RAG Leakage Attack on SCIFACT
56.3CCLPoR
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| PoRTarget LLM=Qwen-3-8B2026.05 | 56.3 | 86.5 | 63.4 | 99.9 | |
| PoRTarget LLM=Gemini-3-flash2026.05 | 52.5 | 99.5 | 52.9 | 99.9 | |
| PoRTarget LLM=o4-mini2026.05 | 52.1 | 92 | 54.9 | 99.8 | |
| RAG-ThiefTarget LLM=Qwen-3-8B2026.05 | 46.8 | 100 | 47.2 | 99.9 | |
| GEN-PIDETarget LLM=Gemini-3-flash2026.05 | 45.5 | 97.5 | 46.5 | 98.9 | |
| PoRTarget LLM=GPT-5.12026.05 | 45.4 | 88.5 | 49 | 99.9 | |
| GEN-PIDETarget LLM=GPT-5.12026.05 | 43.4 | 92.5 | 47.6 | 99.9 | |
| GEN-PIDETarget LLM=Qwen-3-235B2026.05 | 41.2 | 95 | 41.8 | 99.9 | |
| RAG-ThiefTarget LLM=Qwen-3-235B2026.05 | 39.8 | 100 | 40.1 | 99.9 | |
| RAG-ThiefTarget LLM=DeepSeek-V32026.05 | 38.5 | 99.8 | 38.7 | 99.9 | |
| GEN-PIDETarget LLM=o4-mini2026.05 | 38 | 91 | 47.8 | 99.9 | |
| TGTBTarget LLM=Gemini-3-flash2026.05 | 37.3 | 99 | 37.7 | 99.6 | |
| TGTBTarget LLM=GPT-5.12026.05 | 36 | 99.5 | 36.3 | 99.7 | |
| GEN-PIDETarget LLM=DeepSeek-V32026.05 | 27.2 | 93.5 | 29.1 | 95.7 | |
| PoRTarget LLM=Qwen-3-235B2026.05 | 22.1 | 45.5 | 38.2 | 99.7 | |
| TGTBTarget LLM=o4-mini2026.05 | 22 | 59.3 | 34.7 | 90.9 | |
| RAG-ThiefTarget LLM=Gemini-3-flash2026.05 | 19.1 | 41 | 32.3 | 99.8 | |
| TGTBTarget LLM=Qwen-3-8B2026.05 | 18.8 | 39.5 | 37.9 | 92.4 | |
| GEN-PIDETarget LLM=Qwen-3-8B2026.05 | 17.1 | 92.5 | 18.5 | 99.9 | |
| RAG-ThiefTarget LLM=o4-mini2026.05 | 16.3 | 50.7 | 24.1 | 99.9 | |
| PoRTarget LLM=DeepSeek-V32026.05 | 12.5 | 15.7 | 55.4 | 99.1 | |
| RAG-ThiefTarget LLM=GPT-5.12026.05 | 9.9 | 13 | 33.7 | 96.7 | |
| IKEATarget LLM=GPT-5.12026.05 | 8.2 | 50 | 14.8 | 92.6 | |
| IKEATarget LLM=Gemini-3-flash2026.05 | 7 | 44.5 | 15.6 | 85.8 | |
| DGEATarget LLM=GPT-5.12026.05 | 7 | 100 | 7 | 97.2 | |
| IKEATarget LLM=Qwen-3-8B2026.05 | 6.9 | 37.5 | 15.2 | 81.3 | |
| DGEATarget LLM=Gemini-3-flash2026.05 | 6.7 | 100 | 6.7 | 95.4 | |
| DGEATarget LLM=Qwen-3-8B2026.05 | 6.5 | 100 | 7.4 | 99 | |
| DGEATarget LLM=o4-mini2026.05 | 5.8 | 99.8 | 5.8 | 94.1 | |
| DGEATarget LLM=Qwen-3-235B2026.05 | 5.5 | 93 | 5.8 | 95.7 | |
| IKEATarget LLM=Qwen-3-235B2026.05 | 5.5 | 53 | 13.5 | 53.3 | |
| DGEATarget LLM=DeepSeek-V32026.05 | 5.4 | 72.5 | 6.1 | 91.2 | |
| IKEATarget LLM=DeepSeek-V32026.05 | 4.7 | 54.7 | 14.7 | 62.5 | |
| IKEATarget LLM=o4-mini2026.05 | 3.9 | 20.2 | 14.2 | 74 | |
| TGTBTarget LLM=Qwen-3-235B2026.05 | 1.6 | 5 | 36.9 | 53.9 | |
| TGTBTarget LLM=DeepSeek-V32026.05 | 1.1 | 2.8 | 34.4 | 70.2 |