{"total":100,"rows":[{"id":"2402.03927","title":"Leak, Cheat, Repeat: Data Contamination and Evaluation Malpractices in Closed-Source LLMs","created":"2024-02-06","cited_by_count":229,"area":null},{"id":"2406.04244","title":"Benchmark Data Contamination of Large Language Models: A Survey","created":"2024-06-06","cited_by_count":147,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2311.06062","title":"Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibration","created":"2023-11-10","cited_by_count":98,"area":"safety"},{"id":"2401.06059","title":"Investigating Data Contamination for Pre-training Language Models","created":"2024-01-11","cited_by_count":91,"area":null},{"id":"2307.06865","title":"Effective Prompt Extraction from Language Models","created":"2023-07-13","cited_by_count":85,"area":null},{"id":"2403.07918","title":"On the Societal Impact of Open Foundation Models","created":"2024-02-27","cited_by_count":65,"area":null},{"id":"2407.17817","title":"Demystifying Verbatim Memorization in Large Language Models","created":"2024-07-25","cited_by_count":56,"area":null},{"id":"2410.08109","title":"A Closer Look at Machine Unlearning for Large Language Models","created":"2024-10-10","cited_by_count":56,"area":"safety"},{"id":"2502.14829","title":"Measuring Chain of Thought Faithfulness by Unlearning Reasoning Steps","created":"2025-02-20","cited_by_count":47,"area":"lr"},{"id":"2406.18664","title":"Evaluating Copyright Takedown Methods for Language Models","created":"2024-06-26","cited_by_count":43,"area":null},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2406.12975","title":"SHIELD: Evaluation and Defense Strategies for Copyright Compliance in LLM Text Generation","created":"2024-06-18","cited_by_count":34,"area":null},{"id":"2403.04801","title":"Alpaca against Vicuna: Using LLMs to Uncover Memorization of LLMs","created":"2024-03-05","cited_by_count":33,"area":"agents"},{"id":"2410.02650","title":"Undesirable Memorization in Large Language Models: A Survey","created":"2024-10-03","cited_by_count":29,"area":null},{"id":"2406.13069","title":"Evaluating $n$-Gram Novelty of Language Models Using Rusty-DAWG","created":"2024-06-18","cited_by_count":25,"area":null},{"id":"2503.22165","title":"Landscape of Thoughts: Visualizing the Reasoning Process of Large Language Models","created":"2025-03-28","cited_by_count":25,"area":"lr"},{"id":"2406.10952","title":"Avoiding Copyright Infringement via Large Language Model Unlearning","created":"2024-06-16","cited_by_count":24,"area":"safety"},{"id":"2410.04197","title":"CS4: Measuring the Creativity of Large Language Models Automatically by Controlling the Number of Story-Writing Constraints","created":"2024-10-05","cited_by_count":24,"area":null},{"id":"2404.16251","title":"Prompt Leakage effect and defense strategies for multi-turn LLM interactions","created":"2024-04-24","cited_by_count":23,"area":null},{"id":"2503.06808","title":"Privacy Auditing of Large Language Models","created":"2025-03-09","cited_by_count":23,"area":"safety"},{"id":"2409.13853","title":"Unlocking Memorization in Large Language Models with Dynamic Soft Prompting","created":"2024-09-20","cited_by_count":21,"area":null},{"id":"2404.11262","title":"Sampling-based Pseudo-Likelihood for Membership Inference Attacks","created":"2024-04-17","cited_by_count":20,"area":"safety"},{"id":"2408.09169","title":"Automatic Metrics in Natural Language Generation: A Survey of Current Evaluation Practices","created":"2024-08-17","cited_by_count":20,"area":null},{"id":"2509.14284","title":"The Sum Leaks More Than Its Parts: Compositional Privacy Risks and Mitigations in Multi-Agent Collaboration","created":"2025-09-16","cited_by_count":20,"area":"agents"},{"id":"2407.17417","title":"Can Watermarking Large Language Models Prevent Copyrighted Text Generation and Hide Training Data?","created":"2024-07-24","cited_by_count":18,"area":"safety"},{"id":"2402.02987","title":"Reconstruct Your Previous