Gap-K%: Measuring Top-1 Prediction Gap for Detecting Pretraining Data
Not on the map. Why?
Abstract (arXiv)
The opacity of massive pretraining corpora in Large Language Models (LLMs) raises significant privacy and copyright concerns, making pretraining data detection a critical challenge. Existing state-of-the-art methods typically rely on token likelihoods, yet they often overlook the gap between the target token and the model's top-1 prediction, as well as local correlations between adjacent tokens. In this work, we propose Gap-K%, a novel pretraining data detection method grounded in the optimization dynamics of LLM pretraining. By analyzing the next-token prediction objective, we observe that discrepancies between the model's top-1 prediction and the target token induce strong gradient signals, which are explicitly penalized during training. Motivated by this, Gap-K% leverages the log probability gap between the top-1 predicted token and the target token, incorporating a sliding window strategy to capture local correlations and mitigate token-level fluctuations. Extensive experiments on the WikiMIA and MIMIR benchmarks demonstrate that Gap-K% achieves state-of-the-art performance, consistently outperforming prior baselines across various model sizes and input lengths.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 12 of its 18 references that are in the map. First posted on arXiv 16 Jan 2026.
Builds on
12 of 18 references.
References · 12
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Mamba: Linear-Time Sequence Modeling with Selective State Spacescited by 4,718
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 429
- 2023Analyzing Leakage of Personally Identifiable Information in Language Modelscited by 285
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 258
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 230
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 175
- 2023Privacy Auditing with One (1) Training Runcited by 123
- 2024DE-COP: Detecting Copyrighted Content in Language Models Training Datacited by 74
Built on by
Citing papers per year: 2026: 1.
1 paper.