{"id":"https://openalex.org/W7164889095","doi":"https://doi.org/10.48550/arxiv.2606.16952","title":"Phantoms and Disclosures: a Causal Framework for Auditing Synthetic Data","display_name":"Phantoms and Disclosures: a Causal Framework for Auditing Synthetic Data","publication_year":2026,"publication_date":"2026-06-15","ids":{"openalex":"https://openalex.org/W7164889095","doi":"https://doi.org/10.48550/arxiv.2606.16952"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.16952","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16952","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.16952","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101006637","display_name":"Kareem Amin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Amin, Kareem","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037384125","display_name":"Rudrajit Das","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Das, Rudrajit","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037972828","display_name":"Alessandro Epasto","orcid":"https://orcid.org/0000-0003-0456-3217"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Epasto, Alessandro","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010342958","display_name":"Adel Javanmard","orcid":"https://orcid.org/0000-0003-1934-8747"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Javanmard, Adel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048097436","display_name":"Dennis Kraft","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kraft, Dennis","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138719459","display_name":"M\u00f3nica Ribero","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ribero, M\u00f3nica","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5070795618","display_name":"Sergei Vassilvitskii","orcid":"https://orcid.org/0000-0003-0235-1624"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vassilvitskii, Sergei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.7911999821662903,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.7911999821662903,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.035100001841783524,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.031599998474121094,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/synthetic-data","display_name":"Synthetic data","score":0.7275000214576721},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.6033999919891357},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.5631999969482422},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4934000074863434},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.4611000120639801},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.37119999527931213},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.37040001153945923},{"id":"https://openalex.org/keywords/causal-inference","display_name":"Causal inference","score":0.329800009727478}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7459999918937683},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.7275000214576721},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6033999919891357},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.5631999969482422},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4934000074863434},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4659000039100647},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.4611000120639801},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4352000057697296},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4097999930381775},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.37119999527931213},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.37040001153945923},{"id":"https://openalex.org/C158600405","wikidata":"https://www.wikidata.org/wiki/Q5054566","display_name":"Causal inference","level":2,"score":0.329800009727478},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.3237999975681305},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.321399986743927},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.3037000000476837},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.2842000126838684},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2685999870300293},{"id":"https://openalex.org/C134261354","wikidata":"https://www.wikidata.org/wiki/Q938438","display_name":"Statistical inference","level":2,"score":0.26170000433921814},{"id":"https://openalex.org/C30038468","wikidata":"https://www.wikidata.org/wiki/Q4354775","display_name":"Memorization","level":2,"score":0.2556000053882599},{"id":"https://openalex.org/C2780440489","wikidata":"https://www.wikidata.org/wiki/Q5227278","display_name":"Data-driven","level":2,"score":0.2540000081062317},{"id":"https://openalex.org/C55037315","wikidata":"https://www.wikidata.org/wiki/Q5421151","display_name":"Experimental data","level":2,"score":0.25119999051094055},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.25110000371932983}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.16952","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16952","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.16952","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16952","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5544703602790833,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"rapid":[1],"adoption":[2],"of":[3,34,188],"generative":[4],"AI":[5],"and":[6,36,57,94,97,133,142,185],"Large":[7],"Language":[8],"Models":[9],"(LLMs)":[10],"has":[11],"spurred":[12],"interest":[13],"in":[14],"synthetic":[15,28,140,181],"data":[16,29,60,91,182],"as":[17,115,154],"a":[18,49,65,76,85,143,155],"privacy-preserving":[19],"alternative":[20],"to":[21,55,67,179],"sensitive":[22],"real-world":[23],"datasets.":[24],"However,":[25],"generating":[26],"high-utility":[27],"often":[30],"carries":[31],"the":[32,41,72,81,139],"risk":[33],"memorizing":[35],"regurgitating":[37],"private":[38],"information":[39],"from":[40],"training":[42,93,137],"corpus.":[43],"In":[44],"this":[45,124,150],"work,":[46],"we":[47,103],"present":[48],"customizable":[50],"empirical":[51,160],"auditing":[52,172],"framework":[53,63,151],"designed":[54],"detect":[56],"explain":[58],"such":[59,114],"disclosures.":[61],"Our":[62,174],"introduces":[64],"mechanism":[66],"distinguish":[68],"between":[69],"\"true":[70],"disclosures\"-where":[71],"system":[73,82],"directly":[74],"reproduces":[75],"user's":[77,86],"information-and":[78],"\"phantom":[79],"disclosures''-where":[80],"incidentally":[83],"generates":[84],"data.":[87],"By":[88],"partitioning":[89],"input":[90],"into":[92],"holdout":[95],"sets":[96],"applying":[98],"rigorous":[99],"statistical":[100],"hypothesis":[101],"testing,":[102],"determine":[104],"if":[105],"observed":[106],"disclosures":[107],"are":[108,167],"consistent":[109],"with":[110],"strict":[111],"privacy":[112,164],"baselines,":[113],"zero-learning":[116],"or":[117,195],"specific":[118],"Differential":[119],"Privacy":[120],"(DP)":[121],"bounds.":[122],"Crucially,":[123],"approach":[125,175],"requires":[126,186],"no":[127,130,134],"model":[128,136],"access,":[129],"canary":[131],"insertion,":[132],"reference":[135],"-only":[138],"output":[141],"held-out":[144],"control":[145],"set.":[146],"We":[147],"demonstrate":[148],"that":[149,166],"effectively":[152],"functions":[153],"membership":[156],"inference":[157],"attack,":[158],"providing":[159],"lower":[161],"bounds":[162],"on":[163],"leakage":[165],"tighter":[168],"than":[169,193],"prior":[170],"data-based":[171],"methods.":[173],"is":[176],"model-agnostic,":[177],"applies":[178],"any":[180],"generation":[183],"mechanism,":[184],"orders":[187],"magnitude":[189],"fewer":[190],"computational":[191],"resources":[192],"shadow-model":[194],"canary-based":[196],"alternatives.":[197]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-17T00:00:00"}