Conversations! Comprehensively Investigating Privacy Leakage Risks in Conversations with GPT Models","created":"2024-02-05","cited_by_count":16,"area":null},{"id":"2410.03537","title":"Ward: Provable RAG Dataset Inference via LLM Watermarks","created":"2024-10-04","cited_by_count":16,"area":"safety"},{"id":"2404.03862","title":"Verifiable by Design: Aligning Language Models to Quote from Pre-Training Data","created":"2024-04-05","cited_by_count":13,"area":"alignment"},{"id":"2405.08597","title":"Risks and Opportunities of Open-Source Generative AI","created":"2024-05-14","cited_by_count":13,"area":null},{"id":"2406.09325","title":"REVS: Unlearning Sensitive Information in Language Models via Rank Editing in the Vocabulary Space","created":"2024-06-13","cited_by_count":13,"area":"safety"},{"id":"2510.19796","title":"Blackbox Model Provenance via Palimpsestic Membership Inference","created":"2025-10-22","cited_by_count":11,"area":"safety"},{"id":"2403.17691","title":"Not All Similarities Are Created Equal: Leveraging Data-Driven Biases to Inform GenAI Copyright Disputes","created":"2024-03-26","cited_by_count":10,"area":null},{"id":"2404.06737","title":"Disguised Copyright Infringement of Latent Diffusion Models","created":"2024-04-10","cited_by_count":10,"area":"diffusion"},{"id":"2405.15523","title":"The Mosaic Memory of Large Language Models","created":"2024-05-24","cited_by_count":10,"area":null},{"id":"2502.15680","title":"Privacy Ripple Effects from Adding or Removing Personal Information in Language Model Training","created":"2025-02-21","cited_by_count":10,"area":null},{"id":"2507.05578","title":"The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation","created":"2025-07-08","cited_by_count":10,"area":"safety"},{"id":"2507.11405","title":"DCR: Quantifying Data Contamination in LLMs Evaluation","created":"2025-07-15","cited_by_count":10,"area":null},{"id":"2403.15230","title":"An Exploratory Investigation into Code License Infringements in Large Language Model Training Datasets","created":"2024-03-22","cited_by_count":9,"area":null},{"id":"2405.11577","title":"A Multi-Perspective Analysis of Memorization in Large Language Models","created":"2024-05-19","cited_by_count":8,"area":null},{"id":"2407.02596","title":"Towards More Realistic Extraction Attacks: An Adversarial Perspective","created":"2024-07-02","cited_by_count":8,"area":null},{"id":"2503.12072","title":"Information-Guided Identification of Training Data Imprint in (Proprietary) Large Language Models","created":"2025-03-15","cited_by_count":8,"area":null},{"id":"2506.00688","title":"Existing Large Language Model Unlearning Evaluations Are Inconclusive","created":"2025-05-31","cited_by_count":8,"area":"safety"},{"id":"2412.06619","title":"Copyright-Protected Language Generation via Adaptive Model Fusion","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2408.16345","title":"The Unreasonable Ineffectiveness of Nucleus Sampling on Mitigating Text Memorization","created":"2024-08-29","cited_by_count":6,"area":"lr"},{"id":"2412.15255","title":"Data Laundering: Artificially Boosting Benchmark Results through Knowledge Distillation","created":"2024-12-15","cited_by_count":6,"area":"distill"},{"id":"2504.07854","title":"The KL3M Data Project: Copyright-Clean Training Resources for Large Language Models","created":"2025-04-10","cited_by_count":6,"area":null},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2503.22948","title":"SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearning","created":"2025-03-29","cited_by_count":5,"area":"alignment"},{"id":"2407.20105","title":"Strong Copyright Protection for Language Models via Adaptive Model Fusion","created":"2024-07-29","cited_by_count":4,"area":null},{"id":"2412.11302","title":"Sequence-Level Leakage Risk of Training Data in Large Language Models","created":"2024-12-15","cited_by_count":4,"area":null},{"id":"2506.21588","title":"Understanding Verbatim Memorization in LLMs Through Circuit