mlsanityData to 7 Oct 2026

Data Contamination Quiz: A Tool to Detect and Estimate Contamination in Large Language Models

arXiv 2311.06233 ↗First posted 10 Nov 2023cs.CL cs.AI cs.LGcited by 46

Not on the map. Why?

Abstract (arXiv)

We propose the Data Contamination Quiz (DCQ), a simple and effective approach to detect data contamination in large language models (LLMs) and estimate the amount of it. Specifically, we frame data contamination detection as a series of multiple-choice questions, devising a quiz format wherein three perturbed versions of each instance, subsampled from a specific dataset partition, are created. These changes only include word-level perturbations. The generated perturbations, along with the original dataset instance, form the options in the DCQ, with an extra option accommodating the selection of none of the provided options. Given that the only distinguishing signal among the options is the exact wording with respect to the original dataset instance, an LLM, when tasked with identifying the original dataset instance, gravitates towards selecting the original one if it has been exposed to it. While accounting for positional biases in LLMs, the quiz performance reveals the contamination level for the tested model with the dataset partition to which the quiz pertains. Applied to various datasets and LLMs, under controlled and uncontrolled contamination, our findings, while fully lacking access to training data and model parameters, suggest that DCQ achieves state-of-the-art results and uncovers greater contamination levels through memorization compared to existing methods. Also, it proficiently bypasses more safety filters, especially those set to avoid generating copyrighted content.

Key facts. Cited by 46 papers in the map (data through 7 Oct 2026). Builds on 34 of its 74 references that are in the map. First posted on arXiv 10 Nov 2023.

Builds on

34 of 74 references.

References · 34

  1. 2020Language Models are Few-Shot Learnerscited by 32,199
  2. 2022Training language models to follow instructions with human feedbackcited by 15,712
  3. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  4. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
  5. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  6. 2021Training Verifiers to Solve Math Word Problemscited by 9,743
  7. 2021Evaluating Large Language Models Trained on Codecited by 8,053
  8. 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
  9. 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
  10. 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,579
  11. 2022Emergent Abilities of Large Language Modelscited by 2,483
  12. 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
22 more
  1. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
  2. 2022BLOOM: A 176B-Parameter Open-Access Multilingual Language Modelcited by 1,968
  3. 2019SuperGLUE: A Stickier Benchmark for General-Purpose Language Understanding Systemscited by 1,718
  4. 2018Don't Give Me the Details, Just the Summary! Topic-Aware Convolutional Neural Networks for Extreme Summarizationcited by 1,308
  5. 2023PaLM 2 Technical Reportcited by 1,154
  6. 2023Large Language Models are not Fair Evaluatorscited by 1,050
  7. 2023A Multitask, Multilingual, Multimodal Evaluation of ChatGPT on Reasoning, Hallucination, and Interactivitycited by 888
  8. 2019DROP: A Reading Comprehension Benchmark Requiring Discrete Reasoning Over Paragraphscited by 883
  9. 2022Quantifying Memorization Across Neural Language Modelscited by 755
  10. 2023The RefinedWeb Dataset for Falcon LLM: Outperforming Curated Corpora with Web Data, and Web Data Onlycited by 755
  11. 2021Deduplicating Training Data Makes Language Models Bettercited by 705
  12. 2019SAMSum Corpus: A Human-annotated Dialogue Dataset for Abstractive Summarizationcited by 530
  13. 2023Large Language Models Are Not Robust Multiple Choice Selectorscited by 454
  14. 2023Detecting Pretraining Data from Large Language Modelscited by 375
  15. 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 339
  16. 2023Proving Test Set Contamination in Black Box Language Modelscited by 227
  17. 2023Don't Make Your LLM an Evaluation Benchmark Cheatercited by 194
  18. 2023Rethinking Benchmark and Contamination for Language Models with Rephrased Samplescited by 192
  19. 2023Time Travel in LLMs: Tracing Data Contamination in Large Language Modelscited by 175
  20. 2023MeetingBank: A Benchmark Dataset for Meeting Summarizationcited by 81
  21. 2023Data Contamination Through the Lens of Timecited by 39
  22. 2023Overview of AuTexTification at IberLEF 2023: Detection and Attribution of Machine-Generated Text in Multiple Domainscited by 31

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 19; 2025: 12; 2026: 15.

46 papers.

