Pith. sign in

REVIEW 4 cited by

Noisy Neighbors: Efficient membership inference attacks against LLMs

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2406.16565 v1 pith:4DZXMNG7 submitted 2024-06-24 cs.CR cs.LG

classification cs.CRcs.LG
keywords privacyinferencellmsattacksauditingefficientmembershipmodels
verification ladder T0 review T1 audit T2 compute T3 formal
0 comments
read the original abstract

The potential of transformer-based LLMs risks being hindered by privacy concerns due to their reliance on extensive datasets, possibly including sensitive information. Regulatory measures like GDPR and CCPA call for using robust auditing tools to address potential privacy issues, with Membership Inference Attacks (MIA) being the primary method for assessing LLMs' privacy risks. Differently from traditional MIA approaches, often requiring computationally intensive training of additional models, this paper introduces an efficient methodology that generates \textit{noisy neighbors} for a target sample by adding stochastic noise in the embedding space, requiring operating the target model in inference mode only. Our findings demonstrate that this approach closely matches the effectiveness of employing shadow models, showing its usability in practical privacy auditing scenarios.

Discussion (0). Sign in to comment.

Forward citations

Cited by 4 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

  1. LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems

    cs.CR 2025-09 conditional novelty 6.0 of 10

    A systematic review that categorizes LLM threats, severity scores, and mitigations across development and operation life cycles and multiple deployment scenarios.

  2. ISACL: Internal State Analyzer for Copyrighted Training Data Leakage

    cs.CL 2025-08 conditional novelty 5.0 of 10

    An MLP trained on LLM internal states predicts Rouge-L-defined literal copying leakage with high accuracy, but not paraphrase-level leakage.

  3. SoK: Semantic Privacy in Large Language Models

    cs.CR 2025-06 conditional novelty 4.0 of 10

    A systematization of knowledge arguing that LLM privacy threats extend beyond data leakage to semantically inferred attributes, and that current defenses only partially address them.

  4. A Survey: Towards Privacy and Security in Mobile Large Language Models

    cs.CR 2025-09 conditional

    A survey of privacy and security challenges for mobile large language models, summarizing known attack types and defenses without introducing new results.

Pith tools