MC-PDD: Masked Corpus-Level Pretraining Data Detection for Black-Box Large Language Models
Not on the map. Why?
Abstract (arXiv)
Pretraining is fundamental to the development of Large Language Models (LLMs), yet the opacity of pretraining data complicates model analysis and raises ethical, legal, and fairness concerns. Detecting whether specific datasets were used during pretraining is, therefore, critical. Existing state-of-the-art methods typically rely on access to model probability distributions, making them unsuitable for closed-source LLMs that provide only input-output interfaces. To address this limitation, we introduce Masked Corpus-level Pretraining Data Detection (MC-PDD), a novel method inspired by the masked language modeling paradigm. MC-PDD masks highly specific tokens in each text and prompts the LLM to predict the missing content. It then assesses whether the difference in prediction hit rates between a candidate corpus and a reference non-member corpus is statistically significant. Based on this comparison, MC-PDD determines whether the candidate texts were likely included in the model's pretraining data. Experimental results demonstrate clear and consistent differences in prediction hit rates between pretrained and unseen data across three datasets, for both open-source and closed-source LLMs. Despite operating under a stricter black-box setting, MC-PDD achieves performance comparable to existing detection methods. Our approach enables practical applications such as model auditing and data copyright verification using only standard API access. Upon acceptance, we will publicly release the code and datasets.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 35 of its 42 references that are in the map. First posted on arXiv 6 Jun 2026.
Builds on
35 of 42 references.
References · 35
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,224
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2022GPT-NeoX-20B: An Open-Source Autoregressive Language Modelcited by 713
- 2024OLMo: Accelerating the Science of Language Modelscited by 613
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
23 more
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
- 2023How Good Are GPT Models at Machine Translation? A Comprehensive Evaluationcited by 348
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 258
- 2022Data Contamination: From Memorization to Exploitationcited by 236
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 230
- 2020Membership Leakage in Label-Only Exposurescited by 168
- 2023Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-4cited by 125
- 2024Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Modelscited by 103
- 2023Is ChatGPT a Highly Fluent Grammatical Error Correction System? A Comprehensive Evaluationcited by 97
- 2020Quantifying Privacy Leakage in Graph Embeddingcited by 82
- 2019Membership Inference Attacks on Sequence-to-Sequence Models: Is My Data In Your Machine Translation System?cited by 71
- 2022Recovering Private Text in Federated Learning of Language Modelscited by 70
- 2025Can We Trust AI Benchmarks? An Interdisciplinary Review of Current Issues in AI Evaluationcited by 60
- 2023LatestEval: Addressing Data Contamination in Language Model Evaluation through Dynamic and Time-Sensitive Test Constructioncited by 58
- 2024Pretraining Data Detection for Large Language Models: A Divergence-based Calibration Methodcited by 55
- 2021Membership Inference Attack Susceptibility of Clinical Language Modelscited by 52
- 2023Exploring Effectiveness of GPT-3 in Grammatical Error Correction: A Study on Performance and Controllability in Prompt-Based Methodscited by 37
- 2023A Preliminary Evaluation of ChatGPT for Zero-shot Dialogue Understandingcited by 31
- 2023Advancing Differential Privacy: Where We Are Now and Future Directions for Real-World Deploymentcited by 27
- 2025How Contaminated Is Your Benchmark? Quantifying Dataset Leakage in Large Language Models with Kernel Divergencecited by 15
- 2024Towards Black-Box Membership Inference Attack for Diffusion Modelscited by 14
- 2024PaCoST: Paired Confidence Significance Testing for Benchmark Contamination Detection in Large Language Modelscited by 6
- 2024LLMCL-GEC: Advancing Grammatical Error Correction with LLM-Driven Curriculum Learningcited by 5
Built on by
Not cited yet.