{"id":"https://openalex.org/W7166821102","doi":"https://doi.org/10.18653/v1/2026.findings-acl.337","title":"SEAD: A Surrogate-free Label-only Membership Inference Attack against Pre-trained LLMs with Semantic-Aware Density","display_name":"SEAD: A Surrogate-free Label-only Membership Inference Attack against Pre-trained LLMs with Semantic-Aware Density","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7166821102","doi":"https://doi.org/10.18653/v1/2026.findings-acl.337"},"language":null,"primary_location":{"id":"doi:10.18653/v1/2026.findings-acl.337","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.337","pdf_url":"https://aclanthology.org/2026.findings-acl.337.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2026.findings-acl.337.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139849854","display_name":"Biao Yi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Biao Yi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139850773","display_name":"Jiahao Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiahao Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139727727","display_name":"Yiming Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yiming Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139717482","display_name":"Yu He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu He","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139752716","display_name":"Baolei Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Baolei Zhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139845525","display_name":"Zheli Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zheli Liu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5139781846","display_name":"Dacheng Tao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dacheng Tao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.81072455,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"6794","last_page":"6813"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.871999979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.871999979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.023800000548362732,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.023099999874830246,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.37560001015663147},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2526000142097473}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.44830000400543213},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.37560001015663147},{"id":"https://openalex.org/C149782125","wikidata":"https://www.wikidata.org/wiki/Q160039","display_name":"Econometrics","level":1,"score":0.33230000734329224},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2892000079154968},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2651999890804291},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2526000142097473},{"id":"https://openalex.org/C162118730","wikidata":"https://www.wikidata.org/wiki/Q1128453","display_name":"Actuarial science","level":1,"score":0.2443999946117401},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.24120000004768372},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.24079999327659607},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.23680000007152557}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2026.findings-acl.337","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.337","pdf_url":"https://aclanthology.org/2026.findings-acl.337.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2026.findings-acl.337","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.337","pdf_url":"https://aclanthology.org/2026.findings-acl.337.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3960108991","display_name":null,"funder_award_id":"U25B2028","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7940625749","display_name":null,"funder_award_id":"62432012","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7166821102.pdf","grobid_xml":"https://content.openalex.org/works/W7166821102.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Membership":[0],"inference":[1],"attacks":[2,163],"(MIAs)":[3],"aim":[4],"to":[5,12,27,52,66],"determine":[6],"whether":[7],"specific":[8],"data":[9],"was":[10],"used":[11],"train":[13],"a":[14,83,121,167],"model.While":[15],"existing":[16,161],"MIAs":[17,47],"against":[18],"pretrained":[19],"Large":[20],"Language":[21],"Models":[22],"(LLMs)":[23],"typically":[24],"require":[25],"access":[26,32],"complete":[28],"logits":[29],"(probabilities),":[30],"such":[31],"is":[33,44],"sometimes":[34],"unavailable":[35],"in":[36,171],"real-world":[37],"deployments":[38],"where":[39],"only":[40],"the":[41,54,99,141,172],"generated":[42],"text":[43],"exposed.Current":[45],"label-only":[46,162,173],"relied":[48],"on":[49,106],"surrogate":[50,67,107],"models":[51,108],"estimate":[53],"target":[55,100],"model's":[56],"token":[57,92,133],"probabilities,":[58],"but":[59,151],"we":[60,78,119],"identify":[61],"fundamental":[62],"limitations:":[63],"high":[64],"sensitivity":[65],"model":[68,101],"selection":[69],"and":[70,135,164],"significant":[71],"probability":[72,111],"estimation":[73,112],"errors.To":[74],"address":[75],"these":[76],"challenges,":[77],"propose":[79],"SEAD":[80,158],"(Semantic-Aware":[81],"Density),":[82],"novel":[84],"surrogate-free":[85],"labelonly":[86],"MIA":[87],"approach":[88,103,124],"that":[89,125,143,157],"directly":[90],"estimates":[91],"probabilities":[93],"through":[94,149],"Monte":[95],"Carlo":[96],"sampling":[97],"of":[98,117],"itself.This":[102],"eliminates":[104],"dependency":[105],"while":[109],"reducing":[110],"errors":[113],"by":[114,129,140],"an":[115],"order":[116],"magnitude.Furthermore,":[118],"introduce":[120],"semantic-aware":[122],"density":[123,169],"enhances":[126],"attack":[127],"effectiveness":[128],"considering":[130],"both":[131],"exact":[132],"matches":[134],"semantically":[136,152],"similar":[137],"alternatives,":[138],"inspired":[139],"understanding":[142],"LLMs":[144],"may":[145],"express":[146],"memorized":[147],"information":[148],"different":[150],"equivalent":[153],"tokens.Extensive":[154],"evaluations":[155],"demonstrate":[156],"consistently":[159],"outperforms":[160],"serves":[165],"as":[166],"foundational":[168],"estimator":[170],"setting":[174],"1":[175],".":[176]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-07-02T00:00:00"}