| Challenge: | Large language models (LLMs) are rapidly gaining widespread adoption in real-world use . authors propose a method for attributing authorship among tens of thousands of candidate texts . |
| Approach: | They propose a large-language-model-based method for attributing authorship among tens of thousands of candidate texts. |
| Outcome: | The proposed method improves accuracy and ranking precision over previous approaches. |
Similar Papers
Open-World Authorship Attribution (2025.findings-acl)
Copied to clipboard
| Challenge: | Existing benchmarks for large language models do not evaluate their performance in academic research . authors aim to identify authors from anonymous text without additional information . |
| Approach: | They propose a benchmark to quantitatively assess LLMs' ability to infer author from text . they propose 'open-world' authorship attribute' to be a two-stage framework . |
| Outcome: | The proposed approach achieves 60.7% accuracy and 44.3% accuracy in two stages. |
Unraveling Interwoven Roles of Large Language Models in Authorship Privacy: Obfuscation, Mimicking, and Verification (2025.emnlp-main)
Copied to clipboard
| Challenge: | Recent advances in large language models have been driven by large-scale training corpora drawn from diverse sources such as websites, news articles, and books. |
| Approach: | They propose a framework for analyzing dynamic relationships among LLM-enabled AO, AM, and AV in the context of authorship privacy. |
| Outcome: | The proposed framework analyzes the dynamic relationships among LLM-enabled AO, AM, and AV in the context of authorship privacy. |
Anonymity at Risk? Assessing Re-Identification Capabilities of Large Language Models in Court Decisions (2024.findings-naacl)
Copied to clipboard
| Challenge: | Despite high re-identification rates on Wikipedia, even the best LLMs struggled with court decisions. |
| Approach: | They construct an anonymized Wikipedia dataset to investigate re-identification risks . they also introduce new metrics to measure performance . |
| Outcome: | The proposed model can be used to identify individuals in court decisions, but it fails in the vast majority of cases. |
ER-AE: Differentially Private Text Generation for Authorship Anonymization (2021.naacl-main)
Copied to clipboard
| Challenge: | Recent studies on privacy protection for textual data focus on removing explicit sensitive identifiers without considering the author's writing style. |
| Approach: | They propose a text generation model with an exponential mechanism for authorship anonymization that augments the semantic information through a REINFORCE training reward function. |
| Outcome: | The proposed model outperforms the state-of-the-art on semantic preservation, authorship obfuscation, and stylometric transformation on the real-life peer reviews and Yelp review datasets. |
Robust Utility-Preserving Text Anonymization Based on Large Language Models (2025.acl-long)
Copied to clipboard
| Challenge: | Existing techniques face challenges of re-identification ability of large language models . anonymizing text that contains sensitive information is crucial for a wide range of applications . |
| Approach: | They propose a framework that integrates three key LLM components to perform anonymization. |
| Outcome: | The proposed model outperforms baselines while maintaining greater data utility in downstream tasks. |
Privacy-R1: Privacy-Aware Multi-LLM Agent Collaboration via Reinforcement Learning (2026.acl-long)
Copied to clipboard
| Challenge: | Prior approaches to rewriting large language models shatters linguistic coherence and removes privacy-sensitive information. |
| Approach: | They propose a framework that trains an agent to dynamically route text chunks . it implicitly distinguishes between replaceable Personally Identifiable Information (PII) and task-critical PII . |
| Outcome: | The proposed framework achieves state-of-the-art on the privacy-utility frontier . it trains an agent to dynamically route text chunks, learning a policy that balances privacy leakage and task performance. |
NAP2: A Benchmark for Naturalness and Privacy-Preserving Text Rewriting by Learning from Human (2025.findings-emnlp)
Copied to clipboard
Shuo Huang, William Maclean, Xiaoxi Kang, Qiongkai Xu, Zhuang Li, Xingliang Yuan, Gholamreza Haffari, Lizhen Qu
| Challenge: | a large number of large language models are being used to protect user privacy . sanitizing sensitive text using two common strategies is the answer . |
| Approach: | They propose sanitizing sensitive text using deleting expressions and abstracting them . they propose a tool for text rewriting that uses crowdsourcing and large language models . |
| Outcome: | The proposed approach protects privacy before sending sensitive data to large language models . it combines crowdsourcing and large language modeling to create a text rewrite tool . |
Resource-Efficient Anonymization of Textual Data via Knowledge Distillation from Large Language Models (2025.coling-industry)
Copied to clipboard
| Challenge: | Existing approaches to anonymize textual data from large language models pose privacy risks due to their API-based access. |
| Approach: | They propose a method to distill large language models into smaller encoder-only models via named entity recognition coupled with regular expressions to create a lightweight model capable of effective anonymization. |
| Outcome: | The proposed approach reduces computational overhead while maintaining semantic integrity of data. |
Ensemble Privacy Defense for Knowledge-Intensive LLMs against Membership Inference Attacks (2026.findings-eacl)
Copied to clipboard
| Challenge: | Large language models (LLMs) are the foundation of modern natural language processing, powering applications across diverse domains. |
| Approach: | They propose a model-agnostic defense framework which aggregates and evaluates the outputs of a knowledge-injected LLM, a base LLM and a dedicated judge model to enhance resistance against membership inference attacks. |
| Outcome: | The proposed framework reduces MIA success by up to 27.8% for SFT and 526.3% for RAG compared to inference-time baseline while maintaining answer quality. |
Membership and Memorization in LLM Knowledge Distillation (2025.emnlp-main)
Copied to clipboard
| Challenge: | Recent advances in Knowledge Distillation (KD) aim to mitigate the high computational demands of Large Language Models (LLMs). |
| Approach: | They characterize and investigate membership privacy risks inherent in six LLM KD techniques . they use instruction-tuning settings that span seven NLP tasks and three teacher model families and various size student models to examine the extent of privacy risks. |
| Outcome: | The proposed methods carry membership and memorization privacy risks from the teacher to students, but differ across different techniques. |