{"id":"https://openalex.org/W7133358811","doi":"https://doi.org/10.48550/arxiv.2603.01550","title":"Extracting Training Dialogue Data from Large Language Model based Task Bots","display_name":"Extracting Training Dialogue Data from Large Language Model based Task Bots","publication_year":2026,"publication_date":"2026-03-02","ids":{"openalex":"https://openalex.org/W7133358811","doi":"https://doi.org/10.48550/arxiv.2603.01550"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2603.01550","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5127914275","display_name":"Shuo Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Shuo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007402211","display_name":"Junzhou Zhao","orcid":"https://orcid.org/0000-0003-3476-8248"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Junzhou","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078489619","display_name":"Junji Hou","orcid":"https://orcid.org/0000-0002-3865-4072"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hou, Junji","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128033415","display_name":"Pinghui Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Pinghui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127907160","display_name":"Chenxu Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Chenxu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5128000711","display_name":"Jing Tao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tao, Jing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.26168876,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.6916999816894531,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.6916999816894531,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12128","display_name":"AI in Service Interactions","score":0.0649000033736229,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12031","display_name":"Speech and dialogue systems","score":0.021400000900030136,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/memorization","display_name":"Memorization","score":0.7833999991416931},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6983000040054321},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.6848000288009644},{"id":"https://openalex.org/keywords/phone","display_name":"Phone","score":0.49300000071525574},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.4255000054836273},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.40299999713897705},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.39590001106262207}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8197000026702881},{"id":"https://openalex.org/C30038468","wikidata":"https://www.wikidata.org/wiki/Q4354775","display_name":"Memorization","level":2,"score":0.7833999991416931},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6983000040054321},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.6848000288009644},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5098000168800354},{"id":"https://openalex.org/C2778707766","wikidata":"https://www.wikidata.org/wiki/Q202064","display_name":"Phone","level":2,"score":0.49300000071525574},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.4255000054836273},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.40299999713897705},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.39590001106262207},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38420000672340393},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3833000063896179},{"id":"https://openalex.org/C195807954","wikidata":"https://www.wikidata.org/wiki/Q1662562","display_name":"Information extraction","level":2,"score":0.37860000133514404},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.3763999938964844},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.367000013589859},{"id":"https://openalex.org/C2777466982","wikidata":"https://www.wikidata.org/wiki/Q5227287","display_name":"Data extraction","level":3,"score":0.3612000048160553},{"id":"https://openalex.org/C140779682","wikidata":"https://www.wikidata.org/wiki/Q210868","display_name":"Sampling (signal processing)","level":3,"score":0.2678999900817871},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2542000114917755},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.25369998812675476}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2603.01550","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2603.01550","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.01550","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2603.01550","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"Language":[1],"Models":[2],"(LLMs)":[3],"have":[4],"been":[5],"widely":[6],"adopted":[7],"to":[8],"enhance":[9,132],"Task-Oriented":[10],"Dialogue":[11],"Systems":[12],"(TODS)":[13],"by":[14,179],"modeling":[15,116],"complex":[16],"language":[17],"patterns":[18],"and":[19,122,136,181,186],"delivering":[20],"contextually":[21],"appropriate":[22],"responses.":[23],"However,":[24],"this":[25,76,91,95],"integration":[26],"introduces":[27],"significant":[28],"privacy":[29,77],"risks,":[30],"as":[31,34,59],"LLMs,":[32],"functioning":[33],"soft":[35],"knowledge":[36,45],"bases":[37],"that":[38,102,117,131],"compress":[39],"extensive":[40],"training":[41,50,106,156,173],"data":[42,52,107,147,174],"into":[43],"rich":[44],"representations,":[46],"can":[47,152],"inadvertently":[48],"memorize":[49],"dialogue":[51,115,159],"containing":[53],"not":[54],"only":[55],"identifiable":[56],"information":[57],"such":[58],"phone":[60],"numbers":[61],"but":[62],"also":[63],"entire":[64],"dialogue-level":[65],"events":[66],"like":[67],"complete":[68],"travel":[69],"schedules.":[70],"Despite":[71],"the":[72,142],"critical":[73],"nature":[74],"of":[75,113,144,155,158,172],"concern,":[78],"how":[79],"LLM":[80],"memorization":[81,175],"is":[82],"inherited":[83],"in":[84,176],"developing":[85],"task":[86],"bots":[87],"remains":[88],"unexplored.":[89],"In":[90],"work,":[92],"we":[93,167],"address":[94],"gap":[96],"through":[97],"a":[98],"systematic":[99],"quantitative":[100],"study":[101],"involves":[103],"evaluating":[104],"existing":[105,119],"extraction":[108,148],"attacks,":[109],"analyzing":[110],"key":[111,183],"characteristics":[112],"task-oriented":[114],"render":[118],"methods":[120],"ineffective,":[121],"proposing":[123],"novel":[124],"attack":[125],"techniques":[126],"tailored":[127],"for":[128],"LLM-based":[129,177],"TODS":[130,178],"both":[133],"response":[134],"sampling":[135],"membership":[137],"inference.":[138],"Experimental":[139],"results":[140],"demonstrate":[141],"effectiveness":[143],"our":[145],"proposed":[146],"attack.":[149],"Our":[150],"method":[151],"extract":[153],"thousands":[154],"labels":[157],"states":[160],"with":[161],"best-case":[162],"precision":[163],"exceeding":[164],"70%.":[165],"Furthermore,":[166],"provide":[168],"an":[169],"in-depth":[170],"analysis":[171],"identifying":[180],"quantifying":[182],"influencing":[184],"factors":[185],"discussing":[187],"targeted":[188],"mitigation":[189],"strategies.":[190]},"counts_by_year":[],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2026-03-04T00:00:00"}