Discovery","created":"2025-06-17","cited_by_count":4,"area":"mechinterp"},{"id":"2501.17501","title":"How Much Do Code Language Models Remember? An Investigation on Data Extraction Attacks before and after Fine-tuning","created":"2025-01-29","cited_by_count":3,"area":"safety"},{"id":"2503.01208","title":"Watch Out Your Album! On the Inadvertent Privacy Memorization in Multi-Modal Large Language Models","created":"2025-03-03","cited_by_count":3,"area":"mllm"},{"id":"2503.03703","title":"SoftMatcha: A Soft and Fast Pattern Matcher for Billion-Scale Corpus Searches","created":"2025-03-05","cited_by_count":3,"area":null},{"id":"2503.07697","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","created":"2025-03-10","cited_by_count":3,"area":"safety"},{"id":"2503.12314","title":"Empirical Privacy Variance","created":"2025-03-16","cited_by_count":3,"area":null},{"id":"2506.09591","title":"Memorization in Language Models through the Lens of Intrinsic Dimension","created":"2025-06-11","cited_by_count":3,"area":null},{"id":"2511.07001","title":"SCOPE: Intrinsic Semantic Space Control for Mitigating Copyright Infringement in LLMs","created":"2025-11-10","cited_by_count":3,"area":null},{"id":"2511.18889","title":"CoreEval: Automatically Building Contamination-Resilient Datasets with Real-World Knowledge toward Reliable LLM Evaluation","created":"2025-11-24","cited_by_count":3,"area":null},{"id":"2512.08875","title":"When Tables Leak: Attacking String Memorization in LLM-Based Tabular Data Generation","created":"2025-12-09","cited_by_count":3,"area":null},{"id":"2404.17143","title":"Quantifying Memorization and Detecting Training Data of Pre-trained Language Models using Japanese Newspaper","created":"2024-04-26","cited_by_count":2,"area":null},{"id":"2411.10877","title":"Developer Perspectives on Licensing and Copyright Issues Arising from Generative AI for Software Development","created":"2024-11-16","cited_by_count":2,"area":null},{"id":"2412.12040","title":"How Private are Language Models in Abstractive Summarization?","created":"2024-12-16","cited_by_count":2,"area":null},{"id":"2504.06219","title":"Can Performant LLMs Be Ethical? Quantifying the Impact of Web Crawling Opt-Outs","created":"2025-04-08","cited_by_count":2,"area":null},{"id":"2505.13171","title":"Positional Fragility in LLMs: How Offset Effects Reshape Our Understanding of Memorization Risks","created":"2025-05-19","cited_by_count":2,"area":null},{"id":"2511.20799","title":"Memories Retrieved from Many Paths: A Multi-Prefix Framework for Robust Detection of Training Data Leakage in Large Language Models","created":"2025-11-25","cited_by_count":2,"area":null},{"id":"2601.15394","title":"Memorization Dynamics in Knowledge Distillation for Language Models","created":"2026-01-21","cited_by_count":2,"area":"distill"},{"id":"2605.08116","title":"The Safety-Aware Denoiser for Text Diffusion Models","created":"2026-04-28","cited_by_count":2,"area":"diffusion"},{"id":"2311.03075","title":"SoK: Memorisation in machine learning","created":"2023-11-06","cited_by_count":1,"area":null},{"id":"2410.04454","title":"Inner-Probe: Discovering Copyright-related Data Generation in LLM Architecture","created":"2024-10-06","cited_by_count":1,"area":null},{"id":"2502.16290","title":"Interrogating LLM design under a fair learning doctrine","created":"2025-02-22","cited_by_count":1,"area":null},{"id":"2507.06056","title":"Data Compressibility Quantifies LLM Memorization","created":"2025-07-08","cited_by_count":1,"area":null},{"id":"2508.02573","title":"Guess or Recall? Training CNNs to Classify and Localize Memorization in LLMs","created":"2025-08-04","cited_by_count":1,"area":null},{"id":"2508.10836","title":"SoK: Data Minimization in Machine Learning","created":"2025-08-14","cited_by_count":1,"area":null},{"id":"2510.08750","title":"Exploring Cross-Client Memorization of Training Data in Large Language Models for Federated Learning","created":"2025-10-09","cited_by_count":1,"area":null},{"id":"2511.04332","title":"Differentially