{"id":"https://openalex.org/W7161056394","doi":"https://doi.org/10.1007/s10994-026-07010-4","title":"Automated Membership Inference via Prompt-Based Attacks in Generative Models","display_name":"Automated Membership Inference via Prompt-Based Attacks in Generative Models","publication_year":2026,"publication_date":"2026-05-01","ids":{"openalex":"https://openalex.org/W7161056394","doi":"https://doi.org/10.1007/s10994-026-07010-4"},"language":"en","primary_location":{"id":"doi:10.1007/s10994-026-07010-4","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10994-026-07010-4","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10994-026-07010-4.pdf","source":{"id":"https://openalex.org/S62148650","display_name":"Machine Learning","issn_l":"0885-6125","issn":["0885-6125","1573-0565"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Machine Learning","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10994-026-07010-4.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5106165871","display_name":"Daniela Gallo","orcid":null},"institutions":[{"id":"https://openalex.org/I142910587","display_name":"University of Salento","ror":"https://ror.org/03fc1k060","country_code":"IT","type":"education","lineage":["https://openalex.org/I142910587"]},{"id":"https://openalex.org/I3005160176","display_name":"Institute for High Performance Computing and Networking","ror":"https://ror.org/04r5fge26","country_code":"IT","type":"facility","lineage":["https://openalex.org/I3005160176","https://openalex.org/I4210155236"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Daniela Gallo","raw_affiliation_strings":["Department of Mathematics and Physics \u201cEnnio de Giorgi\u201d, University of Salento, Via per Arnesano, Lecce, 73100, Italy","Institute for High Performance Computing and Networking, Italian National Research Council, Via P. Bucci 8-9/C, Rende, 87036, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics and Physics \u201cEnnio de Giorgi\u201d, University of Salento, Via per Arnesano, Lecce, 73100, Italy","institution_ids":["https://openalex.org/I142910587"]},{"raw_affiliation_string":"Institute for High Performance Computing and Networking, Italian National Research Council, Via P. Bucci 8-9/C, Rende, 87036, Italy","institution_ids":["https://openalex.org/I3005160176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013104931","display_name":"Angelica Liguori","orcid":"https://orcid.org/0000-0001-9402-7375"},"institutions":[{"id":"https://openalex.org/I3005160176","display_name":"Institute for High Performance Computing and Networking","ror":"https://ror.org/04r5fge26","country_code":"IT","type":"facility","lineage":["https://openalex.org/I3005160176","https://openalex.org/I4210155236"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Angelica Liguori","raw_affiliation_strings":["Institute for High Performance Computing and Networking, Italian National Research Council, Via P. Bucci 8-9/C, Rende, 87036, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for High Performance Computing and Networking, Italian National Research Council, Via P. Bucci 8-9/C, Rende, 87036, Italy","institution_ids":["https://openalex.org/I3005160176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033711683","display_name":"Ettore Ritacco","orcid":"https://orcid.org/0000-0003-3978-9291"},"institutions":[{"id":"https://openalex.org/I129043915","display_name":"University of Udine","ror":"https://ror.org/05ht0mh31","country_code":"IT","type":"education","lineage":["https://openalex.org/I129043915"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Ettore Ritacco","raw_affiliation_strings":["University of Udine, Via Palladio 8, Udine, 33100, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Udine, Via Palladio 8, Udine, 33100, Italy","institution_ids":["https://openalex.org/I129043915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082854095","display_name":"Luca Caviglione","orcid":"https://orcid.org/0000-0001-6466-3354"},"institutions":[{"id":"https://openalex.org/I4210155236","display_name":"National Research Council","ror":"https://ror.org/04zaypm56","country_code":"IT","type":"nonprofit","lineage":["https://openalex.org/I4210155236"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Luca Caviglione","raw_affiliation_strings":["Institute for Applied Mathematics and Information Technologies, Italian National Research Council, Via de Marini 6, Genova, 16149, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Applied Mathematics and Information Technologies, Italian National Research Council, Via de Marini 6, Genova, 16149, Italy","institution_ids":["https://openalex.org/I4210155236"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071731167","display_name":"Fabrizio Durante","orcid":"https://orcid.org/0000-0002-4899-1080"},"institutions":[{"id":"https://openalex.org/I142910587","display_name":"University of Salento","ror":"https://ror.org/03fc1k060","country_code":"IT","type":"education","lineage":["https://openalex.org/I142910587"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Fabrizio Durante","raw_affiliation_strings":["Department of Mathematics and Physics \u201cEnnio de Giorgi\u201d, University of Salento, Via per Arnesano, Lecce, 73100, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics and Physics \u201cEnnio de Giorgi\u201d, University of Salento, Via per Arnesano, Lecce, 73100, Italy","institution_ids":["https://openalex.org/I142910587"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004372595","display_name":"Giuseppe Manco","orcid":"https://orcid.org/0000-0001-9672-3833"},"institutions":[{"id":"https://openalex.org/I3005160176","display_name":"Institute for High Performance Computing and Networking","ror":"https://ror.org/04r5fge26","country_code":"IT","type":"facility","lineage":["https://openalex.org/I3005160176","https://openalex.org/I4210155236"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giuseppe Manco","raw_affiliation_strings":["Institute for High Performance Computing and Networking, Italian National Research Council, Via P. Bucci 8-9/C, Rende, 87036, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for High Performance Computing and Networking, Italian National Research Council, Via P. Bucci 8-9/C, Rende, 87036, Italy","institution_ids":["https://openalex.org/I3005160176"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5106165871"],"corresponding_institution_ids":["https://openalex.org/I142910587","https://openalex.org/I3005160176"],"apc_list":{"value":2390,"currency":"EUR","value_usd":2990},"apc_paid":{"value":2390,"currency":"EUR","value_usd":2990},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.58411247,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"115","issue":"5","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2702000141143799,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2702000141143799,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13702","display_name":"Machine Learning in Healthcare","score":0.07720000296831131,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14347","display_name":"Big Data and Digital Economy","score":0.052299998700618744,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7141000032424927},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.6312999725341797},{"id":"https://openalex.org/keywords/replicate","display_name":"Replicate","score":0.5866000056266785},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.51419997215271},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4959000051021576},{"id":"https://openalex.org/keywords/memorization","display_name":"Memorization","score":0.4341999888420105}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7903000116348267},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7141000032424927},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6449000239372253},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.6312999725341797},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5932999849319458},{"id":"https://openalex.org/C2781162219","wikidata":"https://www.wikidata.org/wiki/Q26250693","display_name":"Replicate","level":2,"score":0.5866000056266785},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.51419997215271},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4959000051021576},{"id":"https://openalex.org/C30038468","wikidata":"https://www.wikidata.org/wiki/Q4354775","display_name":"Memorization","level":2,"score":0.4341999888420105},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.3995000123977661},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.36649999022483826},{"id":"https://openalex.org/C190839683","wikidata":"https://www.wikidata.org/wiki/Q2448197","display_name":"Train","level":2,"score":0.34850001335144043},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.31929999589920044},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.30869999527931213},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2815999984741211},{"id":"https://openalex.org/C2779714256","wikidata":"https://www.wikidata.org/wiki/Q25305062","display_name":"Multiple Models","level":2,"score":0.28110000491142273}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s10994-026-07010-4","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10994-026-07010-4","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10994-026-07010-4.pdf","source":{"id":"https://openalex.org/S62148650","display_name":"Machine Learning","issn_l":"0885-6125","issn":["0885-6125","1573-0565"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Machine