{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,17]],"date-time":"2026-08-17T10:27:33Z","timestamp":1786962453027,"version":"build-2736575974"},"publisher-location":"Cham","reference-count":43,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032078834","type":"print"},{"value":"9783032078841","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,10,13]],"date-time":"2025-10-13T00:00:00Z","timestamp":1760313600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,10,13]],"date-time":"2025-10-13T00:00:00Z","timestamp":1760313600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-07884-1_10","type":"book-chapter","created":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T16:22:32Z","timestamp":1760286152000},"page":"186-206","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["LUMIA: Linear Probing for\u00a0Unimodal and\u00a0MultiModal Membership Inference Attacks Leveraging Internal LLM States"],"prefix":"10.1007","author":[{"given":"Luis","family":"Ibanez-Lissen","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lorena","family":"Gonzalez-Manzano","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jose Maria","family":"de Fuentes","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nicolas","family":"Anciaux","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joaquin","family":"Garcia-Alfaro","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,10,13]]},"reference":[{"key":"10_CR1","unstructured":"Achiam, J., et\u00a0al.: Gpt-4 technical report. arXiv preprint arXiv:2303.08774 (2023)"},{"key":"10_CR2","unstructured":"Alain, G., Bengio, Y.: Understanding intermediate layers using linear classifier probes. In: International Conference on Learning Representations (ICLR), Works. Track (2017)"},{"key":"10_CR3","unstructured":"Albalak, A., et al.: A survey on data selection for language models. Trans. Mach. Learn. Res. (2024), survey Certification"},{"key":"10_CR4","unstructured":"Biderman, S., et\u00a0al.: Pythia: a suite for analyzing large language models across training and scaling. In: International Conference on Machine Learning, pp. 2397\u20132430. PMLR (2023)"},{"key":"10_CR5","doi-asserted-by":"crossref","unstructured":"Carlini, N., Chien, S., Nasr, M., Song, S., Terzis, A., Tramer, F.: Membership inference attacks from first principles. In: IEEE Symposium on Security and Privacy, pp. 1897\u20131914. IEEE (2022)","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"10_CR6","unstructured":"Carlini, N., et al.: Extracting training data from large language models. In: 30th USENIX Security Symposium, pp. 2633\u20132650 (2021)"},{"key":"10_CR7","doi-asserted-by":"crossref","unstructured":"Casper, S., et\u00a0al.: Black-box access is insufficient for rigorous ai audits. In: ACM Conference on Fairness, Accountability, and Transparency, pp. 2254\u20132272 (2024)","DOI":"10.1145\/3630106.3659037"},{"key":"10_CR8","doi-asserted-by":"crossref","unstructured":"Das, D., Zhang, J., Tram\u00e8r, F.: Blind baselines beat membership inference attacks for foundation models. In: Proceedings of the DATA-FM at ICLR 2025 (to appear) (2025)","DOI":"10.1109\/SPW67851.2025.00016"},{"key":"10_CR9","unstructured":"Duan, M., et al.: Do membership inference attacks work on large language models? In: First Conference on Language Modeling (COLM) (2024)"},{"key":"10_CR10","unstructured":"Dubey, A., et\u00a0al.: The llama 3 herd of models. arXiv preprint arXiv:2407.21783 (2024)"},{"key":"10_CR11","doi-asserted-by":"crossref","unstructured":"Fu, W., Wang, H., Gao, C., Liu, G., Li, Y., Jiang, T.: Membership inference attacks against fine-tuned large language models via self-prompt calibration. In: The Thirty-eighth Annual Conference on Neural Information Processing Systems (2024)","DOI":"10.52202\/079017-4290"},{"key":"10_CR12","doi-asserted-by":"crossref","unstructured":"Fu, W., Wang, H., Gao, C., Liu, G., Li, Y., Jiang, T.: Mia-tuner: adapting large language models as pre-training text detector. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol.\u00a039, pp. 27295\u201327303 (2025)","DOI":"10.1609\/aaai.v39i26.34939"},{"key":"10_CR13","unstructured":"Gao, L., et al.: The pile: an 800gb dataset of diverse text for language modeling. arXiv preprint arXiv:2101.00027 (2020)"},{"key":"10_CR14","doi-asserted-by":"crossref","unstructured":"Jajodia, S., Samarati, P., Yung, M., Zhou, J., Subrahmanian, V.S. (eds.): Encyclopedia of Cryptography, Security and Privacy, Membership Inference Attacks in Machine Learning. Springer, Cham (2025)","DOI":"10.1007\/978-3-030-71522-9"},{"key":"10_CR15","unstructured":"Kim, G., Li, Y., Spiliopoulou, E., Ma, J., Ballesteros, M., Wang, W.Y.: Detecting training data of large language models via expectation maximization. arXiv preprint arXiv:2410.07582 (2024)"},{"key":"10_CR16","unstructured":"Kingma, D.P., Ba, J.: Adam: a method for stochastic optimization. In: 3rd International Conference on Learning Representations (ICLR) (2015)"},{"key":"10_CR17","unstructured":"Li, B., et al.: LLaVA-OneVision: easy visual task transfer. arXiv preprint arXiv:2408.03326 (2024)"},{"key":"10_CR18","doi-asserted-by":"crossref","unstructured":"Li, M., Wang, J., Wang, J., Neel, S.: Mope: model perturbation based privacy attacks on language models. In: Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing, pp. 13647\u201313660 (2023)","DOI":"10.18653\/v1\/2023.emnlp-main.842"},{"key":"10_CR19","doi-asserted-by":"publisher","first-page":"98645","DOI":"10.52202\/079017-3131","volume":"37","author":"Z Li","year":"2024","unstructured":"Li, Z., Wu, Y., Chen, Y., Tonin, F., Abad Rocamora, E., Cevher, V.: Membership inference attacks against large vision-language models. Adv. Neural. Inf. Process. Syst. 37, 98645\u201398674 (2024)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"10_CR20","doi-asserted-by":"crossref","unstructured":"Liu, