Stop Uploading Test Data in Plain Text: Practical Strategies for Mitigating Data Contamination by Evaluation Benchmarks
Not on the map. Why?
Abstract (arXiv)
Data contamination has become prevalent and challenging with the rise of models pretrained on large automatically-crawled corpora. For closed models, the training data becomes a trade secret, and even for open models, it is not trivial to detect contamination. Strategies such as leaderboards with hidden answers, or using test data which is guaranteed to be unseen, are expensive and become fragile with time. Assuming that all relevant actors value clean test data and will cooperate to mitigate data contamination, what can be done? We propose three strategies that can make a difference: (1) Test data made public should be encrypted with a public key and licensed to disallow derivative distribution; (2) demand training exclusion controls from closed API holders, and protect your test data by refusing to evaluate without them; (3) avoid data which appears with its solution on the internet, and release the web-page context of internet-derived data along with the data. These strategies are practical and can be effective in preventing data contamination.
Key facts. Cited by 142 papers in the map (data through 14 Oct 2026). Builds on 35 of its 59 references that are in the map. First posted on arXiv 17 May 2023.
Builds on
35 of 59 references.
References · 35
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,592
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,998
- 2022Model soups: averaging weights of multiple fine-tuned models improves accuracy without increasing inference timecited by 1,396
- 2019TinyBERT: Distilling BERT for Natural Language Understandingcited by 1,167
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 1,006
- 2021Robust fine-tuning of zero-shot modelscited by 797
23 more
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2023Distilling Step-by-Step! Outperforming Larger Language Models with Less Training Data and Smaller Model Sizescited by 737
- 2023Extracting Training Data from Diffusion Modelscited by 732
- 2023A Watermark for Large Language Modelscited by 725
- 2023LLaMA-Adapter V2: Parameter-Efficient Visual Instruction Modelcited by 602
- 2021Datasets: A Community Library for Natural Language Processingcited by 530
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 492
- 2023Is ChatGPT a General-Purpose Natural Language Processing Task Solver?cited by 488
- 2019Multi-News: a Large-Scale Multi-Document Summarization Dataset and Abstractive Hierarchical Modelcited by 431
- 2023Can AI-Generated Text be Reliably Detected?cited by 386
- 2023Evaluating Verifiability in Generative Search Enginescited by 303
- 2023ChatIE: Zero-Shot Information Extraction via Chatting with ChatGPTcited by 250
- 2022Data Contamination: From Memorization to Exploitationcited by 236
- 2023Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-4cited by 125
- 2017Using millions of emoji occurrences to learn any-domain representations for detecting sentiment, emotion and sarcasmcited by 118
- 2022Fusing finetuned models for better pretrainingcited by 110
- 2020Compressing Large-Scale Transformer-Based Models: A Case Study on BERTcited by 96
- 2020Contrastive Distillation on Intermediate Representations for Language Model Compressioncited by 57
- 2014Effective Use of Word Order for Text Categorization with Convolutional Neural Networkscited by 40
- 2023The ROOTS Search Tool: Data Transparency for LLMscited by 31
- 2023Data Portraits: Recording Foundation Model Training Datacited by 30
- 2023ThoughtSource: A central hub for large language model reasoning datacited by 23
- 2021GENIE: Toward Reproducible and Standardized Human Evaluation for Text Generationcited by 20
Built on by
Citing papers per year: 2023: 20; 2024: 48; 2025: 24; 2026: 50.
142 papers.
