{"total":67,"rows":[{"id":"2404.02936","title":"Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Models","created":"2024-04-03","cited_by_count":103,"area":null},{"id":"2505.24832","title":"How much do language models memorize?","created":"2025-05-30","cited_by_count":61,"area":null},{"id":"2404.06209","title":"Elephants Never Forget: Memorization and Learning of Tabular Data in Large Language Models","created":"2024-04-09","cited_by_count":36,"area":null},{"id":"2410.22235","title":"Auditing $f$-Differential Privacy in One Run","created":"2024-10-29","cited_by_count":30,"area":null},{"id":"2410.04207","title":"Learning on LoRAs: GL-Equivariant Processing of Low-Rank Weight Spaces for Large Finetuned Models","created":"2024-10-05","cited_by_count":22,"area":null},{"id":"2503.17514","title":"Language Models May Verbatim Complete Text They Were Not Explicitly Trained On","created":"2025-03-21","cited_by_count":21,"area":null},{"id":"2505.18893","title":"Reality Check: A New Evaluation Ecosystem Is Necessary to Understand AI's Real World Effects","created":"2025-05-24","cited_by_count":19,"area":null},{"id":"2502.00678","title":"How Contaminated Is Your Benchmark? Quantifying Dataset Leakage in Large Language Models with Kernel Divergence","created":"2025-02-02","cited_by_count":15,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2504.19373","title":"Doxing via the Lens: Revealing Location-related Privacy Leakage on Multi-modal Large Reasoning Models","created":"2025-04-27","cited_by_count":14,"area":null},{"id":"2407.16607","title":"Data Mixture Inference: What do BPE Tokenizers Reveal about their Training Data?","created":"2024-07-23","cited_by_count":13,"area":null},{"id":"2404.00699","title":"A Comprehensive Survey of Contamination Detection Methods in Large Language Models","created":"2024-03-31","cited_by_count":12,"area":null},{"id":"2407.21248","title":"Adaptive Pre-training Data Detection for Large Language Models via Surprising Tokens","created":"2024-07-30","cited_by_count":11,"area":null},{"id":"2410.10880","title":"Fine-tuning can Help Detect Pretraining Data from Large Language Models","created":"2024-10-09","cited_by_count":8,"area":null},{"id":"2501.03941","title":"Synthetic Data Privacy Metrics","created":"2025-01-07","cited_by_count":8,"area":null},{"id":"2504.13416","title":"STAMP Your Content: Proving Dataset Membership via Watermarked Rephrasings","created":"2025-04-18","cited_by_count":8,"area":null},{"id":"2507.05622","title":"DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspective","created":"2025-07-08","cited_by_count":8,"area":null},{"id":"2510.27055","title":"Detecting Data Contamination in LLMs via In-Context Learning","created":"2025-10-30","cited_by_count":8,"area":null},{"id":"2505.18102","title":"CapBencher: Give Your LLM Benchmark a Built-in Alarm for Test-Set Overfitting","created":"2025-05-23","cited_by_count":7,"area":null},{"id":"2502.17259","title":"Detecting Benchmark Contamination Through Watermarking","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2506.19399","title":"Automated Detection of Pre-training Text in Black-box LLMs","created":"2025-06-24","cited_by_count":6,"area":null},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2510.09259","title":"Detecting Data Contamination from Reinforcement Learning Post-training for Large Language Models","created":"2025-10-10","cited_by_count":6,"area":null},{"id":"2602.03812","title":"Antidistillation Fingerprinting","created":"2026-02-03","cited_by_count":6,"area":null},{"id":"2503.01630","title":"Machine Learners Should Acknowledge the Legal Implications of Large Language Models as Personal Data","created":"2025-03-03","cited_by_count":5,"area":null},{"id":"2505.03019","title":"Memorization or Interpolation ? Detecting LLM Memorization through Input Perturbation Analysis","created":"2025-05-05","cited_by_count":5,"area":null},{"id":"2406.14549","title":"Uncovering Latent Memories: Assessing Data Leakage and Memorization Patterns in Frontier AI Models","created":"2024-06-20","cited_by_count":4,"area":null},{"id":"2412.11302","title":"Sequence-Level Leakage Risk of Training Data in Large Language Models","created":"2024-12-15","cited_by_count":4,"area":null},{"id":"2510.09655","title":"Data Provenance Auditing of Fine-Tuned Large Language Models with a Text-Preserving Technique","created":"2025-10-07","cited_by_count":4,"area":null},{"id":"2606.09401","title":"Benchmarking Empirical Privacy Protection for Adaptations of Large Language Models","created":"2026-06-08","cited_by_count":4,"area":null},{"id":"2412.03824","title":"Towards Data Governance of Frontier AI Models","created":"2024-12-05","cited_by_count":3,"area":null},{"id":"2606.06533","title":"Position: Don't Just \"Fix it in Post\": A Science of AI Must Study Training Dynamics","created":"2026-06-03","cited_by_count":3,"area":null},{"id":"2411.10842","title":"CODECLEANER: Elevating Standards with A Robust Data Contamination Mitigation Toolkit","created":"2024-11-16","cited_by_count":2,"area":null},{"id":"2504.05651","title":"Measuring D\\'ej\\`a vu Memorization Efficiently","created":"2025-04-08","cited_by_count":2,"area":null},{"id":"2511.07722","title":"Critical Confabulation: Can LLMs Hallucinate