{"total":22,"rows":[{"id":"2505.24832","title":"How much do language models memorize?","created":"2025-05-30","cited_by_count":61,"area":null},{"id":"2410.04207","title":"Learning on LoRAs: GL-Equivariant Processing of Low-Rank Weight Spaces for Large Finetuned Models","created":"2024-10-05","cited_by_count":22,"area":null},{"id":"2503.17514","title":"Language Models May Verbatim Complete Text They Were Not Explicitly Trained On","created":"2025-03-21","cited_by_count":21,"area":null},{"id":"2502.00678","title":"How Contaminated Is Your Benchmark? Quantifying Dataset Leakage in Large Language Models with Kernel Divergence","created":"2025-02-02","cited_by_count":15,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2410.10880","title":"Fine-tuning can Help Detect Pretraining Data from Large Language Models","created":"2024-10-09","cited_by_count":8,"area":null},{"id":"2504.13416","title":"STAMP Your Content: Proving Dataset Membership via Watermarked Rephrasings","created":"2025-04-18","cited_by_count":8,"area":null},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2605.28591","title":"Models That Know How Evaluations Are Designed Score Safer","created":"2026-05-27","cited_by_count":4,"area":null},{"id":"2506.06057","title":"Hey, That's My Data! Token-Only Dataset Inference in Large Language Models","created":"2025-06-06","cited_by_count":3,"area":null},{"id":"2511.20799","title":"Memories Retrieved from Many Paths: A Multi-Prefix Framework for Robust Detection of Training Data Leakage in Large Language Models","created":"2025-11-25","cited_by_count":2,"area":null},{"id":"2601.04301","title":"Quantifying the Effect of Test Set Contamination on Generative Evaluations","created":"2026-01-07","cited_by_count":2,"area":null},{"id":"2410.04454","title":"Inner-Probe: Discovering Copyright-related Data Generation in LLM Architecture","created":"2024-10-06","cited_by_count":1,"area":null},{"id":"2603.01053","title":"Turning Black Box into White Box: Dataset Distillation Leaks","created":"2026-03-01","cited_by_count":1,"area":null},{"id":"2511.14084","title":"Observational Auditing of Label Privacy","created":"2025-11-18","cited_by_count":0,"area":null},{"id":"2512.17075","title":"Perturb Your Data: Paraphrase-Guided Training Data Watermarking","created":"2025-12-18","cited_by_count":0,"area":null},{"id":"2603.22707","title":"Detecting Non-Membership in LLM Training Data via Rank Correlations","created":"2026-03-24","cited_by_count":0,"area":null},{"id":"2606.24408","title":"Natural Identifiers for Privacy and Data Audits in Large Language Models","created":"2026-06-23","cited_by_count":0,"area":null},{"id":"2608.07914","title":"When Is Benchmark Contamination Detectable? Information Limits and Power-Calibrated Audits","created":"2026-08-08","cited_by_count":0,"area":null},{"id":"2609.06190","title":"One Perturbation Is Not Enough: Identifiability and Blind Baselines for Behavioral AI Evaluation","created":"2026-09-05","cited_by_count":0,"area":null},{"id":"2609.10830","title":"Detectable Only Where It Is Confounded: What Verified Duplication Counts Say About Membership Evidence in Language Models","created":"2026-09-09","cited_by_count":0,"area":null},{"id":"2610.16152","title":"WildTrace: Evaluating Training Data Detection in Realistic Large-Scale LLM Post-Training","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}