Sort:
By area:
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 348
- 2023Challenges and Applications of Large Language Modelscited by 254
- 2024A Careful Examination of Large Language Model Performance on Grade School Arithmeticcited by 191
- 2024Same Task, More Tokens: the Impact of Input Length on the Reasoning Performance of Large Language Modelscited by 152
- 2024Benchmark Data Contamination of Large Language Models: A Surveycited by 147
- 2023Investigating Data Contamination in Modern Benchmarks for Large Language Modelscited by 138
- 2025MMVU: Measuring Expert-Level Multi-Discipline Video Understandingcited by 137
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 126
- 2024Generalization or Memorization: Data Contamination and Trustworthy Evaluation for Large Language Modelscited by 122
- 2024BetterBench: Assessing AI Benchmarks, Uncovering Issues, and Establishing Best Practicescited by 114
- 2024ForecastBench: A Dynamic Benchmark of AI Forecasting Capabilitiescited by 110
- 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 106
38 more
- 2023VisIT-Bench: A Benchmark for Vision-Language Instruction Following Inspired by Real-World Usecited by 102
- 2024InstructRAG: Instructing Retrieval-Augmented Generation via Self-Synthesized Rationalescited by 101
- 2023Task Contamination: Language Models May Not Be Few-Shot Anymorecited by 99
- 2023Are Large Language Model-based Evaluators the Solution to Scaling Up Multilingual Evaluation?cited by 88
- 2024One Thousand and One Pairs: A "novel" challenge for long-context language modelscited by 80
- 2024Visual Hallucinations of Multi-modal Large Language Modelscited by 68
- 2024A Chain-of-Thought Is as Strong as Its Weakest Link: A Benchmark for Verifiers of Reasoning Chainscited by 65
- 2023LatestEval: Addressing Data Contamination in Language Model Evaluation through Dynamic and Time-Sensitive Test Constructioncited by 58
- 2023An Open Source Data Contamination Report for Large Language Modelscited by 51
- 2024A Performance Study of LLM-Generated Code on Leetcodecited by 49
- 2023Estimating Contamination via Perplexity: Quantifying Memorisation in Language Model Evaluationcited by 48
- 2024AntiLeakBench: Preventing Data Contamination by Automatically Constructing Benchmarks with Updated Real-World Knowledgecited by 44
- 2023A General-Purpose Self-Supervised Model for Computational Pathologycited by 42
- 2024Prototypical Information Bottlenecking and Disentangling for Multimodal Cancer Survival Predictioncited by 41
- 2023Data Contamination Through the Lens of Timecited by 40
- 2025Towards Holistic Evaluation of Large Audio-Language Models: A Comprehensive Surveycited by 39
- 2025Recent Advances in Large Langauge Model Benchmarks against Data Contamination: From Static to Dynamic Evaluationcited by 38
- 2024Evaluation data contamination in LLMs: how do we measure it and (when) does it matter?cited by 32
- 2024Unveiling the Spectrum of Data Contamination in Language Models: A Survey from Detection to Remediationcited by 30
- 2024VarBench: Robust Language Model Benchmarking Through Dynamic Variable Perturbationcited by 29
- 2023Peek Across: Improving Multi-Document Modeling via Cross-Document Question-Answeringcited by 28
- 2023CRAB: Assessing the Strength of Causal Relationships Between Real-world Eventscited by 28
- 2024LINGOLY: A Benchmark of Olympiad-Level Linguistic Reasoning Puzzles in Low-Resource and Extinct Languagescited by 28
- 2024Text Embedding Inversion Security for Multilingual Language Modelscited by 26
- 2024MHPP: Exploring the Capabilities and Limitations of Language Models Beyond Basic Code Generationcited by 26
- 2024Does Data Contamination Detection Work (Well) for LLMs? A Survey and Evaluation on Detection Assumptionscited by 26
- 2024FoodieQA: A Multimodal Dataset for Fine-Grained Understanding of Chinese Food Culturecited by 25
- 2025On Benchmarking Human-Like Intelligence in Machinescited by 25
- 2025Re-evaluating Theory of Mind evaluation in large language modelscited by 23
- 2024Data Contamination Report from the 2024 CONDA Shared Taskcited by 20
- 2024Beyond Prompts: Dynamic Conversational Benchmarking of Large Language Modelscited by 20
- 2024FinDVer: Explainable Claim Verification over Long and Hybrid-Content Financial Documentscited by 19
