Data Contamination Quiz: A Tool to Detect and Estimate Contamination in Large Language Models
Not on the map. Why?
Abstract (arXiv)
We propose the Data Contamination Quiz (DCQ), a simple and effective approach to detect data contamination in large language models (LLMs) and estimate the amount of it. Specifically, we frame data contamination detection as a series of multiple-choice questions, devising a quiz format wherein three perturbed versions of each instance, subsampled from a specific dataset partition, are created. These changes only include word-level perturbations. The generated perturbations, along with the original dataset instance, form the options in the DCQ, with an extra option accommodating the selection of none of the provided options. Given that the only distinguishing signal among the options is the exact wording with respect to the original dataset instance, an LLM, when tasked with identifying the original dataset instance, gravitates towards selecting the original one if it has been exposed to it. While accounting for positional biases in LLMs, the quiz performance reveals the contamination level for the tested model with the dataset partition to which the quiz pertains. Applied to various datasets and LLMs, under controlled and uncontrolled contamination, our findings, while fully lacking access to training data and model parameters, suggest that DCQ achieves state-of-the-art results and uncovers greater contamination levels through memorization compared to existing methods. Also, it proficiently bypasses more safety filters, especially those set to avoid generating copyrighted content.
Key facts. Cited by 46 papers in the map (data through 7 Oct 2026). Builds on 34 of its 74 references that are in the map. First posted on arXiv 10 Nov 2023.
Builds on
34 of 74 references.
References · 34
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,579
- 2022Emergent Abilities of Large Language Modelscited by 2,483
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
22 more
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2022BLOOM: A 176B-Parameter Open-Access Multilingual Language Modelcited by 1,968
- 2019SuperGLUE: A Stickier Benchmark for General-Purpose Language Understanding Systemscited by 1,718
- 2018Don't Give Me the Details, Just the Summary! Topic-Aware Convolutional Neural Networks for Extreme Summarizationcited by 1,308
- 2023PaLM 2 Technical Reportcited by 1,154
- 2023Large Language Models are not Fair Evaluatorscited by 1,050
- 2023A Multitask, Multilingual, Multimodal Evaluation of ChatGPT on Reasoning, Hallucination, and Interactivitycited by 888
- 2019DROP: A Reading Comprehension Benchmark Requiring Discrete Reasoning Over Paragraphscited by 883
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2023The RefinedWeb Dataset for Falcon LLM: Outperforming Curated Corpora with Web Data, and Web Data Onlycited by 755
- 2021Deduplicating Training Data Makes Language Models Bettercited by 705
- 2019SAMSum Corpus: A Human-annotated Dialogue Dataset for Abstractive Summarizationcited by 530
- 2023Large Language Models Are Not Robust Multiple Choice Selectorscited by 454
- 2023Detecting Pretraining Data from Large Language Modelscited by 375
- 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 339
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 227
- 2023Don't Make Your LLM an Evaluation Benchmark Cheatercited by 194
- 2023Rethinking Benchmark and Contamination for Language Models with Rephrased Samplescited by 192
- 2023Time Travel in LLMs: Tracing Data Contamination in Large Language Modelscited by 175
- 2023MeetingBank: A Benchmark Dataset for Meeting Summarizationcited by 81
- 2023Data Contamination Through the Lens of Timecited by 39
- 2023Overview of AuTexTification at IberLEF 2023: Detection and Attribution of Machine-Generated Text in Multiple Domainscited by 31
Built on by
Citing papers per year: 2024: 19; 2025: 12; 2026: 15.
46 papers.
