{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:GMIQHUIWP4K52TWIJ4YNRMBWM4","short_pith_number":"pith:GMIQHUIW","schema_version":"1.0","canonical_sha256":"331103d1167f15dd4ec84f30d8b036672cbe6aaca6b0f9191b9e6ca4288de195","source":{"kind":"arxiv","id":"2506.05126","version":1},"attestation_state":"computed","paper":{"title":"Membership Inference Attacks on Sequence Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Florian Tram\\`er, Jie Zhang, Lorenzo Rossi, Michael Aerni","submitted_at":"2025-06-05T15:13:57Z","abstract_excerpt":"Sequence models, such as Large Language Models (LLMs) and autoregressive image generators, have a tendency to memorize and inadvertently leak sensitive information. While this tendency has critical legal implications, existing tools are insufficient to audit the resulting risks. We hypothesize that those tools' shortcomings are due to mismatched assumptions. Thus, we argue that effectively measuring privacy leakage in sequence models requires leveraging the correlations inherent in sequential generation. To illustrate this, we adapt a state-of-the-art membership inference attack to explicitly "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2506.05126","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-05T15:13:57Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f63734619550956d83a3bcab2b7a9c69df85eada1b326b7210963c2a14a52fbc","abstract_canon_sha256":"985b29be04e91a4aaae70d71c1643a77d7a681211f542a25ea3bd83804a1c622"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:16:42.868871Z","signature_b64":"Ob/fFtgxIJkahGVIMkfH3kks9ywi3qiXCtrfx/UvMTOPmQwIiZRc/d95wFNqtIV89NRugHuSp7RZwnlOv75+Ag==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"331103d1167f15dd4ec84f30d8b036672cbe6aaca6b0f9191b9e6ca4288de195","last_reissued_at":"2026-07-05T11:16:42.868289Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:16:42.868289Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Membership Inference Attacks on Sequence Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Florian Tram\\`er, Jie Zhang, Lorenzo Rossi, Michael Aerni","submitted_at":"2025-06-05T15:13:57Z","abstract_excerpt":"Sequence models, such as Large Language Models (LLMs) and autoregressive image generators, have a tendency to memorize and inadvertently leak sensitive information. While this tendency has critical legal implications, existing tools are insufficient to audit the resulting risks. We hypothesize that those tools' shortcomings are due to mismatched assumptions. Thus, we argue that effectively measuring privacy leakage in sequence models requires leveraging the correlations inherent in sequential generation. To illustrate this, we adapt a state-of-the-art membership inference attack to explicitly "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.05126","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.05126/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2506.05126","created_at":"2026-07-05T11:16:42.868381+00:00"},{"alias_kind":"arxiv_version","alias_value":"2506.05126v1","created_at":"2026-07-05T11:16:42.868381+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.05126","created_at":"2026-07-05T11:16:42.868381+00:00"},{"alias_kind":"pith_short_12","alias_value":"GMIQHUIWP4K5","created_at":"2026-07-05T11:16:42.868381+00:00"},{"alias_kind":"pith_short_16","alias_value":"GMIQHUIWP4K52TWI","created_at":"2026-07-05T11:16:42.868381+00:00"},{"alias_kind":"pith_short_8","alias_value":"GMIQHUIW","created_at":"2026-07-05T11:16:42.868381+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/GMIQHUIWP4K52TWIJ4YNRMBWM4","json":"https://pith.science/pith/GMIQHUIWP4K52TWIJ4YNRMBWM4.json","graph_json":"https://pith.science/api/pith-number/GMIQHUIWP4K52TWIJ4YNRMBWM4/graph.json","events_json":"https://pith.science/api/pith-number/GMIQHUIWP4K52TWIJ4YNRMBWM4/events.json","paper":"https://pith.science/paper/GMIQHUIW"},"agent_actions":{"view_html":"https://pith.science/pith/GMIQHUIWP4K52TWIJ4YNRMBWM4","download_json":"https://pith.science/pith/GMIQHUIWP4K52TWIJ4YNRMBWM4.json","view_paper":"https://pith.science/paper/GMIQHUIW","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2506.05126&json=true","fetch_graph":"https://pith.science/api/pith-number/GMIQHUIWP4K52TWIJ4YNRMBWM4/graph.json","fetch_events":"https://pith.science/api/pith-number/GMIQHUIWP4K52TWIJ4YNRMBWM4/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/GMIQHUIWP4K52TWIJ4YNRMBWM4/action/timestamp_anchor","attest_storage":"https://pith.science/pith/GMIQHUIWP4K52TWIJ4YNRMBWM4/action/storage_attestation","attest_author":"https://pith.science/pith/GMIQHUIWP4K52TWIJ4YNRMBWM4/action/author_attestation","sign_citation":"https://pith.science/pith/GMIQHUIWP4K52TWIJ4YNRMBWM4/action/citation_signature","submit_replication":"https://pith.science/pith/GMIQHUIWP4K52TWIJ4YNRMBWM4/action/replication_record"}},"created_at":"2026-07-05T11:16:42.868381+00:00","updated_at":"2026-07-05T11:16:42.868381+00:00"}