- 2024Towards Data Contamination Detection for Modern Large Language Models: Limitations, Inconsistencies, and Oracle Challengescited by 18
- 2023Large Language Models are Fixated by Red Herrings: Exploring Creative Problem Solving and Einstellung Effect using the Only Connect Wall Datasetcited by 17
- 2024Robust Pronoun Fidelity with English LLMs: Are they Reasoning, Repeating, or Just Biased?cited by 17
- 2024A Notion of Complexity for Theory of Mind via Discrete World Modelscited by 16
- 2025How Well Does GPT-4o Understand Vision? Evaluating Multimodal Foundation Models on Standard Computer Vision Taskscited by 14
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJackcited by 14
50 most cited of 142 All 142 (JSON)
- 2026Query Your Way Out: Benchmarking Multi-Turn Knowledge Reasoning through Generalized Puzzle Solving12 Oct 2026
- 2026Knowing the Rules, Applying the Rules: Evaluating Language Models on Traditional Chinese Bazi5 Oct 2026
- 2026Uncheatable Eval: Dynamic Compression-Based Evaluation of Language Models23 Sep 2026
- 2026SSP-Bench: A Hybrid Data Generation Framework for Safety, Security, and Privacy Evaluation21 Sep 2026
- 2026LEGIT: Credentialing Protocol for Trustworthy AI Agent Marketplaces18 Sep 2026
- 2026MiST: Mid-Training LLMs for Cybersecurity16 Sep 2026
- 2026CoArena: Evaluating Computer-Use and Multi-Agent Systems in Real Time13 Sep 2026
- 2026The Double Measurement Confound in Agent Benchmarks: De-Scaffolding, Ground-Truth Scoring, and Reliability Beyond the Mean6 Sep 2026
- 2026AxQM: A Textbook-Scale Benchmark for Formal Proof Synthesis in a Library of Finite-Dimensional Quantum Mechanics4 Sep 2026
- 2026Position: Privacy Is a Claim, Not a Property of Synthetic Data1 Sep 2026
- 2026Benchmark Contamination: A Taxonomy Organized by Defeated Mitigation29 Aug 2026
- 2026Dead text or binding clause? Measuring and restoring constraint influence in black-box LLM dialogues12 Aug 2026
38 more
- 2026Zero Gap Is Not Restoration: Stratified Per-Question Probability Evaluation and Step-wise Mitigation of Benchmark Contamination7 Aug 2026
- 2026MameLoshnLM: Yiddish Language Model and Evaluation Benchmark6 Aug 2026
- 2026NOLLI: A Difficulty-Calibrated Puzzle Benchmark for Diagnosing the English-Korean Performance Gap5 Aug 2026
- 2026M-GATE: Multilingual Grammar, Accuracy in Translation, and Efficiency Benchmark for Large Language Models4 Aug 2026
- 2026BulkPR-Bench: Benchmarking Queue-Level Governance of Interacting Pull Requests3 Aug 2026
- 2026Frontier Financial Judgement: Can agents tell what might move a stock?22 Jul 2026
- 2026Spaghetti Architect: A Contamination-Resistant, By-Construction-Labelled, Multi-Language Code Dataset Generator21 Jul 2026
- 2026Beyond Success Rate: Cost-Aware Evaluation of Offensive and Defensive Security Agents16 Jul 2026
- 2026RustMizan: A Compilable, Contamination-Aware Benchmarking Framework for Rust Vulnerabilities6 Jul 2026
- 2026Same Evidence, Different Answer: Auditing Order Sensitivity in Multimodal Large Language Models24 Jun 2026
- 2026Internal Data Repetition Destroys Language Models23 Jun 2026
- 2026RigorBench: Benchmarking Engineering Process Discipline in Autonomous AI Coding Agents21 Jun 2026
- 2026LiveBrowseComp: Are Search Agents Searching, or Just Verifying What They Already Know?27 May 2026
- 2026Measuring Progress Toward AGI: A Cognitive Framework27 May 2026
- 2026ATLAS: All-round Testing of Long-context Abilities across Scales27 May 2026
- 2026Beyond Questions: Evaluating the Stated Knowledge of LLMs26 May 2026
- 2026Correcting test set contamination by spiking the training data24 May 2026
- 2026TRACER: A Semantic-Aware Framework for Fine-Grained Contamination Detection in Code LLMs22 May 2026
- 2026Pretraining Data Exposure in Large Language Models: A Survey of Membership Inference, Data Contamination, and Security Implications21 May 2026
- 2026Interactive Evaluation Requires a Design Science18 May 2026
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJack12 May 2026
- 2026EnactToM: An Evolving Benchmark for Functional Theory of Mind in Embodied Agents11 May 2026
- 2026Benchmarked Yet Not Measured -- Generative AI Should be Evaluated Against Real-World Utility7 May 2026
- 2026MADE: A Living Benchmark for Multi-Label Text Classification with Uncertainty Quantification of Medical Device Adverse Events16 Apr 2026
