{"id":"https://openalex.org/W7133359708","doi":"https://doi.org/10.1109/tps-isa67132.2025.00061","title":"Exploring Membership Inference Vulnerabilities in Clinical Large Language Models","display_name":"Exploring Membership Inference Vulnerabilities in Clinical Large Language Models","publication_year":2025,"publication_date":"2025-11-12","ids":{"openalex":"https://openalex.org/W7133359708","doi":"https://doi.org/10.1109/tps-isa67132.2025.00061"},"language":null,"primary_location":{"id":"doi:10.1109/tps-isa67132.2025.00061","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tps-isa67132.2025.00061","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 7th International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126307160","display_name":"Alexander Nemecek","orcid":null},"institutions":[{"id":"https://openalex.org/I58956616","display_name":"Case Western Reserve University","ror":"https://ror.org/051fd9666","country_code":"US","type":"education","lineage":["https://openalex.org/I58956616"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alexander Nemecek","raw_affiliation_strings":["Case Western Reserve University,Cleveland,Ohio,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Case Western Reserve University,Cleveland,Ohio,USA","institution_ids":["https://openalex.org/I58956616"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113290360","display_name":"Zebin Yun","orcid":null},"institutions":[{"id":"https://openalex.org/I16391192","display_name":"Tel Aviv University","ror":"https://ror.org/04mhzgx49","country_code":"IL","type":"education","lineage":["https://openalex.org/I16391192"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Zebin Yun","raw_affiliation_strings":["Tel Aviv University,Tel Aviv,Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tel Aviv University,Tel Aviv,Israel","institution_ids":["https://openalex.org/I16391192"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104592602","display_name":"Zahra Rahmani","orcid":"https://orcid.org/0000-0002-6772-5474"},"institutions":[{"id":"https://openalex.org/I58956616","display_name":"Case Western Reserve University","ror":"https://ror.org/051fd9666","country_code":"US","type":"education","lineage":["https://openalex.org/I58956616"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zahra Rahmani","raw_affiliation_strings":["Case Western Reserve University,Cleveland,Ohio,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Case Western Reserve University,Cleveland,Ohio,USA","institution_ids":["https://openalex.org/I58956616"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062889825","display_name":"Yaniv Harel","orcid":"https://orcid.org/0000-0001-9067-3708"},"institutions":[{"id":"https://openalex.org/I16391192","display_name":"Tel Aviv University","ror":"https://ror.org/04mhzgx49","country_code":"IL","type":"education","lineage":["https://openalex.org/I16391192"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Yaniv Harel","raw_affiliation_strings":["Tel Aviv University,Tel Aviv,Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tel Aviv University,Tel Aviv,Israel","institution_ids":["https://openalex.org/I16391192"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Vipin Chaudhary","orcid":null},"institutions":[{"id":"https://openalex.org/I58956616","display_name":"Case Western Reserve University","ror":"https://ror.org/051fd9666","country_code":"US","type":"education","lineage":["https://openalex.org/I58956616"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vipin Chaudhary","raw_affiliation_strings":["Case Western Reserve University,Cleveland,Ohio,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Case Western Reserve University,Cleveland,Ohio,USA","institution_ids":["https://openalex.org/I58956616"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101501539","display_name":"Mahmood Sharif","orcid":"https://orcid.org/0000-0001-7661-2220"},"institutions":[{"id":"https://openalex.org/I16391192","display_name":"Tel Aviv University","ror":"https://ror.org/04mhzgx49","country_code":"IL","type":"education","lineage":["https://openalex.org/I16391192"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Mahmood Sharif","raw_affiliation_strings":["Tel Aviv University,Tel Aviv,Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tel Aviv University,Tel Aviv,Israel","institution_ids":["https://openalex.org/I16391192"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028326739","display_name":"Erman Ayday","orcid":"https://orcid.org/0000-0003-3383-1081"},"institutions":[{"id":"https://openalex.org/I58956616","display_name":"Case Western Reserve University","ror":"https://ror.org/051fd9666","country_code":"US","type":"education","lineage":["https://openalex.org/I58956616"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Erman Ayday","raw_affiliation_strings":["Case Western Reserve University,Cleveland,Ohio,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Case Western Reserve University,Cleveland,Ohio,USA","institution_ids":["https://openalex.org/I58956616"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"509","last_page":"516"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11636","display_name":"Artificial Intelligence in Healthcare and Education","score":0.2709999978542328,"subfield":{"id":"https://openalex.org/subfields/2718","display_name":"Health Informatics"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},"topics":[{"id":"https://openalex.org/T11636","display_name":"Artificial Intelligence in Healthcare and Education","score":0.2709999978542328,"subfield":{"id":"https://openalex.org/subfields/2718","display_name":"Health Informatics"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.20149999856948853,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13629","display_name":"Text Readability and Simplification","score":0.051600001752376556,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7483999729156494},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5766000151634216},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.5515000224113464},{"id":"https://openalex.org/keywords/health-care","display_name":"Health