{"total":110,"rows":[{"id":"2511.04703","title":"Measuring what Matters: Construct Validity in Large Language Model Benchmarks","created":"2025-11-03","cited_by_count":119,"area":null},{"id":"2410.11143","title":"LLM Unlearning via Loss Adjustment with Only Forget Data","created":"2024-10-14","cited_by_count":75,"area":"safety"},{"id":"2406.15968","title":"ReCaLL: Membership Inference via Relative Conditional Log-Likelihoods","created":"2024-06-23","cited_by_count":64,"area":"safety"},{"id":"2505.24832","title":"How much do language models memorize?","created":"2025-05-30","cited_by_count":61,"area":null},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2409.19798","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","created":"2024-09-29","cited_by_count":50,"area":"safety"},{"id":"2502.00306","title":"Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation","created":"2025-02-01","cited_by_count":26,"area":"rag"},{"id":"2406.19234","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","created":"2024-06-27","cited_by_count":25,"area":"rag"},{"id":"2407.06443","title":"Exposing Privacy Gaps: Membership Inference Attack on Preference Data for LLM Alignment","created":"2024-07-08","cited_by_count":25,"area":"alignment"},{"id":"2411.00154","title":"Scaling Up Membership Inference: When and How Attacks Succeed on Large Language Models","created":"2024-10-31","cited_by_count":24,"area":"safety"},{"id":"2409.13745","title":"Context-Aware Membership Inference Attacks against Pre-trained Large Language Models","created":"2024-09-11","cited_by_count":22,"area":"safety"},{"id":"2503.17514","title":"Language Models May Verbatim Complete Text They Were Not Explicitly Trained On","created":"2025-03-21","cited_by_count":21,"area":null},{"id":"2503.19338","title":"Membership Inference Attacks on Large-Scale Models: A Survey","created":"2025-03-25","cited_by_count":18,"area":"mllm"},{"id":"2505.13312","title":"GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection","created":"2025-05-19","cited_by_count":17,"area":"safety"},{"id":"2410.03537","title":"Ward: Provable RAG Dataset Inference via LLM Watermarks","created":"2024-10-04","cited_by_count":16,"area":"safety"},{"id":"2502.00678","title":"How Contaminated Is Your Benchmark? Quantifying Dataset Leakage in Large Language Models with Kernel Divergence","created":"2025-02-02","cited_by_count":15,"area":null},{"id":"2502.02514","title":"Privacy Attacks on Image AutoRegressive Models","created":"2025-02-04","cited_by_count":15,"area":"diffusion"},{"id":"2410.07582","title":"Detecting Training Data of Large Language Models via Expectation Maximization","created":"2024-10-10","cited_by_count":13,"area":"safety"},{"id":"2506.14562","title":"AlphaDecay: Module-wise Weight Decay for Heavy-Tailed Balancing in LLMs","created":"2025-06-17","cited_by_count":13,"area":null},{"id":"2502.10673","title":"Dataset Protection via Watermarked Canaries in Retrieval-Augmented LLMs","created":"2025-02-15","cited_by_count":12,"area":"rag"},{"id":"2503.04036","title":"Robust Data Watermarking in Language Models by Injecting Fictitious Knowledge","created":"2025-03-06","cited_by_count":12,"area":"safety"},{"id":"2506.10424","title":"SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks","created":"2025-06-12","cited_by_count":10,"area":"safety"},{"id":"2510.02386","title":"On The Fragility of Benchmark Contamination Detection in Reasoning Models","created":"2025-09-30","cited_by_count":9,"area":"lr"},{"id":"2603.12614","title":"ChainFuzzer: Greybox Fuzzing for Workflow-Level Multi-Tool Vulnerabilities in LLM Agents","created":"2026-03-13","cited_by_count":9,"area":"agents"},{"id":"2407.02596","title":"Towards More Realistic Extraction Attacks: An Adversarial Perspective","created":"2024-07-02","cited_by_count":8,"area":null},{"id":"2410.10880","title":"Fine-tuning can Help Detect Pretraining Data from Large Language