{"id":"https://openalex.org/W7160255330","doi":"https://doi.org/10.48550/arxiv.2605.02255","title":"On the Privacy of LLMs: An Ablation Study","display_name":"On the Privacy of LLMs: An Ablation Study","publication_year":2026,"publication_date":"2026-05-04","ids":{"openalex":"https://openalex.org/W7160255330","doi":"https://doi.org/10.48550/arxiv.2605.02255"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.02255","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.02255","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.02255","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000858958","display_name":"Karima Makhlouf","orcid":"https://orcid.org/0000-0001-6318-0713"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Makhlouf, Karima","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023891858","display_name":"Lamiaa Basyoni","orcid":"https://orcid.org/0000-0002-0243-5484"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Basyoni, Lamiaa","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135299103","display_name":"Syed Khaderi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Khaderi, Syed","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135339681","display_name":"Gabriel Marquez","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Marquez, Gabriel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135297064","display_name":"Peter Sotomango","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sotomango, Peter","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135359736","display_name":"Mahmoud Awawdah","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Awawdah, Mahmoud","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5001717771","display_name":"Sami Zhioua","orcid":"https://orcid.org/0000-0003-2029-175X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhioua, Sami","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.36329999566078186,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.36329999566078186,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.1526000052690506,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.05770000070333481,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9434999823570251},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7750999927520752},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5390999913215637},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.516700029373169},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4779999852180481},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.46380001306533813},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.3856000006198883},{"id":"https://openalex.org/keywords/data-set","display_name":"Data set","score":0.36250001192092896}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9434999823570251},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7750999927520752},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7221999764442444},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5976999998092651},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5390999913215637},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.516700029373169},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4779999852180481},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.46380001306533813},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3856000006198883},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.36250001192092896},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35100001096725464},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.35030001401901245},{"id":"https://openalex.org/C2777466982","wikidata":"https://www.wikidata.org/wiki/Q5227287","display_name":"Data extraction","level":3,"score":0.34599998593330383},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2962999939918518},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.2759000062942505},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2703999876976013},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2660999894142151},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2655999958515167},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.265500009059906},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2549999952316284},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.25429999828338623}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.02255","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.02255","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.02255","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.02255","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.6952283382415771,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2],"(LLMs)":[3],"are":[4,37,162],"increasingly":[5],"deployed":[6],"in":[7,40,45,138,159],"interactive":[8],"and":[9,29,62,71,91,110,130,165,176],"retrieval-augmented":[10],"settings,":[11],"raising":[12],"significant":[13,144],"privacy":[14,69,157],"concerns.":[15],"While":[16],"attacks":[17,115,133],"such":[18,84],"as":[19,85,146],"Membership":[20,102],"Inference":[21,24],"(MIA),":[22],"Attribute":[23],"(AIA),":[25],"Data":[26],"Extraction":[27],"(DEA),":[28],"Backdoor":[30],"Attacks":[31],"(BA)":[32],"have":[33],"been":[34],"studied,":[35],"they":[36,142,147],"typically":[38],"analyzed":[39],"isolation,":[41],"leaving":[42],"a":[43,58,65,73],"gap":[44],"understanding":[46],"their":[47,123],"behavior":[48],"under":[49],"common":[50],"system":[51],"factors.":[52],"In":[53,126],"this":[54],"paper,":[55],"we":[56],"introduce":[57],"unified":[59],"threat":[60],"model":[61,86],"notation,":[63],"reproduce":[64],"representative":[66],"set":[67],"of":[68,81],"attacks,":[70,104],"conduct":[72],"structured":[74],"ablation":[75],"study":[76],"to":[77,122],"evaluate":[78],"the":[79,171],"impact":[80],"key":[82],"factors":[83],"architecture,":[87],"scale,":[88],"dataset":[89],"characteristics,":[90],"retrieval":[92],"configuration.":[93],"Our":[94],"analysis":[95],"reveals":[96],"clear":[97],"differences":[98],"across":[99],"attack":[100],"types.":[101],"inference":[103,129],"particularly":[105],"mask-based":[106],"variants,":[107],"exhibit":[108],"strong":[109],"reliable":[111],"signals,":[112],"while":[113],"backdoor":[114],"achieve":[116],"consistently":[117],"high":[118],"success":[119],"rates":[120],"due":[121],"trigger-based":[124],"nature.":[125],"contrast,":[127],"attribute":[128],"data":[131],"extraction":[132],"remain":[134],"more":[135],"challenging,":[136],"resulting":[137],"lower":[139],"accuracy,":[140],"yet":[141],"pose":[143],"risks":[145,158],"target":[148],"sensitive":[149],"personal":[150],"information.":[151],"Overall,":[152],"these":[153],"results":[154],"highlight":[155],"that":[156],"LLM":[160],"systems":[161],"highly":[163],"context-dependent":[164],"driven":[166],"by":[167],"design":[168],"choices,":[169],"emphasizing":[170],"need":[172],"for":[173],"holistic":[174],"evaluation":[175],"informed":[177],"deployment":[178],"practices.":[179]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-06T00:00:00"}