Training data extraction on EchoTrace Smaller Models (Public Domain)
37.1ROUGE-LRECAP
Evaluation results
| Method | Links | |
|---|---|---|
| RECAPTarget Model=Gemini-2.5-Flash2025.10 | 37.1 | |
| DSP + JailbreakTarget Model=Gemini-2.5-Flash2025.10 | 33.5 | |
| RECAPTarget Model=GPT-4.1 Mini2025.10 | 32.2 | |
| RECAPTarget Model=Avg.2025.10 | 29.7 | |
| DSP + JailbreakTarget Model=GPT-4.1 Mini2025.10 | 27.9 | |
| DSPTarget Model=Gemini-2.5-Flash2025.10 | 27.6 | |
| DSP + JailbreakTarget Model=Avg.2025.10 | 26.3 | |
| RECAPTarget Model=Qwen-3 32B2025.10 | 25.9 | |
| DSPTarget Model=GPT-4.1 Mini2025.10 | 25.8 | |
| DSP + JailbreakTarget Model=Qwen-3 32B2025.10 | 24.6 | |
| RECAPTarget Model=GPT-4.1 Nano2025.10 | 23.7 | |
| DSPTarget Model=Avg.2025.10 | 23.3 | |
| DSPTarget Model=Qwen-3 32B2025.10 | 22.6 | |
| DSP + JailbreakTarget Model=GPT-4.1 Nano2025.10 | 19.5 | |
| DSPTarget Model=GPT-4.1 Nano2025.10 | 17.3 | |
| Prefix-ProbingTarget Model=GPT-4.1 Mini2025.10 | 15.2 | |
| Prefix-ProbingTarget Model=Qwen-3 32B2025.10 | 13.7 | |
| Prefix-ProbingTarget Model=GPT-4.1 Nano2025.10 | 12.6 | |
| Prefix-ProbingTarget Model=Avg.2025.10 | 12.3 | |
| Prefix-ProbingTarget Model=Gemini-2.5-Flash2025.10 | 7.7 |