{"total":19,"rows":[{"id":"2402.07841","title":"Do Membership Inference Attacks Work on Large Language Models?","created":"2024-02-12","cited_by_count":195,"area":"safety"},{"id":"2406.06443","title":"LLM Dataset Inference: Did you train on my dataset?","created":"2024-06-10","cited_by_count":110,"area":"safety"},{"id":"2406.16201","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","created":"2024-06-23","cited_by_count":69,"area":"safety"},{"id":"2406.15968","title":"ReCaLL: Membership Inference via Relative Conditional Log-Likelihoods","created":"2024-06-23","cited_by_count":64,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2402.10892","title":"Proving membership in LLM pretraining data via data watermarks","created":"2024-02-16","cited_by_count":40,"area":"safety"},{"id":"2407.17417","title":"Can Watermarking Large Language Models Prevent Copyrighted Text Generation and Hide Training Data?","created":"2024-07-24","cited_by_count":18,"area":"safety"},{"id":"2410.03537","title":"Ward: Provable RAG Dataset Inference via LLM Watermarks","created":"2024-10-04","cited_by_count":16,"area":"safety"},{"id":"2410.07582","title":"Detecting Training Data of Large Language Models via Expectation Maximization","created":"2024-10-10","cited_by_count":13,"area":"safety"},{"id":"2503.04036","title":"Robust Data Watermarking in Language Models by Injecting Fictitious Knowledge","created":"2025-03-06","cited_by_count":12,"area":"safety"},{"id":"2506.14913","title":"Winter Soldier: Backdooring Language Models at Pre-Training with Indirect Data Poisoning","created":"2025-06-17","cited_by_count":6,"area":"safety"},{"id":"2505.23001","title":"DyePack: Provably Flagging Test Set Contamination in LLMs Using Backdoors","created":"2025-05-29","cited_by_count":3,"area":"safety"},{"id":"2509.05449","title":"Neural Breadcrumbs: Membership Inference Attacks on LLMs Through Hidden State and Attention Pattern Analysis","created":"2025-09-05","cited_by_count":3,"area":"safety"},{"id":"2405.08134","title":"Many-Shot Regurgitation (MSR) Prompting","created":"2024-05-13","cited_by_count":2,"area":"safety"},{"id":"2505.03392","title":"Automatic Calibration for Membership Inference Attack on Large Language Models","created":"2025-05-06","cited_by_count":2,"area":"safety"},{"id":"2605.26133","title":"Pretraining Data Exposure in Large Language Models: A Survey of Membership Inference, Data Contamination, and Security Implications","created":"2026-05-21","cited_by_count":1,"area":"safety"},{"id":"2505.13819","title":"Fragments to Facts: Partial-Information Fragment Inference from LLMs","created":"2025-05-20","cited_by_count":0,"area":"safety"},{"id":"2509.04169","title":"Privacy Risks in Time Series Forecasting: User- and Record-Level Membership Inference","created":"2025-09-04","cited_by_count":0,"area":"safety"},{"id":"2608.12652","title":"Excess Separability: Nuisance-Controlled Residual-Stream Probing for Benchmark Contamination Detection","created":"2026-08-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}