- 2026KMMMU: Evaluation of Massive Multi-discipline Multimodal Understanding in Korean Language and Context18 Mar 2026
- 2026An Agentic Evaluation Framework for AI-Generated Scientific Code in PETSc16 Mar 2026
- 2026FLUX: Data Worth Training On14 Mar 2026
- 2026DatedGPT: Preventing Lookahead Bias in Large Language Models with Time-Aware Pretraining12 Mar 2026
- 2026EsoLang-Bench: Evaluating Genuine Reasoning in Large Language Models via Esoteric Programming Languages10 Mar 2026
- 2026No Memorization, No Detection: Output Distribution-Based Contamination Detection in Small Language Models3 Mar 2026
- 2026AI Evaluation Should Require Standardized Item-Level Data Releases27 Feb 2026
- 2026Learning to Detect Language Model Training Data via Active Reconstruction22 Feb 2026
- 2026Long-Tail Knowledge in Large Language Models: Taxonomy, Mechanisms, Interventions and Implications18 Feb 2026
- 2026Reward Modeling for Reinforcement Learning-Based LLM Reasoning: Design, Challenges, and Evaluation10 Feb 2026
- 2026When Generic Prompt Improvements Hurt: Evaluation-Driven Iteration for LLM Applications29 Jan 2026
- 2026When Flores Bloomz Wrong: Cross-Direction Contamination in Machine Translation Evaluation28 Jan 2026
- 2026Selecting Language Models for Social Science: Start Small, Start Open, and Validate16 Jan 2026
- 2026The Impact of Post-training on Data Contamination3 Jan 2026
50 newest of 142 All 142 (JSON)
- 2024A Careful Examination of Large Language Model Performance on Grade School Arithmeticcited by 191
- 2024Same Task, More Tokens: the Impact of Input Length on the Reasoning Performance of Large Language Modelscited by 152
- 2024A Chain-of-Thought Is as Strong as Its Weakest Link: A Benchmark for Verifiers of Reasoning Chainscited by 65
- 2024LINGOLY: A Benchmark of Olympiad-Level Linguistic Reasoning Puzzles in Low-Resource and Extinct Languagescited by 28
- 2024Robust Pronoun Fidelity with English LLMs: Are they Reasoning, Repeating, or Just Biased?cited by 17
- 2026Reward Modeling for Reinforcement Learning-Based LLM Reasoning: Design, Challenges, and Evaluationcited by 7
- 2025Rethinking All Evidence: Enhancing Trustworthy Retrieval-Augmented Generation via Conflict-Driven Summarizationcited by 6
- 2026The Impact of Post-training on Data Contaminationcited by 5
- 2026EsoLang-Bench: Evaluating Genuine Reasoning in Large Language Models via Esoteric Programming Languagescited by 4
- 2025ACCESS : A Benchmark for Abstract Causal Event Discovery and Reasoningcited by 3
- 2026Query Your Way Out: Benchmarking Multi-Turn Knowledge Reasoning through Generalized Puzzle Solvingcited by 0
- 2026Query Your Way Out: Benchmarking Multi-Turn Knowledge Reasoning through Generalized Puzzle Solving12 Oct 2026
- 2026EsoLang-Bench: Evaluating Genuine Reasoning in Large Language Models via Esoteric Programming Languages10 Mar 2026
- 2026Reward Modeling for Reinforcement Learning-Based LLM Reasoning: Design, Challenges, and Evaluation10 Feb 2026
- 2026The Impact of Post-training on Data Contamination3 Jan 2026
- 2025Rethinking All Evidence: Enhancing Trustworthy Retrieval-Augmented Generation via Conflict-Driven Summarization2 Jul 2025
- 2025ACCESS : A Benchmark for Abstract Causal Event Discovery and Reasoning12 Feb 2025
- 2024LINGOLY: A Benchmark of Olympiad-Level Linguistic Reasoning Puzzles in Low-Resource and Extinct Languages10 Jun 2024
- 2024A Careful Examination of Large Language Model Performance on Grade School Arithmetic1 May 2024
- 2024Robust Pronoun Fidelity with English LLMs: Are they Reasoning, Repeating, or Just Biased?4 Apr 2024
- 2024Same Task, More Tokens: the Impact of Input Length on the Reasoning Performance of Large Language Models19 Feb 2024
- 2024A Chain-of-Thought Is as Strong as Its Weakest Link: A Benchmark for Verifiers of Reasoning Chains1 Feb 2024
- 2026LiveBrowseComp: Are Search Agents Searching, or Just Verifying What They Already Know?cited by 5
- 2026The Double Measurement Confound in Agent Benchmarks: De-Scaffolding, Ground-Truth Scoring, and Reliability Beyond the Meancited by 3
- 2026RigorBench: Benchmarking Engineering Process Discipline in Autonomous AI Coding Agentscited by 2
- 2026An Agentic Evaluation Framework for AI-Generated Scientific Code in PETSccited by 1
- 2026RustMizan: A Compilable, Contamination-Aware Benchmarking Framework for Rust Vulnerabilitiescited by 1
