | 38.2 | 62.3 | |
| TGTBTarget LLM=DeepSeek-V32026.05 | 0.2 | 1.7 | 34.6 | 53.6 |