Sort:
By area:
- 2024LiveBench: A Challenging, Contamination-Limited LLM Benchmarkcited by 242
- 2024On Memorization of Large Language Models in Logical Reasoningcited by 114
- 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 102
- 2024DE-COP: Detecting Copyrighted Content in Language Models Training Datacited by 72
- 2024Dynamic Evaluation of Large Language Models by Meta Probing Agentscited by 54
- 2024SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)cited by 54
- 2024ConStat: Performance-Based Contamination Detection in Large Language Modelscited by 33
- 2024Evading Data Contamination Detection for Language Models is (too) Easycited by 30
- 2024Cofca: A Step-Wise Counterfactual Multi-hop QA benchmarkcited by 26
- 2024DARG: Dynamic Evaluation of Large Language Models via Adaptive Reasoning Graphcited by 26
- 2024TRUCE: Private Benchmarking to Prevent Contamination and Improve Comparative Evaluation of LLMscited by 24
- 2024ASR Error Correction using Large Language Modelscited by 23
34 more
- 2024Large Language Models are Zero-Shot Next Location Predictorscited by 22
- 2025Language Models May Verbatim Complete Text They Were Not Explicitly Trained Oncited by 20
- 2024Eureka: Evaluating and Understanding Large Foundation Modelscited by 18
- 2025The Emperor's New Clothes in Benchmarking? A Rigorous Examination of Mitigation Strategies for LLM Benchmark Data Contaminationcited by 13
- 2024A Comprehensive Survey of Contamination Detection Methods in Large Language Modelscited by 12
- 2024Using Large Language Models for Automated Grading of Student Writing about Sciencecited by 12
- 2025Confidence in Large Language Model Evaluation: A Bayesian Approach to Limited-Sample Challengescited by 7
- 2025BeyondBench: Contamination-Resistant Evaluation of Reasoning in Language Modelscited by 7
- 2024Memorization in In-Context Learningcited by 6
- 2025Detecting Benchmark Contamination Through Watermarkingcited by 6
- 2025CapBencher: Give Your LLM Benchmark a Built-in Alarm for Test-Set Overfittingcited by 6
- 2025None of the Others: a General Technique to Distinguish Reasoning from Memorization in Multiple-Choice LLM Evaluation Benchmarkscited by 5
- 2025RefineStat: Efficient Exploration for Probabilistic Program Synthesiscited by 5
- 2026LiveBrowseComp: Are Search Agents Searching, or Just Verifying What They Already Know?cited by 3
- 2024Large Language Models As MOOCs Graderscited by 2
- 2025LogitTrace: Detecting Benchmark Contamination via Layerwise Logit Trajectoriescited by 2
- 2025When Large Language Models Know the Table: A Framework for Assessing Data Contamination in Tabular Datasetscited by 2
- 2026K-Bench: measuring model performance on real scientific agent requestscited by 2
- 2024Dynamic Skill Adaptation for Large Language Modelscited by 1
- 2025AdEval: Alignment-based Dynamic Evaluation to Mitigate Data Contamination in Large Language Modelscited by 1
- 2025Breaking Memorization Barriers in LLM Code Fine-Tuning via Information Bottleneck for Improved Generalizationcited by 1
- 2026InfoSynth: Information-Guided Benchmark Synthesis for LLMscited by 1
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluationscited by 1
- 2026Intent Laundering: AI Safety Datasets Are Not What They Seemcited by 1
- 2026WARP: Weight-Space Analysis for Recovering Training Data Portfolioscited by 1
- 2026Scores Alone Do Not Prove Discovery: The Discovery Certification Protocol for Auditing AI Research Agentscited by 1
- 2026LLM Readiness Harness: Evaluation, Observability, and CI Gates for LLM/RAG Applicationscited by 0
- 2026CresOWLve: Benchmarking Creative Problem-Solving Over Real-World Knowledgecited by 0
- 2026Reasoners or Translators? Contamination-aware Evaluation and Neuro-Symbolic Robustness in Tax Lawcited by 0
- 2026Correcting test set contamination by spiking the training datacited by 0
- 2026Same Question, Different Answers: Evaluating LLM Reliability Beyond Accuracycited by 0
- 2026Memorization Diagnostics for Code LLMs Should be Scale-Awarecited by 0
- 2026Structure, Association, and Decision Value: Representation-Based Difficulty Estimation for Adaptive Inference in African-Language NLIcited by 0
