CopyShield is a benchmark that compares three copyright‑defense methods—contrastive decoding, Direct Preference Optimization (DPO), and activation intervention—across two large language models (LLaMA‑3.1‑8B and Mistral‑7B‑v0.3). The study uses controlled memorization of five public‑domain books to measure literal leakage, calibrated non‑literal leakage, utility, and degeneracy, finding that each intervention level yields distinct compliance‑utility trade‑offs. Results show contrastive decoding limits degeneracy but hits a suppression floor, DPO nearly eliminates literal leakage yet causes paraphrase‑loop degeneracy, and activation intervention blocks most non‑literal queries before generation, with human evaluation highlighting coherence and perceived copyright risk differences.
By Maryam Alshehyari, Dushyant Singh Chauhan, Samuele Poppi, Martin Takac, Salem Lahlou, Nils Lukas
The paper introduces ATLAS, a likelihood‑based method for model authorship attribution (MAA) that learns how each source family generates text and attributes new text by comparing token‑level likelihoods. It also presents MAABench, a benchmark for evaluating MAA under out‑of‑distribution scenarios such as unseen domains and future model versions. Experiments show ATLAS outperforms existing baselines, achieving 74.27% accuracy on the hardest MAABench setting and correctly identifying teacher models in distillation experiments.
By Minseok Ko, Hyunseok Lee, Woomin Song, Beomjun Kim, Jinwoo Shin, Kunwoong Kim
arXiv:2604. 01904v3 Announce Type: replace-cross Abstract: Post-hoc unauthorized-training data detection for large language models (LLMs) typically assumes a query-with-originals regime: rights holders query a target LLM with raw proprietary data and assess whether the model assigns them stronger memorization-based detection signals, e.
By Muxing Li, Zesheng Ye, Sharon Li, Feng Liu
The paper surveys 118 retrieval‑augmented generation (RAG) defense studies, categorizing them by the specific protection endpoint rather than the claimed goal or mechanism. It introduces a seven‑family taxonomy covering content disclosure, privacy proxies, access control, corpus‑use detection, and pipeline integrity, and reports high inter‑annotator agreement (kappa = 0.867). The survey highlights gaps: most studies target non‑primary endpoints, rely on generic QA datasets and non‑adaptive attacks, and fail to prevent private‑fact recovery even when verbatim copying is blocked.
By Peiyang Liu, Xi Wang, Di Liang, Youru Li, Zhi Cai, Wei Ye
arXiv:2606. 31250v1 Announce Type: cross Abstract: Large language models (LLM) trained on web-scale corpora generate output that may infringe copyright, yet existing technical safeguards focus narrowly on verbatim memorisation.
By Noah Scharrenberg, Chang Sun
arXiv:2602. 18733v2 Announce Type: replace Abstract: Training data leakage from Large Language Models (LLMs) raises serious concerns related to privacy, security, and copyright compliance.
By Trishita Tiwari, Ari Trachtenberg, G. Edward Suh
arXiv:2606. 27379v1 Announce Type: cross Abstract: Large language models increasingly face demands to "forget" training data, knowledge, or behaviors due to regulatory deletion obligations, copyright/licensing disputes, and safety or product-policy requirements.
By Sangyeon Yoon, Yeachan Jun, Albert No
arXiv:2602.07120v3 Announce Type: replace
Abstract: Language models (LMs) tend to memorize portions of their training data and emit verbatim spans. When the underlying sources are sensitive or copyri...
By Jacqueline He, Jonathan Hayase, Wen-tau Yih, Sewoong Oh, Luke Zettlemoyer, Pang Wei Koh
arXiv:2608. 03859v1 Announce Type: cross Abstract: Large language models (LLMs) pose challenges to academic integrity and peer review.
By Peijia Guo, Wenxuan Xie, ZiGuang Li, Ming Li
Large Language Models (LLMs) raise growing concerns about privacy leakage and copyright compliance. Membership inference is a key tool for assessing such risks, but existing studies mainly focus on whether specific samples or sample-based data units are used for training.
TextCloak is a reinforcement‑learning driven framework that generates unlearnable examples (UEs) to protect textual data from unauthorized fine‑tuning of large language models (LLMs). It transforms clean text into perturbations that preserve meaning and naturalness while degrading the utility of models trained on them. Experiments on six datasets and nine LLMs show that TextCloak consistently impairs unauthorized fine‑tuning and remains robust across different architectures, training settings, and adaptive attacks.
By Chengshuai Zhao, Pingchuan Ma, Dawei Li, Bohan Jiang, Zhiyuan Yu, Zhen Tan, Huan Liu
Deep Contrastive Unlearning for Language Models (DeepCUT) is a framework that removes information from fine‑tuned language models by directly optimizing their latent space. It addresses the challenge of machine unlearning in black‑box models, which has been largely overlooked by previous work that only mitigated output effects. Experiments on real‑world datasets show that DeepCUT consistently outperforms baseline methods in both effectiveness and efficiency.
By Estrid He, Tabinda Sarwar, Ibrahim Khalil, Xun Yi, Ke Wang