Private In-Context Learning with Nearest Neighbor Search","created":"2025-11-06","cited_by_count":1,"area":null},{"id":"2604.18697","title":"Beyond Indistinguishability: Measuring Extraction Risk in LLM APIs","created":"2026-04-20","cited_by_count":1,"area":"safety"},{"id":"2606.06286","title":"LLMs Can Leak Training Data But Do They Want To? A Propensity-Aware Evaluation of Memorization in LLMs","created":"2026-06-04","cited_by_count":1,"area":null},{"id":"2606.28479","title":"Decomposing Memorization Reduction in Privacy-Preserving Fine-Tuning of SLMs for CSIRTs","created":"2026-06-26","cited_by_count":1,"area":null},{"id":"2505.14323","title":"Securing Transfer-Learned Networks with Reverse Homomorphic Encryption","created":"2025-05-20","cited_by_count":0,"area":null},{"id":"2506.02027","title":"The End Of Universal Lifelong Identifiers: Identity Systems For The AI Era","created":"2025-05-29","cited_by_count":0,"area":null},{"id":"2506.05639","title":"FictionalQA: A Dataset for Studying Memorization and Knowledge Acquisition","created":"2025-06-05","cited_by_count":0,"area":null},{"id":"2506.20481","title":"Counterfactual Influence as a Distributional Quantity","created":"2025-06-25","cited_by_count":0,"area":null},{"id":"2510.10902","title":"Auditing Information Disclosure During Large-Scale Gradient-Based Training via Gradient Uniqueness","created":"2025-10-13","cited_by_count":0,"area":null},{"id":"2512.11194","title":"Beyond Memorization: Selective Learning for Copyright-Safe Diffusion Model Training","created":"2025-12-12","cited_by_count":0,"area":"diffusion"},{"id":"2602.10908","title":"SoftMatcha 2: A Fast and Soft Pattern Matcher for Trillion-Scale Corpora","created":"2026-02-11","cited_by_count":0,"area":null},{"id":"2603.08207","title":"The Conundrum of Trustworthy Research on Attacking Personally Identifiable Information Removal Techniques","created":"2026-03-09","cited_by_count":0,"area":null},{"id":"2604.06154","title":"Exclusive Unlearning","created":"2026-04-07","cited_by_count":0,"area":"safety"},{"id":"2606.05946","title":"Short paper: Models in the dark -- Rectification and erasure under GDPR in ML supply chains","created":"2026-06-04","cited_by_count":0,"area":null},{"id":"2606.17276","title":"On the Memorization Behavior of LLMs in Generative Recommendation: Observations, Implications, and Training Strategies","created":"2026-06-15","cited_by_count":0,"area":null},{"id":"2606.18767","title":"Output Vector Editing for Memorization Mitigation in Large Language Models","created":"2026-06-17","cited_by_count":0,"area":null},{"id":"2607.12649","title":"Extractable Memorization From First Principles","created":"2026-07-14","cited_by_count":0,"area":null},{"id":"2608.09154","title":"UNSPECIFIC: General Constraint Synthesis for Breaking Copy-and-Paste Shortcut in LLM Instruction Following","created":"2026-08-10","cited_by_count":0,"area":null},{"id":"2608.27782","title":"Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots","created":"2026-08-27","cited_by_count":0,"area":null},{"id":"2608.29943","title":"On the Recoverability of Private Information Unlearning in Large Language Models","created":"2026-08-30","cited_by_count":0,"area":"safety"},{"id":"2609.00873","title":"Membership Inference in Fine-tuned Diffusion Language Models via Token-level Memorization Asymmetry","created":"2026-09-01","cited_by_count":0,"area":"diffusion"},{"id":"2609.01161","title":"CopyShield: A Cross-Level Benchmark of Copyright Defenses in LLMs","created":"2026-09-01","cited_by_count":0,"area":"alignment"},{"id":"2609.25014","title":"Not All 4-bit Quantizers Are Equal: Deployment-Time Mitigation of PII Leakage in Fine-Tuned Small Language Models","created":"2026-08-02","cited_by_count":0,"area":null},{"id":"2610.15883","title":"What the Model Cannot See: Covert and Provable Text Invisibility in LLMs","created":"2026-10-11","cited_by_count":0,"area":"safety"}],"next_cursor":null}