LLMs as Linguistic Chameleons: Decoupling Semantics and Structure for Privacy-Preserving Communication
Not on the map. Why?
Abstract (arXiv)
As Large Language Model (LLM) APIs become increasingly integrated into privacy-sensitive workflows, ensuring inference-time privacy without compromising task utility remains a major challenge. Existing approaches preserve most of the original semantic content to maintain downstream performance, but this also leaves exploitable cues for reconstructing the original text. This work investigates semantic decoupling, which replaces original semantics with alternative content while preserving the structure needed for LLM reasoning. Based on this idea, we propose CROSS-MAP, a bidirectional framework that maps private inputs into a different semantic domain before inference and recovers the corresponding outputs afterward. Local models are trained with multi-objective optimization to maximize semantic divergence in the mapping stage while minimizing semantic inconsistency in the recovery stage. Experiments show that CROSS-MAP reduces reconstruction success across multiple attack settings while outperforming existing baselines in utility.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 28 of its 48 references that are in the map. First posted on arXiv 19 Sep 2026.
Builds on
28 of 48 references.
References · 28
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,148
- 2016Deep Learning with Differential Privacycited by 2,728
- 2017The NarrativeQA Reading Comprehension Challengecited by 597
- 2020COGS: A Compositional Generalization Challenge Based on Semantic Interpretationcited by 263
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2022The Text Anonymization Benchmark (TAB): A Dedicated Corpus and Evaluation Framework for Text Anonymizationcited by 95
- 2021Differential Privacy for Text Analytics via Natural Text Sanitizationcited by 77
- 2022MPCFormer: fast, performant and private Transformer inference with MPCcited by 69
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
- 2023DP-OPT: Make Large Language Model Your Privacy-Preserving Prompt Engineercited by 57
- 2024PAPILLON: Privacy Preservation from Internet-based and Local Language Model Ensemblescited by 57
16 more
- 2022A Customized Text Sanitization Mechanism with Differential Privacycited by 52
- 2017A4NT: Author Attribute Anonymity by Adversarial Training of Neural Machine Translationcited by 42
- 2023Hide and Seek (HaS): A Lightweight Framework for Prompt Privacy Protectioncited by 38
- 2024A Synthetic Dataset for Personal Attribute Inferencecited by 36
- 2023Protecting User Privacy in Remote Conversational Systems: A Privacy-Preserving framework based on text sanitizationcited by 23
- 2024IncogniText: Privacy-enhancing Conditional Text Anonymization via LLM-based Private Attribute Randomizationcited by 23
- 2023SLOG: A Structural Generalization Benchmark for Semantic Parsingcited by 22
- 2024Large Language Models are Advanced Anonymizerscited by 22
- 2024Differentially Private Knowledge Distillation via Synthetic Text Generationcited by 18
- 2024The Fire Thief Is Also the Keeper: Balancing Usability and Privacy in Promptscited by 13
- 2024On the Vulnerability of Text Sanitizationcited by 9
- 2024Ditto: Quantization-aware Secure Inference of Transformers upon MPCcited by 8
- 2024Truthful Text Sanitization Guided by Inference Attackscited by 8
- 2023Investigating the Utility of Surprisal from Large Language Models for Speech Synthesis Prosodycited by 4
- 2025RewardDS: Privacy-Preserving Fine-Tuning for Large Language Models via Reward Driven Data Synthesiscited by 3
- 2024A Framework for Cost-Effective and Self-Adaptive LLM Shaking and Recovery Mechanismcited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025A Survey on Privacy Risks and Protection in Large Language Models
- 2025SoK: Semantic Privacy in Large Language Models
- 2024PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restoration
- 2024Privacy-Preserving Large Language Models: Mechanisms, Applications, and Future Directions
- 2026LLM-Redactor: An Empirical Evaluation of Eight Techniques for Privacy-Preserving LLM Requests
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theory
- 2026Privacy-Preserving RAG via Multi-Agent Semantic Rewriting: Achieving Confidentiality Without Compromising Contextual Fidelity
- 2024Preserving Privacy in Large Language Models: A Survey on Current Threats and Solutions