Analyzing Memorization in Large Language Models through the Lens of Model Attribution
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) are prevalent in modern applications but often memorize training data, leading to privacy breaches and copyright issues. Existing research has mainly focused on posthoc analyses, such as extracting memorized content or developing memorization metrics, without exploring the underlying architectural factors that contribute to memorization. In this work, we investigate memorization from an architectural lens by analyzing how attention modules at different layers impact its memorization and generalization performance. Using attribution techniques, we systematically intervene in the LLM architecture by bypassing attention modules at specific blocks while keeping other components like layer normalization and MLP transformations intact. We provide theorems analyzing our intervention mechanism from a mathematical view, bounding the difference in layer outputs with and without our attributions. Our theoretical and empirical analyses reveal that attention modules in deeper transformer blocks are primarily responsible for memorization, whereas earlier blocks are crucial for the models generalization and reasoning capabilities. We validate our findings through comprehensive experiments on different LLM families (Pythia and GPTNeo) and five benchmark datasets. Our insights offer a practical approach to mitigate memorization in LLMs while preserving their performance, contributing to safer and more ethical deployment in real world applications.
Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Builds on 19 of its 28 references that are in the map. First posted on arXiv 9 Jan 2025.
Builds on
19 of 28 references.
References · 19
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,818
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,346
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,734
- 2016The LAMBADA dataset: Word prediction requiring a broad discourse contextcited by 960
- 2017A Closer Look at Memorization in Deep Networkscited by 936
- 2021Deduplicating Training Data Makes Language Models Bettercited by 705
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
- 2023Physics of Language Models: Part 3.1, Knowledge Storage and Extractioncited by 264
7 more
- 2022Are Large Pre-Trained Language Models Leaking Your Personal Information?cited by 195
- 2024Physics of Language Models: Part 3.3, Knowledge Capacity Scaling Lawscited by 137
- 2024Physics of Language Models: Part 2.1, Grade-School Math and the Hidden Reasoning Processcited by 107
- 2022Do Language Models Plagiarize?cited by 72
- 2024Recite, Reconstruct, Recollect: Memorization in LMs as a Multifaceted Phenomenoncited by 30
- 2024A deeper look at depth pruning of LLMscited by 23
- 2024Quantifying Memorization and Detecting Training Data of Pre-trained Language Models using Japanese Newspapercited by 2
Built on by
Citing papers per year: 2025: 8; 2026: 6.
14 papers.
Sort:
By area:
- 2025ReLearn: Unlearning via Learning for Large Language Modelscited by 20
- 2025The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigationcited by 9
- 2026When Benchmarks Leak: Inference-Time Decontamination for LLMscited by 5
- 2025Realizing LLMs' Causal Potential Requires Science-Grounded, Novel Benchmarkscited by 4
- 2026Auditing Language Model Unlearning via Information Decompositioncited by 3
- 2026Caliper: Probing Lexical Anchors versus Causal Structure in LLMscited by 2
- 2025Evaluating book summaries from internal knowledge in Large Language Models: a cross-model and semantic consistency approachcited by 1
- 2025Guess or Recall? Training CNNs to Classify and Localize Memorization in LLMscited by 1
- 2025CLaw: Benchmarking Chinese Legal Knowledge in Large Language Models - A Fine-grained Corpus and Reasoning Analysiscited by 1
- 2025From Memorization to Reasoning in the Spectrum of Loss Curvaturecited by 1
- 2026LLMs Can Leak Training Data But Do They Want To? A Propensity-Aware Evaluation of Memorization in LLMscited by 1
- 2025Beyond Frequency: The Role of Redundancy in Large Language Model Memorizationcited by 0
2 more
- 2026Where Grokking Happens: Distributed Utility and Fourier Recoding Without a Module Switch29 Jul 2026
- 2026LLMs Can Leak Training Data But Do They Want To? A Propensity-Aware Evaluation of Memorization in LLMs4 Jun 2026
- 2026Caliper: Probing Lexical Anchors versus Causal Structure in LLMs3 Jun 2026
- 2026Metaphor Is Not All Attention Needs12 May 2026
- 2026When Benchmarks Leak: Inference-Time Decontamination for LLMs27 Jan 2026
- 2026Auditing Language Model Unlearning via Information Decomposition21 Jan 2026
- 2025From Memorization to Reasoning in the Spectrum of Loss Curvature28 Oct 2025
- 2025Realizing LLMs' Causal Potential Requires Science-Grounded, Novel Benchmarks18 Oct 2025
- 2025CLaw: Benchmarking Chinese Legal Knowledge in Large Language Models - A Fine-grained Corpus and Reasoning Analysis25 Sep 2025
- 2025Guess or Recall? Training CNNs to Classify and Localize Memorization in LLMs4 Aug 2025
- 2025The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation8 Jul 2025
- 2025Beyond Frequency: The Role of Redundancy in Large Language Model Memorization14 Jun 2025
- 2026Metaphor Is Not All Attention Needs12 May 2026
- 2026Auditing Language Model Unlearning via Information Decomposition21 Jan 2026
- 2025The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation8 Jul 2025
- 2025ReLearn: Unlearning via Learning for Large Language Models16 Feb 2025
- 2026When Benchmarks Leak: Inference-Time Decontamination for LLMscited by 5
- 2025Realizing LLMs' Causal Potential Requires Science-Grounded, Novel Benchmarkscited by 4
- 2025Evaluating book summaries from internal knowledge in Large Language Models: a cross-model and semantic consistency approachcited by 1
- 2025Guess or Recall? Training CNNs to Classify and Localize Memorization in LLMscited by 1
- 2026LLMs Can Leak Training Data But Do They Want To? A Propensity-Aware Evaluation of Memorization in LLMscited by 1
- 2025Beyond Frequency: The Role of Redundancy in Large Language Model Memorizationcited by 0
- 2026Where Grokking Happens: Distributed Utility and Fourier Recoding Without a Module Switchcited by 0
- 2026Where Grokking Happens: Distributed Utility and Fourier Recoding Without a Module Switch29 Jul 2026
- 2026LLMs Can Leak Training Data But Do They Want To? A Propensity-Aware Evaluation of Memorization in LLMs4 Jun 2026
- 2026When Benchmarks Leak: Inference-Time Decontamination for LLMs27 Jan 2026
- 2025Realizing LLMs' Causal Potential Requires Science-Grounded, Novel Benchmarks18 Oct 2025
- 2025Guess or Recall? Training CNNs to Classify and Localize Memorization in LLMs4 Aug 2025
- 2025Beyond Frequency: The Role of Redundancy in Large Language Model Memorization14 Jun 2025
- 2025Evaluating book summaries from internal knowledge in Large Language Models: a cross-model and semantic consistency approach27 Mar 2025
Similar, not cited
Close in wording, no citation either way
- 2024Generalization v.s. Memorization: Tracing Language Models' Capabilities Back to Pretraining Data
- 2025Too Big to Think: Capacity, Memorization, and Generalization in Pre-Trained Transformers
- 2023SoK: Memorization in General-Purpose Large Language Models
- 2024Undesirable Memorization in Large Language Models: A Survey
- 2025Shared Path: Unraveling Memorization in Multilingual LLMs through Language Similarities
- 2024On Memorization of Large Language Models in Logical Reasoning
- 2024The Mosaic Memory of Large Language Models
- 2024Rethinking LLM Memorization through the Lens of Adversarial Compression