- 2026Detecting Pretraining Data in Large Language Models from a Free-Energy Perspectivecited by 0
- 2026Detecting Pretraining Data in Large Language Models from a Free-Energy Perspective18 Sep 2026
- 2026Scores Alone Do Not Prove Discovery: The Discovery Certification Protocol for Auditing AI Research Agents7 Sep 2026
- 2026K-Bench: measuring model performance on real scientific agent requests21 Aug 2026
- 2026Structure, Association, and Decision Value: Representation-Based Difficulty Estimation for Adaptive Inference in African-Language NLI19 Aug 2026
- 2026Memorization Diagnostics for Code LLMs Should be Scale-Aware13 Aug 2026
- 2026WARP: Weight-Space Analysis for Recovering Training Data Portfolios2 Jul 2026
- 2026LiveBrowseComp: Are Search Agents Searching, or Just Verifying What They Already Know?27 May 2026
- 2026Correcting test set contamination by spiking the training data24 May 2026
- 2026Same Question, Different Answers: Evaluating LLM Reliability Beyond Accuracy18 May 2026
- 2026Reasoners or Translators? Contamination-aware Evaluation and Neuro-Symbolic Robustness in Tax Law15 May 2026
- 2026CresOWLve: Benchmarking Creative Problem-Solving Over Real-World Knowledge3 Apr 2026
- 2026LLM Readiness Harness: Evaluation, Observability, and CI Gates for LLM/RAG Applications28 Mar 2026
34 more
- 2026Intent Laundering: AI Safety Datasets Are Not What They Seem17 Feb 2026
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluations7 Jan 2026
- 2026InfoSynth: Information-Guided Benchmark Synthesis for LLMs2 Jan 2026
- 2025When Large Language Models Know the Table: A Framework for Assessing Data Contamination in Tabular Datasets23 Oct 2025
- 2025Breaking Memorization Barriers in LLM Code Fine-Tuning via Information Bottleneck for Improved Generalization15 Oct 2025
- 2025BeyondBench: Contamination-Resistant Evaluation of Reasoning in Language Models29 Sep 2025
- 2025LogitTrace: Detecting Benchmark Contamination via Layerwise Logit Trajectories25 Sep 2025
- 2025RefineStat: Efficient Exploration for Probabilistic Program Synthesis1 Sep 2025
- 2025CapBencher: Give Your LLM Benchmark a Built-in Alarm for Test-Set Overfitting23 May 2025
- 2025Confidence in Large Language Model Evaluation: A Bayesian Approach to Limited-Sample Challenges30 Apr 2025
- 2025Language Models May Verbatim Complete Text They Were Not Explicitly Trained On21 Mar 2025
- 2025The Emperor's New Clothes in Benchmarking? A Rigorous Examination of Mitigation Strategies for LLM Benchmark Data Contamination20 Mar 2025
- 2025Detecting Benchmark Contamination Through Watermarking24 Feb 2025
- 2025None of the Others: a General Technique to Distinguish Reasoning from Memorization in Multiple-Choice LLM Evaluation Benchmarks18 Feb 2025
- 2025AdEval: Alignment-based Dynamic Evaluation to Mitigate Data Contamination in Large Language Models23 Jan 2025
- 2024Dynamic Skill Adaptation for Large Language Models26 Dec 2024
- 2024Using Large Language Models for Automated Grading of Student Writing about Science25 Dec 2024
- 2024On Memorization of Large Language Models in Logical Reasoning30 Oct 2024
- 2024ASR Error Correction using Large Language Models14 Sep 2024
- 2024Eureka: Evaluating and Understanding Large Foundation Models13 Sep 2024
- 2024Memorization in In-Context Learning21 Aug 2024
- 2024LiveBench: A Challenging, Contamination-Limited LLM Benchmark27 Jun 2024
- 2024SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)25 Jun 2024
- 2024DARG: Dynamic Evaluation of Large Language Models via Adaptive Reasoning Graph25 Jun 2024
- 2024Large Language Models are Zero-Shot Next Location Predictors31 May 2024
- 2024ConStat: Performance-Based Contamination Detection in Large Language Models25 May 2024
- 2024Benchmarking Benchmark Leakage in Large Language Models29 Apr 2024
- 2024A Comprehensive Survey of Contamination Detection Methods in Large Language Models31 Mar 2024
- 2024TRUCE: Private Benchmarking to Prevent Contamination and Improve Comparative Evaluation of LLMs1 Mar 2024