for Social Good?","created":"2025-11-11","cited_by_count":2,"area":null},{"id":"2511.20799","title":"Memories Retrieved from Many Paths: A Multi-Prefix Framework for Robust Detection of Training Data Leakage in Large Language Models","created":"2025-11-25","cited_by_count":2,"area":null},{"id":"2601.04301","title":"Quantifying the Effect of Test Set Contamination on Generative Evaluations","created":"2026-01-07","cited_by_count":2,"area":null},{"id":"2608.02985","title":"Temporal Leakage in LLM Backtesting: Measurement, Validation, and Adjusted Scores","created":"2026-08-04","cited_by_count":2,"area":null},{"id":"2410.06235","title":"Parameter Choice and Neuro-Symbolic Approaches for Deep Domain-Invariant Learning","created":"2024-10-08","cited_by_count":1,"area":null},{"id":"2503.13872","title":"Empirical Calibration and Metric Differential Privacy in Language Models","created":"2025-03-18","cited_by_count":1,"area":null},{"id":"2507.06056","title":"Data Compressibility Quantifies LLM Memorization","created":"2025-07-08","cited_by_count":1,"area":null},{"id":"2509.02411","title":"A Survey: Towards Privacy and Security in Mobile Large Language Models","created":"2025-09-02","cited_by_count":1,"area":null},{"id":"2601.14994","title":"Obscuring Data Contamination Through Translation: Evidence from Arabic Corpora","created":"2026-01-21","cited_by_count":1,"area":null},{"id":"2605.06832","title":"IntentGrasp: A Comprehensive Benchmark for Intent Understanding","created":"2026-05-07","cited_by_count":1,"area":null},{"id":"2605.07878","title":"Black-box model classification under the discriminative factorization","created":"2026-05-08","cited_by_count":1,"area":null},{"id":"2605.24079","title":"TRACER: A Semantic-Aware Framework for Fine-Grained Contamination Detection in Code LLMs","created":"2026-05-22","cited_by_count":1,"area":null},{"id":"2606.28479","title":"Decomposing Memorization Reduction in Privacy-Preserving Fine-Tuning of SLMs for CSIRTs","created":"2026-06-26","cited_by_count":1,"area":null},{"id":"2505.05064","title":"WaterDrum: Watermarking for Data-centric Unlearning Metric","created":"2025-05-08","cited_by_count":0,"area":null},{"id":"2506.04450","title":"Learning to Diagnose Privately: DP-Powered LLMs for Radiology Report Classification","created":"2025-06-04","cited_by_count":0,"area":null},{"id":"2506.16460","title":"Black-Box Privacy Attacks on Shared Representations in Multitask Learning","created":"2025-06-19","cited_by_count":0,"area":null},{"id":"2506.20481","title":"Counterfactual Influence as a Distributional Quantity","created":"2025-06-25","cited_by_count":0,"area":null},{"id":"2507.17389","title":"Are AI Coders Snitches? An Empirical Study of Pretraining Data Detection on Code Large Language Models","created":"2025-07-23","cited_by_count":0,"area":null},{"id":"2508.15141","title":"Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)","created":"2025-08-21","cited_by_count":0,"area":null},{"id":"2511.14084","title":"Observational Auditing of Label Privacy","created":"2025-11-18","cited_by_count":0,"area":null},{"id":"2601.01993","title":"Towards Privacy-Preserving Mental Health Support with Large Language Models","created":"2026-01-05","cited_by_count":0,"area":null},{"id":"2602.17418","title":"A Privacy by Design Framework for Large Language Model-Based Applications for Children","created":"2026-02-19","cited_by_count":0,"area":null},{"id":"2603.04828","title":"From Unfamiliar to Familiar: Detecting Pre-training Data via Gradient Deviations in Large Language Models","created":"2026-03-05","cited_by_count":0,"area":null},{"id":"2605.21543","title":"Provable Joint Decontamination for Benchmarking Multiple Large Language Models","created":"2026-05-20","cited_by_count":0,"area":null},{"id":"2605.24818","title":"Correcting test set contamination by spiking the training data","created":"2026-05-24","cited_by_count":0,"area":null},{"id":"2606.10091","title":"SoK: Colluding Adversaries in Machine Learning Pipelines","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2606.24408","title":"Natural Identifiers for Privacy and Data Audits in Large Language Models","created":"2026-06-23","cited_by_count":0,"area":null},{"id":"2606.31991","title":"Anchored or Drifting: What Recursive Self-Generation Reveals About Training Data","created":"2026-06-30","cited_by_count":0,"area":null},{"id":"2607.00325","title":"Watermarking for Proprietary Dataset Protection","created":"2026-07-01","cited_by_count":0,"area":null},{"id":"2609.10830","title":"Detectable Only Where It Is Confounded: What Verified Duplication Counts Say About Membership Evidence in Language Models","created":"2026-09-09","cited_by_count":0,"area":null},{"id":"2609.21888","title":"Detecting Pretraining Data in Large Language Models from a Free-Energy Perspective","created":"2026-09-18","cited_by_count":0,"area":null},{"id":"2609.25014","title":"Not All 4-bit Quantizers Are Equal: Deployment-Time Mitigation of PII Leakage in Fine-Tuned Small Language Models","created":"2026-08-02","cited_by_count":0,"area":null},{"id":"2610.16152","title":"WildTrace: Evaluating Training Data Detection in Realistic Large-Scale LLM Post-Training","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}