Pith. sign in

REVIEW 3 cited by

Exploring Memorization in Fine-tuned Language Models

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2310.06714 v2 pith:5C2X6RJZ submitted 2023-10-10 cs.AI cs.CLcs.LG

classification cs.AIcs.CLcs.LG
keywords memorizationfine-tuningtasksduringlanguagemodelsacrossdata
verification ladder T0 review T1 audit T2 compute T3 formal
0 comments
read the original abstract

Large language models (LLMs) have shown great capabilities in various tasks but also exhibited memorization of training data, raising tremendous privacy and copyright concerns. While prior works have studied memorization during pre-training, the exploration of memorization during fine-tuning is rather limited. Compared to pre-training, fine-tuning typically involves more sensitive data and diverse objectives, thus may bring distinct privacy risks and unique memorization behaviors. In this work, we conduct the first comprehensive analysis to explore language models' (LMs) memorization during fine-tuning across tasks. Our studies with open-sourced and our own fine-tuned LMs across various tasks indicate that memorization presents a strong disparity among different fine-tuning tasks. We provide an intuitive explanation of this task disparity via sparse coding theory and unveil a strong correlation between memorization and attention score distribution.

Discussion (0). Sign in to comment.

Forward citations

Cited by 3 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

  1. Tab-MIA: A Benchmark Dataset for Membership Inference Attacks on Tabular Data in LLMs

    cs.CR 2025-07 conditional novelty 6.0 of 10

    Tab-MIA shows LLMs fine-tuned on tabular data are vulnerable to membership inference attacks, with AUROC up to 97.7% after three epochs and encoding format strongly affecting leakage.

  2. Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generation

    cs.CR 2026-02 conditional novelty 5.0 of 10

    A unified benchmark comparing RAG knowledge-extraction attacks and defenses, showing query diversity boosts extraction, embedding attacks fail to transfer, and graph indexing raises per-token leakage.

  3. Too Big to Think: Capacity, Memorization, and Generalization in Pre-Trained Transformers

    cs.LG 2025-06 conditional novelty 4.0 of 10

    Capacity-limited Transformers generalize on held-out single-digit arithmetic while larger models memorize facts; joint training suppresses extrapolation in all tested sizes.

Pith tools