- 2024Dynamic Evaluation of Large Language Models by Meta Probing Agents21 Feb 2024
- 2024Cofca: A Step-Wise Counterfactual Multi-hop QA benchmark19 Feb 2024
- 2024DE-COP: Detecting Copyrighted Content in Language Models Training Data15 Feb 2024
- 2024Large Language Models As MOOCs Graders6 Feb 2024
- 2024Evading Data Contamination Detection for Language Models is (too) Easy5 Feb 2024
- 2024On Memorization of Large Language Models in Logical Reasoningcited by 114
- 2024Cofca: A Step-Wise Counterfactual Multi-hop QA benchmarkcited by 26
- 2024DARG: Dynamic Evaluation of Large Language Models via Adaptive Reasoning Graphcited by 26
- 2025BeyondBench: Contamination-Resistant Evaluation of Reasoning in Language Modelscited by 7
- 2025None of the Others: a General Technique to Distinguish Reasoning from Memorization in Multiple-Choice LLM Evaluation Benchmarkscited by 5
- 2026CresOWLve: Benchmarking Creative Problem-Solving Over Real-World Knowledgecited by 0
- 2026Reasoners or Translators? Contamination-aware Evaluation and Neuro-Symbolic Robustness in Tax Lawcited by 0
- 2026Reasoners or Translators? Contamination-aware Evaluation and Neuro-Symbolic Robustness in Tax Law15 May 2026
- 2026CresOWLve: Benchmarking Creative Problem-Solving Over Real-World Knowledge3 Apr 2026
- 2025BeyondBench: Contamination-Resistant Evaluation of Reasoning in Language Models29 Sep 2025
- 2025None of the Others: a General Technique to Distinguish Reasoning from Memorization in Multiple-Choice LLM Evaluation Benchmarks18 Feb 2025
- 2024On Memorization of Large Language Models in Logical Reasoning30 Oct 2024
- 2024DARG: Dynamic Evaluation of Large Language Models via Adaptive Reasoning Graph25 Jun 2024
- 2024Cofca: A Step-Wise Counterfactual Multi-hop QA benchmark19 Feb 2024
- 2024LiveBench: A Challenging, Contamination-Limited LLM Benchmarkcited by 242
- 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 102
- 2024DE-COP: Detecting Copyrighted Content in Language Models Training Datacited by 72
- 2024ConStat: Performance-Based Contamination Detection in Large Language Modelscited by 33
- 2024Evading Data Contamination Detection for Language Models is (too) Easycited by 30
- 2024TRUCE: Private Benchmarking to Prevent Contamination and Improve Comparative Evaluation of LLMscited by 24
- 2024ASR Error Correction using Large Language Modelscited by 23
- 2024Large Language Models are Zero-Shot Next Location Predictorscited by 22
- 2025Language Models May Verbatim Complete Text They Were Not Explicitly Trained Oncited by 20
- 2024Eureka: Evaluating and Understanding Large Foundation Modelscited by 18
- 2025The Emperor's New Clothes in Benchmarking? A Rigorous Examination of Mitigation Strategies for LLM Benchmark Data Contaminationcited by 13
- 2024A Comprehensive Survey of Contamination Detection Methods in Large Language Modelscited by 12
12 most cited of 34 All 34 (JSON)
- 2026Detecting Pretraining Data in Large Language Models from a Free-Energy Perspective18 Sep 2026
- 2026Scores Alone Do Not Prove Discovery: The Discovery Certification Protocol for Auditing AI Research Agents7 Sep 2026
- 2026Structure, Association, and Decision Value: Representation-Based Difficulty Estimation for Adaptive Inference in African-Language NLI19 Aug 2026
- 2026Memorization Diagnostics for Code LLMs Should be Scale-Aware13 Aug 2026
- 2026Correcting test set contamination by spiking the training data24 May 2026
- 2026Same Question, Different Answers: Evaluating LLM Reliability Beyond Accuracy18 May 2026
- 2026LLM Readiness Harness: Evaluation, Observability, and CI Gates for LLM/RAG Applications28 Mar 2026
- 2026Intent Laundering: AI Safety Datasets Are Not What They Seem17 Feb 2026
- 2026Quantifying the Effect of Test Set Contamination on Generative Evaluations7 Jan 2026
- 2026InfoSynth: Information-Guided Benchmark Synthesis for LLMs2 Jan 2026
- 2025When Large Language Models Know the Table: A Framework for Assessing Data Contamination in Tabular Datasets23 Oct 2025
- 2025Breaking Memorization Barriers in LLM Code Fine-Tuning via Information Bottleneck for Improved Generalization15 Oct 2025
12 newest of 34 All 34 (JSON)