Watermark Spoofing on PF watermarking scheme
62SSRRLSpoofer
Evaluation Results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| RLSpooferAttacker Model=Qwen3-4B2026.04 | 62 | 82.8 | 77 | 2.58 | 6.6 | |
| RLSpooferAttacker Model=Qwen2.5-3B-Instruct2026.04 | 50.3 | 79.5 | 68 | 1.79 | 6.61 | |
| RLSpooferAttacker Model=Llama3.2-3B-Instruct2026.04 | 49.8 | 60.5 | 85 | 8.99 | 6.53 | |
| RLSpooferAttacker Model=Qwen3-0.6B2026.04 | 33.3 | 52 | 66 | 2.19 | 5.28 | |
| RLSpooferAttacker Model=Qwen3-1.7B2026.04 | 29 | 38.5 | 73 | 4.1 | 6.21 | |
| DistillAttacker Model=Llama3.2-3B-Instruct2026.04 | 8.75 | 9.75 | 93 | 4.49 | 7.58 | |
| DITTOAttacker Model=Qwen3-1.7B2026.04 | 7.5 | 9.5 | 86 | 2.27 | 4.43 | |
| DistillAttacker Model=Qwen3-1.7B2026.04 | 7 | 8 | 96 | 2.06 | 7.24 | |
| DistillAttacker Model=Qwen3-0.6B2026.04 | 6.5 | 7.25 | 97 | 2.06 | 5.91 | |
| DistillAttacker Model=Qwen2.5-3B-Instruct2026.04 | 6.5 | 8.75 | 93 | 2.04 | 7.43 | |
| DITTOAttacker Model=Llama3.2-3B-Instruct2026.04 | 6.5 | 11.3 | 79 | 4.9 | 4.72 | |
| DPOAttacker Model=Qwen2.5-3B-Instruct2026.04 | 6.25 | 12.3 | 83 | 1.98 | 7.15 | |
| DPOAttacker Model=Llama3.2-3B-Instruct2026.04 | 6.25 | 11.3 | 67 | 2 | 1.58 | |
| DistillAttacker Model=Qwen3-4B2026.04 | 6 | 6.5 | 96 | 2.11 | 7.67 | |
| DITTOAttacker Model=Qwen3-0.6B2026.04 | 5.5 | 11.5 | 79 | 2.21 | 2.34 | |
| DPOAttacker Model=Qwen3-4B2026.04 | 5.25 | 8.75 | 88 | 2.33 | 9.3 | |
| DITTOAttacker Model=Qwen2.5-3B-Instruct2026.04 | 5.25 | 12.3 | 72 | 2.13 | 4.67 | |
| DPOAttacker Model=Qwen3-1.7B2026.04 | 4.25 | 17 | 58 | 2.31 | 9.12 | |
| DITTOAttacker Model=Qwen3-4B2026.04 | 3.5 | 6.25 | 88 | 2.47 | 6.01 | |
| DPOAttacker Model=Qwen3-0.6B2026.04 | 2.5 | 22.5 | 57 | 1.56 | 5.31 |