Watermark Spoofing on PMark
36.3SSRRLSpoofer
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| RLSpooferAttacker Model=Qwen3-4B2026.04 | 36.3 | 40.8 | 91 | 2.05 | 7.25 | |
| RLSpooferAttacker Model=Llama3.2-3B-Instruct2026.04 | 33.3 | 34.3 | 92 | 2.23 | 7.01 | |
| RLSpooferAttacker Model=Qwen2.5-3B-Instruct2026.04 | 30.3 | 33.3 | 89 | 1.94 | 7.41 | |
| RLSpooferAttacker Model=Qwen3-0.6B2026.04 | 29.5 | 31.5 | 92 | 2.03 | 5.8 | |
| RLSpooferAttacker Model=Qwen3-1.7B2026.04 | 29.5 | 31.3 | 90 | 2.29 | 6.93 | |
| DPOAttacker Model=Llama3.2-3B-Instruct2026.04 | 25 | 30.3 | 87 | 1.94 | 1.58 | |
| DPOAttacker Model=Qwen2.5-3B-Instruct2026.04 | 24.3 | 30.3 | 95 | 2.22 | 7.15 | |
| DistillAttacker Model=Llama3.2-3B-Instruct2026.04 | 23.3 | 27.8 | 89 | 2.22 | 7.58 | |
| DPOAttacker Model=Qwen3-1.7B2026.04 | 22.5 | 24 | 93 | 2.32 | 9.12 | |
| DistillAttacker Model=Qwen2.5-3B-Instruct2026.04 | 22.3 | 26 | 91 | 2.01 | 7.43 | |
| DistillAttacker Model=Qwen3-4B2026.04 | 21.5 | 27.3 | 92 | 2.39 | 7.67 | |
| DistillAttacker Model=Qwen3-1.7B2026.04 | 20.3 | 22.5 | 90 | 2.34 | 7.24 | |
| DistillAttacker Model=Qwen3-0.6B2026.04 | 20 | 23.3 | 90 | 2.31 | 5.91 | |
| DITTOAttacker Model=Llama3.2-3B-Instruct2026.04 | 18 | 34.2 | 65 | 2.03 | 4.72 | |
| DPOAttacker Model=Qwen3-4B2026.04 | 17.5 | 30.8 | 68 | 5.06 | 9.3 | |
| DITTOAttacker Model=Qwen3-1.7B2026.04 | 16.5 | 30.5 | 68 | 2.48 | 4.43 | |
| DITTOAttacker Model=Qwen3-4B2026.04 | 16.5 | 23.5 | 71 | 2.5 | 6.01 | |
| DITTOAttacker Model=Qwen3-0.6B2026.04 | 11.8 | 25.3 | 63 | 2.38 | 2.34 | |
| DITTOAttacker Model=Qwen2.5-3B-Instruct2026.04 | 11.3 | 29.3 | 56 | 2 | 4.67 | |
| DPOAttacker Model=Qwen3-0.6B2026.04 | 6.25 | 14.5 | 63 | 2.99 | 5.31 |