Detecting Pretraining Data in Large Language Models from a Free-Energy Perspective
Not on the map. Why?
Abstract (arXiv)
Detecting pretraining data in large language models is challenging because high likelihood can reflect either training exposure or strong generalization. In the joint space of prediction loss and predictive entropy, a likelihood-only detector uses a horizontal boundary and can mistake predictable non-members for members. Motivated by this, we introduce an inclined boundary that evaluates prediction loss relative to predictive entropy. Our analysis shows that entropy correction can preserve the expected membership signal while reducing its variance, thereby improving standardized member--non-member separation. We further extend the mean--variance analysis to the more general setting with a nonzero mean entropy gap. Interestingly, this entropy-adjusted score admits a Helmholtz free-energy interpretation, leading to Energy Transfer Detection (ETD), which views pretraining data detection from a macroscopic residual free-energy transfer perspective. Extensive experiments show that ETD achieves the best average detection performance, improving average AUROC by up to 3.5% and TPR@5%FPR by up to 5.1%, while remaining robust across diverse settings.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 39 of its 54 references that are in the map. First posted on arXiv 18 Sep 2026.
Builds on
39 of 54 references.
References · 39
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2020Scaling Laws for Neural Language Modelscited by 6,586
- 2023Mamba: Linear-Time Sequence Modeling with Selective State Spacescited by 4,718
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2021Membership Inference Attacks From First Principlescited by 878
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2022GPT-NeoX-20B: An Open-Source Autoregressive Language Modelcited by 713
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
27 more
- 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 314
- 2019White-box vs Black-box: Bayes Optimal Strategies for Membership Inferencecited by 271
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 258
- 2024Do Membership Inference Attacks Work on Large Language Models?cited by 195
- 2023Time Travel in LLMs: Tracing Data Contamination in Large Language Modelscited by 177
- 2021On the Importance of Difficulty Calibration in Membership Inference Attackscited by 147
- 2018Sharp Nearby, Fuzzy Far Away: How Neural Language Models Use Contextcited by 113
- 2023Task Contamination: Language Models May Not Be Few-Shot Anymorecited by 99
- 2024Generalization v.s. Memorization: Tracing Language Models' Capabilities Back to Pretraining Datacited by 85
- 2024ReCaLL: Membership Inference via Relative Conditional Log-Likelihoodscited by 64
- 2023Did the Neurons Read your Book? Document-level Membership Inference for Large Language Modelscited by 56
- 2024Pretraining Data Detection for Large Language Models: A Divergence-based Calibration Methodcited by 55
- 2023Data Contamination Quiz: A Tool to Detect and Estimate Contamination in Large Language Modelscited by 47
- 2022Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queriescited by 40
- 2024Copyright Traps for Large Language Modelscited by 37
- 2023Position: AI Evaluation Should Learn from How We Test Humanscited by 36
- 2025A Survey on Data Contamination for Large Language Modelscited by 35
- 2024Data Contamination Can Cross Language Barrierscited by 26
- 2024Probing Language Models for Pre-training Data Detectioncited by 25
- 2024Data Contamination Calibration for Black-box LLMscited by 24
- 2026Extracting books from production language modelscited by 17
- 2024Measuring Non-Adversarial Reproduction of Training Data in Large Language Modelscited by 14
- 2024The Mosaic Memory of Large Language Modelscited by 10
- 2025On The Fragility of Benchmark Contamination Detection in Reasoning Modelscited by 9
- 2026When Benchmarks Leak: Inference-Time Decontamination for LLMscited by 5
- 2025Beyond Public Access in LLM Pre-Training Datacited by 3
- 2026Tracing the Data Trail: A Survey of Data Provenance, Transparency and Traceability in LLMscited by 3
Built on by
Not cited yet.