Sort:

By area:

  1. 2024LiveBench: A Challenging, Contamination-Limited LLM Benchmarkcited by 242
  2. 2024On Memorization of Large Language Models in Logical Reasoningcited by 114
  3. 2024Benchmarking Benchmark Leakage in Large Language Modelscited by 102
  4. 2024DE-COP: Detecting Copyrighted Content in Language Models Training Datacited by 72
  5. 2024Dynamic Evaluation of Large Language Models by Meta Probing Agentscited by 54
  6. 2024SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)cited by 54
  7. 2024ConStat: Performance-Based Contamination Detection in Large Language Modelscited by 33
  8. 2024Evading Data Contamination Detection for Language Models is (too) Easycited by 30
  9. 2024Cofca: A Step-Wise Counterfactual Multi-hop QA benchmarkcited by 26
  10. 2024DARG: Dynamic Evaluation of Large Language Models via Adaptive Reasoning Graphcited by 26
  11. 2024TRUCE: Private Benchmarking to Prevent Contamination and Improve Comparative Evaluation of LLMscited by 24
  12. 2024ASR Error Correction using Large Language Modelscited by 23
34 more
  1. 2024Large Language Models are Zero-Shot Next Location Predictorscited by 22
  2. 2025Language Models May Verbatim Complete Text They Were Not Explicitly Trained Oncited by 20
  3. 2024Eureka: Evaluating and Understanding Large Foundation Modelscited by 18
  4. 2025The Emperor's New Clothes in Benchmarking? A Rigorous Examination of Mitigation Strategies for LLM Benchmark Data Contaminationcited by 13
  5. 2024A Comprehensive Survey of Contamination Detection Methods in Large Language Modelscited by 12
  6. 2024Using Large Language Models for Automated Grading of Student Writing about Sciencecited by 12
  7. 2025Confidence in Large Language Model Evaluation: A Bayesian Approach to Limited-Sample Challengescited by 7
  8. 2025BeyondBench: Contamination-Resistant Evaluation of Reasoning in Language Modelscited by 7
  9. 2024Memorization in In-Context Learningcited by 6
  10. 2025Detecting Benchmark Contamination Through Watermarkingcited by 6
  11. 2025CapBencher: Give Your LLM Benchmark a Built-in Alarm for Test-Set Overfittingcited by 6
  12. 2025None of the Others: a General Technique to Distinguish Reasoning from Memorization in Multiple-Choice LLM Evaluation Benchmarkscited by 5
  13. 2025RefineStat: Efficient Exploration for Probabilistic Program Synthesiscited by 5
  14. 2026LiveBrowseComp: Are Search Agents Searching, or Just Verifying What They Already Know?cited by 3
  15. 2024Large Language Models As MOOCs Graderscited by 2
  16. 2025LogitTrace: Detecting Benchmark Contamination via Layerwise Logit Trajectoriescited by 2
  17. 2025When Large Language Models Know the Table: A Framework for Assessing Data Contamination in Tabular Datasetscited by 2
  18. 2026K-Bench: measuring model performance on real scientific agent requestscited by 2
  19. 2024Dynamic Skill Adaptation for Large Language Modelscited by 1
  20. 2025AdEval: Alignment-based Dynamic Evaluation to Mitigate Data Contamination in Large Language Modelscited by 1
  21. 2025Breaking Memorization Barriers in LLM Code Fine-Tuning via Information Bottleneck for Improved Generalizationcited by 1
  22. 2026InfoSynth: Information-Guided Benchmark Synthesis for LLMscited by 1
  23. 2026Quantifying the Effect of Test Set Contamination on Generative Evaluationscited by 1
  24. 2026Intent Laundering: AI Safety Datasets Are Not What They Seemcited by 1
  25. 2026WARP: Weight-Space Analysis for Recovering Training Data Portfolioscited by 1
  26. 2026Scores Alone Do Not Prove Discovery: The Discovery Certification Protocol for Auditing AI Research Agentscited by 1
  27. 2026LLM Readiness Harness: Evaluation, Observability, and CI Gates for LLM/RAG Applicationscited by 0
  28. 2026CresOWLve: Benchmarking Creative Problem-Solving Over Real-World Knowledgecited by 0
  29. 2026Reasoners or Translators? Contamination-aware Evaluation and Neuro-Symbolic Robustness in Tax Lawcited by 0
  30. 2026Correcting test set contamination by spiking the training datacited by 0
  31. 2026Same Question, Different Answers: Evaluating LLM Reliability Beyond Accuracycited by 0
  32. 2026Memorization Diagnostics for Code LLMs Should be Scale-Awarecited by 0
  33. 2026Structure, Association, and Decision Value: Representation-Based Difficulty Estimation for Adaptive Inference in African-Language NLIcited by 0
  34. 2026Detecting Pretraining Data in Large Language Models from a Free-Energy Perspectivecited by 0