- 2026Frontier Financial Judgement: Can agents tell what might move a stock?cited by 0
- 2026CoArena: Evaluating Computer-Use and Multi-Agent Systems in Real Timecited by 0
- 2026LEGIT: Credentialing Protocol for Trustworthy AI Agent Marketplacescited by 0
- 2026LEGIT: Credentialing Protocol for Trustworthy AI Agent Marketplaces18 Sep 2026
- 2026CoArena: Evaluating Computer-Use and Multi-Agent Systems in Real Time13 Sep 2026
- 2026The Double Measurement Confound in Agent Benchmarks: De-Scaffolding, Ground-Truth Scoring, and Reliability Beyond the Mean6 Sep 2026
- 2026Frontier Financial Judgement: Can agents tell what might move a stock?22 Jul 2026
- 2026RustMizan: A Compilable, Contamination-Aware Benchmarking Framework for Rust Vulnerabilities6 Jul 2026
- 2026RigorBench: Benchmarking Engineering Process Discipline in Autonomous AI Coding Agents21 Jun 2026
- 2026LiveBrowseComp: Are Search Agents Searching, or Just Verifying What They Already Know?27 May 2026
- 2026An Agentic Evaluation Framework for AI-Generated Scientific Code in PETSc16 Mar 2026
- 2023VisIT-Bench: A Benchmark for Vision-Language Instruction Following Inspired by Real-World Usecited by 102
- 2024Visual Hallucinations of Multi-modal Large Language Modelscited by 68
- 2025Movie Facts and Fibs (MF2): A Benchmark for Long Movie Understandingcited by 5
- 2024Clean Evaluations on Contaminated Visual Language Modelscited by 3
- 2026Same Evidence, Different Answer: Auditing Order Sensitivity in Multimodal Large Language Modelscited by 1
- 2026Same Evidence, Different Answer: Auditing Order Sensitivity in Multimodal Large Language Models24 Jun 2026
- 2025Movie Facts and Fibs (MF2): A Benchmark for Long Movie Understanding6 Jun 2025
- 2024Clean Evaluations on Contaminated Visual Language Models9 Oct 2024
- 2024Visual Hallucinations of Multi-modal Large Language Models22 Feb 2024
- 2023VisIT-Bench: A Benchmark for Vision-Language Instruction Following Inspired by Real-World Use12 Aug 2023
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 348
- 2023Challenges and Applications of Large Language Modelscited by 254
- 2024Benchmark Data Contamination of Large Language Models: A Surveycited by 147
- 2023Investigating Data Contamination in Modern Benchmarks for Large Language Modelscited by 138
- 2025MMVU: Measuring Expert-Level Multi-Discipline Video Understandingcited by 137
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 126
- 2024Generalization or Memorization: Data Contamination and Trustworthy Evaluation for Large Language Modelscited by 122
- 2024BetterBench: Assessing AI Benchmarks, Uncovering Issues, and Establishing Best Practicescited by 114
- 2024ForecastBench: A Dynamic Benchmark of AI Forecasting Capabilitiescited by 110
- 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 106
- 2023Task Contamination: Language Models May Not Be Few-Shot Anymorecited by 99
- 2023Are Large Language Model-based Evaluators the Solution to Scaling Up Multilingual Evaluation?cited by 88
12 most cited of 113 All 113 (JSON)
- 2026Knowing the Rules, Applying the Rules: Evaluating Language Models on Traditional Chinese Bazi5 Oct 2026
- 2026Uncheatable Eval: Dynamic Compression-Based Evaluation of Language Models23 Sep 2026
- 2026SSP-Bench: A Hybrid Data Generation Framework for Safety, Security, and Privacy Evaluation21 Sep 2026
- 2026MiST: Mid-Training LLMs for Cybersecurity16 Sep 2026
- 2026AxQM: A Textbook-Scale Benchmark for Formal Proof Synthesis in a Library of Finite-Dimensional Quantum Mechanics4 Sep 2026
- 2026Position: Privacy Is a Claim, Not a Property of Synthetic Data1 Sep 2026
- 2026Benchmark Contamination: A Taxonomy Organized by Defeated Mitigation29 Aug 2026
- 2026Dead text or binding clause? Measuring and restoring constraint influence in black-box LLM dialogues12 Aug 2026
- 2026Zero Gap Is Not Restoration: Stratified Per-Question Probability Evaluation and Step-wise Mitigation of Benchmark Contamination7 Aug 2026
- 2026MameLoshnLM: Yiddish Language Model and Evaluation Benchmark6 Aug 2026
- 2026NOLLI: A Difficulty-Calibrated Puzzle Benchmark for Diagnosing the English-Korean Performance Gap5 Aug 2026
- 2026M-GATE: Multilingual Grammar, Accuracy in Translation, and Efficiency Benchmark for Large Language Models4 Aug 2026
12 newest of 113 All 113 (JSON)