arXiv AI By Hua Yang, Alejandro Velasco, Sen Fang, Bowen Xu, Denys Poshyvanyk

A Causal Perspective on the Role of Training Dynamics for Interpreting Privacy Risks in Code Models

Read the original on arXiv AI →

The paper investigates how different types of personally identifiable information (PII) are learned and leaked by large language models for code (LLM4Code). By creating a diverse PII dataset, fine‑tuning models of various scales, and analyzing training dynamics through a structural causal model, the authors find that leakage risk varies by PII type—easy‑to‑learn data such as IP addresses leak more often, while harder types like keys and passwords leak less. The study provides causal evidence that leakage risks are type‑dependent and suggests that defenses should be tailored to specific PII categories and their learnability.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

arXiv Machine Learning
Jul 20

Code-Poisoning Property Inference Attacks

arXiv:2607. 15970v1 Announce Type: cross Abstract: The flourishing code hosting platforms and coding agents enable even beginners with private data to build tailored Machine Learning (ML) models using available code quickly.

By Xukun Luan, Yuhui Gong, Gang Zhang, Zixuan Huang, Yuanguo Bi, Xuesong Li, Jinyan Liu
arXiv Machine Learning
Aug 27

Reconstruction of Personally Identifiable Information from Proprietary Data in Supervised Fine-Tuned Models

The paper examines how supervised fine-tuning (SFT) of large language models can leak personally identifiable information (PII) when the fine-tuning data contains user-provided sensitive details. It introduces COVA, a coverage-aware decoding algorithm that improves targeted PII reconstruction from SFT models, especially when an adversary has limited contextual knowledge about a target. Experiments on medical and legal Q&A datasets show that even small proprietary SFT datasets can lead to significant privacy leakage via PII reconstruction.

By Sae Furukawa, Alina Oprea