mlsanityData to 14 Oct 2026

Detecting Pretraining Data in Large Language Models from a Free-Energy Perspective

arXiv 2609.21888 ↗First posted 18 Sep 2026cs.LG cs.AI cs.CLcited by 0

Not on the map. Why?

Abstract (arXiv)

Detecting pretraining data in large language models is challenging because high likelihood can reflect either training exposure or strong generalization. In the joint space of prediction loss and predictive entropy, a likelihood-only detector uses a horizontal boundary and can mistake predictable non-members for members. Motivated by this, we introduce an inclined boundary that evaluates prediction loss relative to predictive entropy. Our analysis shows that entropy correction can preserve the expected membership signal while reducing its variance, thereby improving standardized member--non-member separation. We further extend the mean--variance analysis to the more general setting with a nonzero mean entropy gap. Interestingly, this entropy-adjusted score admits a Helmholtz free-energy interpretation, leading to Energy Transfer Detection (ETD), which views pretraining data detection from a macroscopic residual free-energy transfer perspective. Extensive experiments show that ETD achieves the best average detection performance, improving average AUROC by up to 3.5% and TPR@5%FPR by up to 5.1%, while remaining robust across diverse settings.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 39 of its 54 references that are in the map. First posted on arXiv 18 Sep 2026.

Builds on

39 of 54 references.

References · 39

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2020Scaling Laws for Neural Language Modelscited by 6,586
  3. 2023Mamba: Linear-Time Sequence Modeling with Selective State Spacescited by 4,718
  4. 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
  5. 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
  6. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  7. 2020Extracting Training Data from Large Language Modelscited by 2,189
  8. 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
  9. 2021Membership Inference Attacks From First Principlescited by 878
  10. 2022Quantifying Memorization Across Neural Language Modelscited by 763
  11. 2022GPT-NeoX-20B: An Open-Source Autoregressive Language Modelcited by 713
  12. 2023Detecting Pretraining Data from Large Language Modelscited by 387
27 more
  1. 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 314
  2. 2019White-box vs Black-box: Bayes Optimal Strategies for Membership Inferencecited by 271
  3. 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 258
  4. 2024Do Membership Inference Attacks Work on Large Language Models?cited by 195
  5. 2023Time Travel in LLMs: Tracing Data Contamination in Large Language Modelscited by 177
  6. 2021On the Importance of Difficulty Calibration in Membership Inference Attackscited by 147
  7. 2018Sharp Nearby, Fuzzy Far Away: How Neural Language Models Use Contextcited by 113
  8. 2023Task Contamination: Language Models May Not Be Few-Shot Anymorecited by 99
  9. 2024Generalization v.s. Memorization: Tracing Language Models' Capabilities Back to Pretraining Datacited by 85
  10. 2024ReCaLL: Membership Inference via Relative Conditional Log-Likelihoodscited by 64
  11. 2023Did the Neurons Read your Book? Document-level Membership Inference for Large Language Modelscited by 56
  12. 2024Pretraining Data Detection for Large Language Models: A Divergence-based Calibration Methodcited by 55
  13. 2023Data Contamination Quiz: A Tool to Detect and Estimate Contamination in Large Language Modelscited by 47
  14. 2022Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queriescited by 40
  15. 2024Copyright Traps for Large Language Modelscited by 37
  16. 2023Position: AI Evaluation Should Learn from How We Test Humanscited by 36
  17. 2025A Survey on Data Contamination for Large Language Modelscited by 35
  18. 2024Data Contamination Can Cross Language Barrierscited by 26
  19. 2024Probing Language Models for Pre-training Data Detectioncited by 25
  20. 2024Data Contamination Calibration for Black-box LLMscited by 24
  21. 2026Extracting books from production language modelscited by 17
  22. 2024Measuring Non-Adversarial Reproduction of Training Data in Large Language Modelscited by 14
  23. 2024The Mosaic Memory of Large Language Modelscited by 10
  24. 2025On The Fragility of Benchmark Contamination Detection in Reasoning Modelscited by 9
  25. 2026When Benchmarks Leak: Inference-Time Decontamination for LLMscited by 5
  26. 2025Beyond Public Access in LLM Pre-Training Datacited by 3
  27. 2026Tracing the Data Trail: A Survey of Data Provenance, Transparency and Traceability in LLMscited by 3

Built on by

Not cited yet.