Models","created":"2024-10-09","cited_by_count":8,"area":null},{"id":"2503.12072","title":"Information-Guided Identification of Training Data Imprint in (Proprietary) Large Language Models","created":"2025-03-15","cited_by_count":8,"area":null},{"id":"2504.13416","title":"STAMP Your Content: Proving Dataset Membership via Watermarked Rephrasings","created":"2025-04-18","cited_by_count":8,"area":null},{"id":"2507.05622","title":"DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspective","created":"2025-07-08","cited_by_count":8,"area":null},{"id":"2510.27055","title":"Detecting Data Contamination in LLMs via In-Context Learning","created":"2025-10-30","cited_by_count":8,"area":null},{"id":"2602.04735","title":"From Data to Behavior: Predicting Unintended Model Behaviors Before Training","created":"2026-02-04","cited_by_count":8,"area":null},{"id":"2410.13088","title":"Self-Comparison for Dataset-Level Membership Inference in Large (Vision-)Language Models","created":"2024-10-16","cited_by_count":7,"area":"mllm"},{"id":"2506.15271","title":"Unlocking Post-hoc Dataset Inference with Synthetic Data","created":"2025-06-18","cited_by_count":7,"area":"synth"},{"id":"2501.09653","title":"The Heap: A Contamination-Free Multilingual Code Dataset for Evaluating Large Language Models","created":"2025-01-16","cited_by_count":6,"area":null},{"id":"2506.14913","title":"Winter Soldier: Backdooring Language Models at Pre-Training with Indirect Data Poisoning","created":"2025-06-17","cited_by_count":6,"area":"safety"},{"id":"2506.19399","title":"Automated Detection of Pre-training Text in Black-box LLMs","created":"2025-06-24","cited_by_count":6,"area":null},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2408.05968","title":"Nob-MIAs: Non-biased Membership Inference Attacks Assessment on Large Language Models with Ex-Post Dataset Construction","created":"2024-08-12","cited_by_count":5,"area":"safety"},{"id":"2412.02857","title":"Measuring Fingerprints of Web-filtered Text Datasets and Fingerprint Propagation Through Training","created":"2024-12-03","cited_by_count":5,"area":null},{"id":"2501.08454","title":"Tag&Tab: Pretraining Data Detection in Large Language Models Using Keyword-Based Membership Inference Attack","created":"2025-01-14","cited_by_count":5,"area":"safety"},{"id":"2510.02962","title":"Leave No TRACE: Black-box Detection of Copyrighted Dataset Usage in Large Language Models via Watermarking","created":"2025-10-03","cited_by_count":5,"area":"safety"},{"id":"2601.11210","title":"VidLeaks: Membership Inference Attacks Against Text-to-Video Models","created":"2026-01-16","cited_by_count":5,"area":"safety"},{"id":"2505.21636","title":"The Feasibility of Topic-Based Watermarking on Academic Peer Reviews","created":"2025-05-27","cited_by_count":4,"area":null},{"id":"2509.04304","title":"Facts Fade Fast: Evaluating Memorization of Outdated Medical Knowledge in Large Language Models","created":"2025-09-04","cited_by_count":4,"area":null},{"id":"2510.09655","title":"Data Provenance Auditing of Fine-Tuned Large Language Models with a Text-Preserving Technique","created":"2025-10-07","cited_by_count":4,"area":null},{"id":"2605.28591","title":"Models That Know How Evaluations Are Designed Score Safer","created":"2026-05-27","cited_by_count":4,"area":null},{"id":"2501.11786","title":"Synthetic Data Can Mislead Evaluations: Membership Inference as Machine Text Detection","created":"2025-01-20","cited_by_count":3,"area":"synth"},{"id":"2503.07697","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","created":"2025-03-10","cited_by_count":3,"area":"safety"},{"id":"2506.06057","title":"Hey, That's My Data! Token-Only Dataset Inference in Large Language Models","created":"2025-06-06","cited_by_count":3,"area":null},{"id":"2509.05449","title":"Neural Breadcrumbs: Membership Inference Attacks on LLMs Through Hidden State and Attention Pattern Analysis","created":"2025-09-05","cited_by_count":3,"area":"safety"},{"id":"2510.05699","title":"Membership