care","score":0.4740000069141388},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.4065000116825104},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.3756999969482422},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.3614000082015991},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.32589998841285706}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7483999729156494},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5889000296592712},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5766000151634216},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.5515000224113464},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5508000254631042},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5034000277519226},{"id":"https://openalex.org/C160735492","wikidata":"https://www.wikidata.org/wiki/Q31207","display_name":"Health care","level":2,"score":0.4740000069141388},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.4065000116825104},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3756999969482422},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.3614000082015991},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.33799999952316284},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.32589998841285706},{"id":"https://openalex.org/C85973986","wikidata":"https://www.wikidata.org/wiki/Q1091731","display_name":"Exploratory research","level":2,"score":0.3192000091075897},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.3160000145435333},{"id":"https://openalex.org/C57473165","wikidata":"https://www.wikidata.org/wiki/Q7315604","display_name":"Resistance (ecology)","level":2,"score":0.31150001287460327},{"id":"https://openalex.org/C3018260909","wikidata":"https://www.wikidata.org/wiki/Q1322871","display_name":"Exploratory analysis","level":2,"score":0.31139999628067017},{"id":"https://openalex.org/C2779473830","wikidata":"https://www.wikidata.org/wiki/Q1540899","display_name":"MEDLINE","level":2,"score":0.30889999866485596},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3057999908924103},{"id":"https://openalex.org/C138816342","wikidata":"https://www.wikidata.org/wiki/Q189603","display_name":"Public health","level":2,"score":0.2872999906539917},{"id":"https://openalex.org/C2776650193","wikidata":"https://www.wikidata.org/wiki/Q264661","display_name":"Obstacle","level":2,"score":0.2784999907016754},{"id":"https://openalex.org/C3019806175","wikidata":"https://www.wikidata.org/wiki/Q11974939","display_name":"Health professionals","level":3,"score":0.2732999920845032},{"id":"https://openalex.org/C164614171","wikidata":"https://www.wikidata.org/wiki/Q5204775","display_name":"DECIPHER","level":2,"score":0.26930001378059387},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.26100000739097595},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.2533000111579895}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tps-isa67132.2025.00061","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tps-isa67132.2025.00061","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 7th International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5905763506889343,"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W2051267297","https://openalex.org/W2095272373","https://openalex.org/W2535690855","https://openalex.org/W2795435272","https://openalex.org/W2912023992","https://openalex.org/W2930926105","https://openalex.org/W2963378725","https://openalex.org/W3174544005","https://openalex.org/W4230086993","https://openalex.org/W4288057780","https://openalex.org/W4313439128","https://openalex.org/W4384561707","https://openalex.org/W4385227045","https://openalex.org/W4385573947","https://openalex.org/W4388994228","https://openalex.org/W4389520779","https://openalex.org/W4392240262","https://openalex.org/W4392599656","https://openalex.org/W4402410226","https://openalex.org/W4402467510","https://openalex.org/W4410609172","https://openalex.org/W4411254634","https://openalex.org/W4411630066","https://openalex.org/W7133224126"],"related_works":[],"abstract_inverted_index":{"As":[0],"large":[1],"language":[2],"models":[3],"(LLMs)":[4],"become":[5],"progressively":[6],"more":[7,106],"embedded":[8],"in":[9,68,140],"clinical":[10,69,89,109,124,141],"decision-support,":[11],"documentation,":[12],"and":[13,19,99,154,161,168],"patient-information":[14],"systems,":[15],"ensuring":[16],"their":[17],"privacy":[18,134,152,159],"trustworthiness":[20,169],"has":[21],"emerged":[22],"as":[23,157],"an":[24,60],"imperative":[25],"challenge":[26],"for":[27],"the":[28,46,166],"healthcare":[29,171],"sector.":[30],"Fine-tuning":[31],"LLMs":[32,125],"on":[33,64,72],"sensitive":[34],"electronic":[35],"health":[36],"record":[37],"(EHR)":[38],"data":[39],"improves":[40],"domain":[41],"alignment":[42],"but":[43,117],"also":[44],"raises":[45],"risk":[47],"of":[48,149,170],"exposing":[49],"patient":[50,79],"information":[51],"through":[52],"model":[53,84],"behaviors.":[54],"In":[55],"this":[56],"work-in-progress,":[57],"we":[58,93],"present":[59],"exploratory":[61],"empirical":[62],"study":[63],"membership":[65,119],"inference":[66],"vulnerabilities":[67],"LLMs,":[70],"focusing":[71],"whether":[73],"adversaries":[74],"can":[75],"infer":[76],"if":[77],"specific":[78],"records":[80],"were":[81],"used":[82],"during":[83],"training.":[85],"Using":[86],"a":[87,100],"state-of-the-art":[88],"question-answering":[90],"model,":[91],"Llemr,":[92],"evaluate":[94],"both":[95],"canonical":[96],"loss-based":[97],"attacks":[98],"domain-motivated":[101],"paraphrasing-based":[102],"perturbation":[103],"strategy":[104],"that":[105,122,136],"realistically":[107],"reflects":[108],"adversarial":[110],"conditions.":[111],"Our":[112],"preliminary":[113],"findings":[114],"reveal":[115],"limited":[116],"measurable":[118],"leakage,":[120],"suggesting":[121],"current":[123],"provide":[126],"partial":[127],"resistance":[128],"yet":[129],"remain":[130],"susceptible":[131],"to":[132,164],"subtle":[133],"risks":[135],"could":[137],"undermine":[138],"trust":[139],"AI":[142,172],"adoption.":[143],"These":[144],"results":[145],"motivate":[146],"continued":[147],"development":[148],"context-aware,":[150],"domain-specific":[151],"evaluations":[153],"defenses":[155],"such":[156],"differential":[158],"fine-tuning":[160],"paraphraseaware":[162],"training,":[163],"strengthen":[165],"security":[167],"systems.":[173]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-03-04T00:00:00"}