{"id":"https://openalex.org/W7160539578","doi":"https://doi.org/10.48550/arxiv.2605.04116","title":"Membership Inference Attacks for Retrieval Based In-Context Learning for Document Question Answering","display_name":"Membership Inference Attacks for Retrieval Based In-Context Learning for Document Question Answering","publication_year":2026,"publication_date":"2026-05-05","ids":{"openalex":"https://openalex.org/W7160539578","doi":"https://doi.org/10.48550/arxiv.2605.04116"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.04116","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.04116","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.04116","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135552911","display_name":"Tejas Kulkarni","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kulkarni, Tejas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135627809","display_name":"Antti Koskela","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Koskela, Antti","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5120305250","display_name":"Laith Zumot","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zumot, Laith","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.3481999933719635,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.3481999933719635,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.12780000269412994,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.10819999873638153,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7089999914169312},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.600600004196167},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5989999771118164},{"id":"https://openalex.org/keywords/document-retrieval","display_name":"Document retrieval","score":0.5041999816894531},{"id":"https://openalex.org/keywords/blacklist","display_name":"Blacklist","score":0.46059998869895935},{"id":"https://openalex.org/keywords/prefix","display_name":"Prefix","score":0.4417000114917755},{"id":"https://openalex.org/keywords/question-answering","display_name":"Question answering","score":0.40950000286102295},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.40290001034736633}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8148999810218811},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7089999914169312},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.600600004196167},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5989999771118164},{"id":"https://openalex.org/C161156560","wikidata":"https://www.wikidata.org/wiki/Q1638872","display_name":"Document retrieval","level":2,"score":0.5041999816894531},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.4652999937534332},{"id":"https://openalex.org/C2781345505","wikidata":"https://www.wikidata.org/wiki/Q2535979","display_name":"Blacklist","level":2,"score":0.46059998869895935},{"id":"https://openalex.org/C141603448","wikidata":"https://www.wikidata.org/wiki/Q134830","display_name":"Prefix","level":2,"score":0.4417000114917755},{"id":"https://openalex.org/C44291984","wikidata":"https://www.wikidata.org/wiki/Q1074173","display_name":"Question answering","level":2,"score":0.40950000286102295},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.40290001034736633},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39100000262260437},{"id":"https://openalex.org/C89128539","wikidata":"https://www.wikidata.org/wiki/Q1949963","display_name":"Statistic","level":2,"score":0.37049999833106995},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.36649999022483826},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.3630000054836273},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3366999924182892},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32409998774528503},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.3109999895095825},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.2921000123023987},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.28859999775886536},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.28760001063346863},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2856999933719635},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.275299996137619},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.275299996137619},{"id":"https://openalex.org/C204806902","wikidata":"https://www.wikidata.org/wiki/Q2333581","display_name":"Semantic security","level":5,"score":0.2745000123977661},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.26829999685287476},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.25949999690055847}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.04116","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.04116","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.04116","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.04116","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0,35,137],"show":[1,114],"that":[2,42,115,149],"remotely":[3],"hosted":[4],"applications":[5],"employing":[6],"in-context":[7,17],"learning":[8],"when":[9,26],"augmented":[10],"with":[11,132],"a":[12,57,81,85,96,104],"retrieval":[13],"function":[14],"to":[15,22,47,60,122,145],"select":[16],"examples":[18],"can":[19,118],"be":[20],"vulnerable":[21],"membership-inference":[23],"attacks":[24,41,117,128],"even":[25],"the":[27,75,101,108,111,153],"service":[28],"provider":[29],"and":[30,78,113,124],"users":[31],"are":[32],"separate":[33],"parties.":[34],"propose":[36],"two":[37],"black-box":[38],"membership":[39,82],"inference":[40],"exploit":[43],"query":[44],"text":[45,109],"prefixes":[46],"distinguish":[48],"member":[49],"from":[50],"non-member":[51],"inputs.":[52],"The":[53,67],"first":[54],"attack":[55,69],"uses":[56],"reference":[58,76],"model":[59,77],"estimate":[61],"an":[62,140],"otherwise":[63],"unavailable":[64],"loss":[65],"metric.":[66],"second":[68,159],"improves":[70],"upon":[71],"it":[72,150],"by":[73,157],"eliminating":[74],"instead":[79],"computing":[80],"statistic":[83],"through":[84],"simple":[86],"but":[87],"novel":[88],"weighted-averaging":[89],"scheme.":[90],"Our":[91],"comprehensive":[92],"empirical":[93],"evaluations":[94],"consider":[95],"stricter":[97],"case":[98],"in":[99,110,129],"which":[100],"adversary":[102],"has":[103],"paraphrased":[105],"version":[106],"of":[107,135],"queries":[112],"our":[116,146,158],"exhibit":[119],"stronger":[120],"resilience":[121],"paraphrasing":[123],"outperform":[125],"three":[126],"prior":[127],"many":[130],"cases":[131],"small":[133],"number":[134],"prefixes.":[136],"also":[138],"adapt":[139],"existing":[141],"ensemble":[142],"prompting":[143],"defense":[144],"setting,":[147],"demonstrating":[148],"substantially":[151],"mitigates":[152],"privacy":[154],"leakage":[155],"caused":[156],"attack.":[160]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-08T00:00:00"}