Why it matters

Attribute inference is direct privacy leak. Understanding shapes defense.

Advertisement

The architecture

Prompt LLM with individual + context.

Extract inferred attribute.

Attribute inferencePrompt about personin training dataLLM inferenceleaks attributeAttacker learnssensitive infoEven if individual not in training, LLM may infer from patterns
Attribute inference.
Advertisement

How it works end to end

Direct queries about individuals.

Indirect: infer from context.

Regurgitation of memorized text.

DP + curation + filtering defend.