Learning","raw_type":"journal-article"},{"id":"pmh:oai:air.uniud.it:11390/1331370","is_oa":true,"landing_page_url":"https://hdl.handle.net/11390/1331370","pdf_url":null,"source":{"id":"https://openalex.org/S4306401163","display_name":"Institutional Research Information System (University of Udine)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I129043915","host_organization_name":"University of Udine","host_organization_lineage":["https://openalex.org/I129043915"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1007/s10994-026-07010-4","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10994-026-07010-4","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10994-026-07010-4.pdf","source":{"id":"https://openalex.org/S62148650","display_name":"Machine Learning","issn_l":"0885-6125","issn":["0885-6125","1573-0565"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Machine Learning","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5052093863487244,"display_name":"Decent work and economic growth","id":"https://metadata.un.org/sdg/8"}],"awards":[{"id":"https://openalex.org/G1373274450","display_name":null,"funder_award_id":"ECS00000035","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G507880695","display_name":null,"funder_award_id":"PE00000014","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320322651","display_name":"Consiglio Nazionale delle Ricerche","ror":"https://ror.org/04zaypm56"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7161056394.pdf","grobid_xml":"https://content.openalex.org/works/W7161056394.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W1564947197","https://openalex.org/W1582774210","https://openalex.org/W2004060143","https://openalex.org/W2019199024","https://openalex.org/W2043602568","https://openalex.org/W2108325777","https://openalex.org/W2535690855","https://openalex.org/W2606537796","https://openalex.org/W2908464012","https://openalex.org/W2930926105","https://openalex.org/W2963162645","https://openalex.org/W3034999214","https://openalex.org/W3071470454","https://openalex.org/W3086241558","https://openalex.org/W3093117838","https://openalex.org/W3096831136","https://openalex.org/W3112080970","https://openalex.org/W3128070592","https://openalex.org/W3135024179","https://openalex.org/W4247500441","https://openalex.org/W4283170666","https://openalex.org/W4288057780","https://openalex.org/W4312459698","https://openalex.org/W4383199672","https://openalex.org/W4384520713","https://openalex.org/W4386076098","https://openalex.org/W4386883700","https://openalex.org/W4388857114","https://openalex.org/W4389519044","https://openalex.org/W4402683760","https://openalex.org/W4405021351","https://openalex.org/W4405170900","https://openalex.org/W4405181371","https://openalex.org/W7133260402"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"The":[1],"growing":[2],"adoption":[3],"of":[4,15,73,96,104],"prompt-based":[5],"generative":[6,52],"models":[7,20],"has":[8],"raised":[9],"concerns":[10],"over":[11],"the":[12,64,74,97,101,106,131,135],"unauthorized":[13,159],"use":[14],"proprietary":[16,47,75],"data,":[17],"as":[18],"such":[19],"may":[21],"memorize":[22],"and":[23,49,85,150],"replicate":[24],"training":[25,98,105],"content.":[26],"To":[27],"address":[28],"this":[29],"issue,":[30],"we":[31,109],"introduce":[32],"ProCAP,":[33],"a":[34,42,46,50],"novel":[35],"Membership":[36],"Inference":[37],"Attack":[38],"approach":[39,127],"based":[40],"on":[41,134],"prompt-driven":[43],"auditing":[44],"framework.Given":[45],"dataset":[48],"target":[51,65],"model,":[53],"ProCAP":[54,79,142],"trains":[55],"an":[56,111],"auxiliary":[57],"model":[58,66],"to":[59,67,87,122],"craft":[60],"prompts":[61],"that":[62,114],"trigger":[63],"produce":[68],"outputs":[69],"revealing":[70],"potential":[71],"violations":[72],"data.Unlike":[76],"current":[77],"literature,":[78],"is":[80],"automatic,":[81],"fully":[82],"black-box,":[83],"model-agnostic,":[84],"designed":[86],"operate":[88],"in":[89,157],"settings":[90],"with":[91,162],"limited":[92],"or":[93],"no":[94],"knowledge":[95],"process.To":[99],"reduce":[100],"computational":[102],"cost":[103],"prompt":[107],"generator,":[108],"adopt":[110],"optimization":[112],"strategy":[113],"filters":[115],"high-loss":[116],"samples,":[117],"i.e.,":[118],"those":[119],"less":[120],"likely":[121],"have":[123],"been":[124],"memorized.":[125],"Our":[126],"can":[128],"then":[129],"\u201cspecialize\u201d":[130],"learning":[132],"phase":[133],"most":[136],"informative":[137],"data":[138,160],"regions.":[139],"We":[140],"validate":[141],"across":[143],"different":[144],"scenarios,":[145],"by":[146],"using":[147],"both":[148],"real":[149],"synthetic":[151],"data.":[152],"Results":[153],"demonstrate":[154],"its":[155],"effectiveness":[156],"recognizing":[158],"usages":[161],"strong":[163],"accuracy-efficiency":[164],"trade-offs.":[165]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-05-14T00:00:00"}