Inference Attacks on Tokenizers of Large Language Models","created":"2025-10-07","cited_by_count":3,"area":"safety"},{"id":"2602.00298","title":"Assessing Domain-Level Susceptibility to Emergent Misalignment from Narrow Finetuning","created":"2026-01-30","cited_by_count":3,"area":"safety"},{"id":"2506.06003","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","created":"2025-06-06","cited_by_count":2,"area":"safety"},{"id":"2508.01074","title":"Evading Data Provenance in Deep Neural Networks","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2508.17767","title":"ISACL: Internal State Analyzer for Copyrighted Training Data Leakage","created":"2025-08-25","cited_by_count":2,"area":null},{"id":"2510.05582","title":"(Token-Level) InfoRMIA: Stronger Membership Inference and Memorization Assessment for LLMs","created":"2025-10-07","cited_by_count":2,"area":"safety"},{"id":"2511.07722","title":"Critical Confabulation: Can LLMs Hallucinate for Social Good?","created":"2025-11-11","cited_by_count":2,"area":null},{"id":"2511.20799","title":"Memories Retrieved from Many Paths: A Multi-Prefix Framework for Robust Detection of Training Data Leakage in Large Language Models","created":"2025-11-25","cited_by_count":2,"area":null},{"id":"2512.09654","title":"Membership and Dataset Inference Attacks on Large Audio Generative Models","created":"2025-12-10","cited_by_count":2,"area":"safety"},{"id":"2601.04301","title":"Quantifying the Effect of Test Set Contamination on Generative Evaluations","created":"2026-01-07","cited_by_count":2,"area":null},{"id":"2602.02819","title":"Causal Evaluation of Membership Inference Attacks","created":"2026-02-02","cited_by_count":2,"area":"safety"},{"id":"2603.28378","title":"Membership Inference Attacks against Large Audio Language Models","created":"2026-03-30","cited_by_count":2,"area":"safety"},{"id":"2607.09692","title":"Reference-Based Distillation Detection in LLMs","created":"2026-06-19","cited_by_count":2,"area":null},{"id":"2408.02140","title":"VidModEx: Interpretable and Efficient Black Box Model Extraction for High-Dimensional Spaces","created":"2024-08-04","cited_by_count":1,"area":null},{"id":"2410.03640","title":"Real-World Benchmarks Make Membership Inference Attacks Fail on Diffusion Models","created":"2024-10-04","cited_by_count":1,"area":"diffusion"},{"id":"2501.13983","title":"AdEval: Alignment-based Dynamic Evaluation to Mitigate Data Contamination in Large Language Models","created":"2025-01-23","cited_by_count":1,"area":null},{"id":"2502.17358","title":"DIS-CO: Discovering Copyrighted Content in VLMs Training Data","created":"2025-02-24","cited_by_count":1,"area":"mllm"},{"id":"2505.18425","title":"Advertising in AI systems: Society must be vigilant","created":"2025-05-23","cited_by_count":1,"area":null},{"id":"2506.14474","title":"LexiMark: Robust Watermarking via Lexical Substitutions to Enhance Membership Verification of an LLM's Textual Training Data","created":"2025-06-17","cited_by_count":1,"area":"safety"},{"id":"2507.06056","title":"Data Compressibility Quantifies LLM Memorization","created":"2025-07-08","cited_by_count":1,"area":null},{"id":"2508.01268","title":"Win-k: Improved Membership Inference Attacks on Small Language Models","created":"2025-08-02","cited_by_count":1,"area":"safety"},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2605.07878","title":"Black-box model classification under the discriminative factorization","created":"2026-05-08","cited_by_count":1,"area":null},{"id":"2605.29245","title":"Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Content","created":"2026-05-28","cited_by_count":1,"area":"safety"},{"id":"2606.03305","title":"The Reliability Gap in Benchmark Auditing: Distribution Shift and Scale as Failure Modes of Contamination Detection","created":"2026-06-02","cited_by_count":1,"area":null},{"id":"2607.01686","title":"WARP: Weight-Space Analysis for