Search papers, labs, and topics across Lattice.
This paper investigates entity-level membership inference in large language models (LLMs), highlighting their potential to reveal knowledge about real-world entities through scattered mentions rather than verbatim memorization. The authors formalize the task under specific constraints and propose five interrogation strategies that leverage limited entity clues to generate prompts and infer membership from the model's responses. Experimental results demonstrate that these methods significantly outperform existing sample-level approaches, achieving an AUC of up to 0.97 and improving Balanced Accuracy by 6.0% to 17.5%.
LLMs can expose sensitive entity-related information through subtle interrogations, achieving up to 97% accuracy in membership inference.
Large Language Models (LLMs) raise growing concerns about privacy leakage and copyright compliance. Membership inference is a key tool for assessing such risks, but existing studies mainly focus on whether specific samples or sample-based data units are used for training. We argue that LLMs exhibit a human-memory-like behavior: an LLM may not memorize a specific sample verbatim, yet it can accumulate and reveal knowledge about a real-world entity from scattered mentions. This analogy motivates us to examine whether an LLM can be interrogated like a human interviewee to reveal its exposure to entity-related information. Motivated by this question, we propose entity-level membership inference, which determines whether information related to a target entity is used in LLM training. We study this task in the practical label-only black-box setting, where only generated texts are observable. We formalize the task under clue, input, and model constraints, establish the necessary and sufficient conditions for its feasibility, and instantiate five interrogation strategies based on this formalization. The strategies use limited entity clues to construct prompts, elicit entity-related responses, and infer membership from semantic features among the generated texts. We construct entity-level datasets and adapt state-of-the-art sample-level label-only methods to the entity-level setting as baselines. Experiments on person entities show that our methods achieve AUC up to 0.97 and bring gains of 6.0%--17.5% in Balanced Accuracy over the best adapted baseline.
