{"id":"https://openalex.org/W7164185393","doi":"https://doi.org/10.48550/arxiv.2606.10217","title":"Alignment Defends LLMs from Property Inference Attacks","display_name":"Alignment Defends LLMs from Property Inference Attacks","publication_year":2026,"publication_date":"2026-06-08","ids":{"openalex":"https://openalex.org/W7164185393","doi":"https://doi.org/10.48550/arxiv.2606.10217"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.10217","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.10217","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.10217","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102677578","display_name":"Pengrun Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Pengrun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062539844","display_name":"Chhavi Yadav","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yadav, Chhavi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138293378","display_name":"Ruihan Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Ruihan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5010790447","display_name":"Kamalika Chaudhuri","orcid":"https://orcid.org/0000-0001-9646-7710"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chaudhuri, Kamalika","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6920999884605408,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6920999884605408,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.06549999862909317,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.0575999990105629,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7986000180244446},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.7738000154495239},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.6287000179290771},{"id":"https://openalex.org/keywords/preference","display_name":"Preference","score":0.57669997215271},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.5378999710083008},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.4869999885559082},{"id":"https://openalex.org/keywords/distribution","display_name":"Distribution (mathematics)","score":0.30709999799728394}],"concepts":[{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7986000180244446},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.7738000154495239},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.631600022315979},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.6287000179290771},{"id":"https://openalex.org/C2781249084","wikidata":"https://www.wikidata.org/wiki/Q908656","display_name":"Preference","level":2,"score":0.57669997215271},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.5378999710083008},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.4869999885559082},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48249998688697815},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.35920000076293945},{"id":"https://openalex.org/C110121322","wikidata":"https://www.wikidata.org/wiki/Q865811","display_name":"Distribution (mathematics)","level":2,"score":0.30709999799728394},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.30480000376701355},{"id":"https://openalex.org/C2778712577","wikidata":"https://www.wikidata.org/wiki/Q3505966","display_name":"Retraining","level":2,"score":0.302700012922287},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3012999892234802},{"id":"https://openalex.org/C134261354","wikidata":"https://www.wikidata.org/wiki/Q938438","display_name":"Statistical inference","level":2,"score":0.29739999771118164},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2718999981880188},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.26820001006126404},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.25440001487731934},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.250900000333786},{"id":"https://openalex.org/C113336015","wikidata":"https://www.wikidata.org/wiki/Q574010","display_name":"Complete information","level":2,"score":0.25029999017715454}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.10217","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.10217","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.10217","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.10217","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5923441648483276,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2,71],"(LLMs)":[3],"are":[4,72],"increasingly":[5],"fine-tuned":[6],"on":[7],"domain-specific":[8],"datasets":[9],"that":[10,20,145],"may":[11],"contain":[12],"sensitive,":[13],"dataset-level":[14,22],"properties.":[15],"Recent":[16],"work":[17],"has":[18],"shown":[19],"such":[21],"information":[23],"can":[24],"be":[25],"effectively":[26,150],"extracted":[27],"through":[28],"property":[29,84,99,152],"inference":[30,85,153],"attacks,":[31],"posing":[32],"a":[33,97,135,157],"confidentiality":[34,160],"risk.":[35],"Existing":[36],"defenses":[37,81,128,149],"against":[38],"these":[39],"attacks":[40,86,154],"primarily":[41],"operate":[42],"by":[43,129],"modifying":[44,105],"the":[45,54,59,92,106],"training":[46,107],"data":[47,56,67],"distribution":[48,95],"and":[49,57,121,133],"hence":[50],"require":[51],"access":[52],"to":[53,64],"original":[55],"retraining":[58],"model,":[60],"limiting":[61],"their":[62],"applicability":[63],"settings":[65],"where":[66],"is":[68],"unavailable":[69],"or":[70],"already":[73],"deployed.":[74],"In":[75,109],"this":[76],"work,":[77],"we":[78,111,143],"propose":[79],"alignment-based":[80],"for":[82],"mitigating":[83],"in":[87],"LLMs.":[88],"Our":[89],"approach":[90],"reshapes":[91],"model's":[93],"output":[94],"towards":[96],"target":[98],"ratio":[100],"via":[101],"post-training":[102],"alignment,":[103],"without":[104],"data.":[108],"particular,":[110],"adapt":[112],"two":[113],"widely":[114],"used":[115],"RLHF":[116],"frameworks--Direct":[117],"Preference":[118],"Optimization":[119,125],"(DPO)":[120],"Group":[122],"Relative":[123],"Policy":[124],"(GRPO)--as":[126],"our":[127,146],"constructing":[130],"preference":[131],"pairs":[132],"defining":[134],"specific":[136],"reward":[137],"function":[138],"respectively.":[139],"Through":[140],"comprehensive":[141],"experiments,":[142],"show":[144],"alignment":[147],"based":[148],"mitigate":[151],"while":[155],"maintaining":[156],"strong":[158],"utility":[159],"tradeoff.":[161]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-11T00:00:00"}