mlsanityData to 14 Oct 2026

TracLLM: A Generic Framework for Attributing Long Context LLMs

arXiv 2506.04202 ↗First posted 4 Jun 2025cs.CR cs.AI cs.LGcited by 13

Not on the map. Why?

Abstract (arXiv)

Long context large language models (LLMs) are deployed in many real-world applications such as RAG, agent, and broad LLM-integrated applications. Given an instruction and a long context (e.g., documents, PDF files, webpages), a long context LLM can generate an output grounded in the provided context, aiming to provide more accurate, up-to-date, and verifiable outputs while reducing hallucinations and unsupported claims. This raises a research question: how to pinpoint the texts (e.g., sentences, passages, or paragraphs) in the context that contribute most to or are responsible for the generated output by an LLM? This process, which we call context traceback, has various real-world applications, such as 1) debugging LLM-based systems, 2) conducting post-attack forensic analysis for attacks (e.g., prompt injection attack, knowledge corruption attacks) to an LLM, and 3) highlighting knowledge sources to enhance the trust of users towards outputs generated by LLMs. When applied to context traceback for long context LLMs, existing feature attribution methods such as Shapley have sub-optimal performance and/or incur a large computational cost. In this work, we develop TracLLM, the first generic context traceback framework tailored to long context LLMs. Our framework can improve the effectiveness and efficiency of existing feature attribution methods. To improve the efficiency, we develop an informed search based algorithm in TracLLM. We also develop contribution score ensemble/denoising techniques to improve the accuracy of TracLLM. Our evaluation results show TracLLM can effectively identify texts in a long context that lead to the output of an LLM. Our code and data are at: https://github.com/Wang-Yanting/TracLLM.

Key facts. Cited by 13 papers in the map (data through 14 Oct 2026). Builds on 53 of its 69 references that are in the map. First posted on arXiv 4 Jun 2025.

Builds on

53 of 69 references.

References · 53

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
  4. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
  5. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
  6. 2017A Unified Approach to Interpreting Model Predictionscited by 6,555
  7. 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
  8. 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,824
  9. 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,754
  10. 2017Axiomatic Attribution for Deep Networkscited by 3,384
  11. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  12. 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
38 more
  1. 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,745
  2. 2016MS MARCO: A Human Generated MAchine Reading COmprehension Datasetcited by 1,605
  3. 2017Learning Important Features Through Propagating Activation Differencescited by 1,458
  4. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
  5. 2023LongBench: A Bilingual, Multitask Benchmark for Long Context Understandingcited by 1,417
  6. 2023FActScore: Fine-grained Atomic Evaluation of Factual Precision in Long Form Text Generationcited by 1,282
  7. 2021MuSiQue: Multihop Questions via Single-hop Question Compositioncited by 916
  8. 2018RISE: Randomized Input Sampling for Explanation of Black-box Modelscited by 838
  9. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
  10. 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 785
  11. 2017The NarrativeQA Reading Comprehension Challengecited by 597
  12. 2023Enabling Large Language Models to Generate Text with Citationscited by 595
  13. 2020Estimating Training Data Influence by Tracing Gradient Descentcited by 580
  14. 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Basescited by 429
  15. 2021QMSum: A New Benchmark for Query-based Multi-domain Meeting Summarizationcited by 365
  16. 2023Formalizing and Benchmarking Prompt Injection Attacks and Defensescited by 364
  17. 2023Explainability for Large Language Models: A Surveycited by 333
  18. 2024PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Modelscited by 267
  19. 2020Explaining by Removing: A Unified Framework for Model Explanationcited by 218
  20. 2023Poisoning Retrieval Corpora by Injecting Adversarial Passagescited by 159
  21. 2024Long-form factuality in large language modelscited by 155
  22. 2024Certifiably Robust RAG against Retrieval Corruptioncited by 151
  23. 2023On the Risk of Misinformation Pollution with Large Language Modelscited by 128
  24. 2024Long-Context LLMs Meet RAG: Overcoming Challenges for Long Inputs in RAGcited by 123
  25. 2024Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documentscited by 102
  26. 2024ContextCite: Attributing Model Generation to Contextcited by 98
  27. 2024BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Modelscited by 86
  28. 2024Neural Exec: Learning (and Learning from) Execution Triggers for Prompt Injection Attackscited by 85
  29. 2024Reliable, Adaptable, and Attributable Language Models with Retrievalcited by 73
  30. 2022Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examplescited by 69
  31. 2024TrojanRAG: Retrieval-Augmented Generation Can Be Backdoor Driver in Large Language Modelscited by 67
  32. 2024Phantom: General Backdoor Attacks on Retrieval Augmented Language Generationcited by 49
  33. 2022Synthetic Disinformation Attacks on Automated Fact Verification Systemscited by 44
  34. 2021Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networkscited by 40
  35. 2024Gradient based Feature Attribution in Explainable AI: A Technical Reviewcited by 34
  36. 2023Using Captum to Explain Generative Language Modelscited by 33
  37. 2024Long Context RAG Performance of Large Language Modelscited by 23
  38. 2023TextGenSHAP: Scalable Post-hoc Explanations in Text Generation with Long Documentscited by 17

50 most cited of 53 All 53 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 11.

13 papers.

Sort:

By area:

Similar, not cited

Close in wording, no citation either way

  1. 2025AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption
  2. 2024An Effective Framework to Help Large Language Models Handle Numeric-involved Long-context Tasks
  3. 2024A RAG Method for Source Code Inquiry Tailored to Long-Context LLMs
  4. 2024L-CiteEval: Do Long-Context Models Truly Leverage Context for Responding?
  5. 2025LongSafety: Evaluating Long-Context Safety of Large Language Models
  6. 2025Can LLMs reason over extended multilingual contexts? Towards long-context evaluation beyond retrieval and haystacks
  7. 2024LongSafety: Enhance Safety for Long-Context LLMs
  8. 2026Gavel: Agent Meets Checklist for Evaluating LLMs on Long-Context Legal Summarization