Recovering Training Data Portfolios","created":"2026-07-02","cited_by_count":1,"area":"safety"},{"id":"2506.16460","title":"Black-Box Privacy Attacks on Shared Representations in Multitask Learning","created":"2025-06-19","cited_by_count":0,"area":null},{"id":"2508.10173","title":"Benchmark-Driven Selection of AI: Evidence from DeepSeek-R1","created":"2025-08-13","cited_by_count":0,"area":"lr"},{"id":"2510.23074","title":"Fast-MIA: Efficient and Scalable Membership Inference for LLMs","created":"2025-10-27","cited_by_count":0,"area":"safety"},{"id":"2510.25941","title":"RECAP: Reproducing Copyrighted Data from LLMs Training with an Agentic Pipeline","created":"2025-10-29","cited_by_count":0,"area":"agents"},{"id":"2511.00192","title":"EL-MIA: Quantifying Membership Inference Risks of Sensitive Entities in LLMs","created":"2025-10-31","cited_by_count":0,"area":"safety"},{"id":"2511.14084","title":"Observational Auditing of Label Privacy","created":"2025-11-18","cited_by_count":0,"area":null},{"id":"2511.14763","title":"Membership Inference Attack against Large Language Model-based Recommendation Systems: A New Distillation-based Paradigm","created":"2025-09-16","cited_by_count":0,"area":"safety"},{"id":"2512.17075","title":"Perturb Your Data: Paraphrase-Guided Training Data Watermarking","created":"2025-12-18","cited_by_count":0,"area":null},{"id":"2601.04275","title":"Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMs","created":"2026-01-07","cited_by_count":0,"area":"safety"},{"id":"2601.12937","title":"On the Evidentiary Limits of Membership Inference for Copyright Auditing","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2601.13122","title":"Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forward","created":"2026-01-19","cited_by_count":0,"area":null},{"id":"2601.18127","title":"The Limits of AI Data Transparency Policy: Three Disclosure Fallacies","created":"2026-01-26","cited_by_count":0,"area":null},{"id":"2601.20885","title":"What Hard Tokens Reveal: Exploiting Low-confidence Tokens for Membership Inference Attacks against Large Language Models","created":"2026-01-27","cited_by_count":0,"area":"safety"},{"id":"2602.02139","title":"EvoMU: Evolutionary Machine Unlearning","created":"2026-02-02","cited_by_count":0,"area":"safety"},{"id":"2602.04572","title":"From Competition to Collaboration: Designing Sustainable Mechanisms Between LLMs and Online Forums","created":"2026-02-04","cited_by_count":0,"area":null},{"id":"2602.19020","title":"Learning to Detect Language Model Training Data via Active Reconstruction","created":"2026-02-22","cited_by_count":0,"area":"safety"},{"id":"2603.22707","title":"Detecting Non-Membership in LLM Training Data via Rank Correlations","created":"2026-03-24","cited_by_count":0,"area":null},{"id":"2604.22191","title":"Behavioral Canaries: Auditing Private Retrieved Context Usage in RL Fine-Tuning","created":"2026-04-24","cited_by_count":0,"area":"agents"},{"id":"2605.07088","title":"Membership Inference Attacks on Vision-Language-Action Models","created":"2026-05-08","cited_by_count":0,"area":"safety"},{"id":"2605.21543","title":"Provable Joint Decontamination for Benchmarking Multiple Large Language Models","created":"2026-05-20","cited_by_count":0,"area":null},{"id":"2606.21045","title":"OVIG: Optimistic Verification of AI Training Integrity via Gradient Signals","created":"2026-06-19","cited_by_count":0,"area":null},{"id":"2606.21240","title":"DIPBox: A Multi-scale Testing Framework for Tracking Dataset Regeneration","created":"2026-06-19","cited_by_count":0,"area":null},{"id":"2606.23030","title":"Have You Ever Seen Them? Entity-level Membership Inference through Interrogating Large Language Models","created":"2026-06-22","cited_by_count":0,"area":"safety"},{"id":"2606.24408","title":"Natural Identifiers for Privacy and Data Audits in Large Language Models","created":"2026-06-23","cited_by_count":0,"area":null}],"next_cursor":"100"}