Training data extraction on EchoTrace Smaller Models
37.3ROUGE-LRECAP
Evaluation Results
| Method | Links | |
|---|---|---|
| RECAPTarget Model=Gemini-2.5-Flash2025.10 | 37.3 | |
| DSP + JailbreakTarget Model=Gemini-2.5-Flash2025.10 | 33.7 | |
| RECAPTarget Model=GPT-4.1 Mini2025.10 | 30.6 | |
| DSPTarget Model=Gemini-2.5-Flash2025.10 | 30 | |
| RECAPTarget Model=Avg.2025.10 | 29.6 | |
| DSP + JailbreakTarget Model=Avg.2025.10 | 26.5 | |
| DSP + JailbreakTarget Model=GPT-4.1 Mini2025.10 | 26.3 | |
| RECAPTarget Model=Qwen-3 32B2025.10 | 26.2 | |
| DSPTarget Model=GPT-4.1 Mini2025.10 | 24.7 | |
| DSP + JailbreakTarget Model=Qwen-3 32B2025.10 | 24.5 | |
| RECAPTarget Model=GPT-4.1 Nano2025.10 | 24.5 | |
| DSPTarget Model=Avg.2025.10 | 24.2 | |
| DSPTarget Model=Qwen-3 32B2025.10 | 22.3 | |
| DSP + JailbreakTarget Model=GPT-4.1 Nano2025.10 | 21.5 | |
| DSPTarget Model=GPT-4.1 Nano2025.10 | 19.8 | |
| Prefix-ProbingTarget Model=Qwen-3 32B2025.10 | 13.1 | |
| Prefix-ProbingTarget Model=GPT-4.1 Mini2025.10 | 12.3 | |
| Prefix-ProbingTarget Model=GPT-4.1 Nano2025.10 | 11.4 | |
| Prefix-ProbingTarget Model=Avg.2025.10 | 11.1 | |
| Prefix-ProbingTarget Model=Gemini-2.5-Flash2025.10 | 7.5 |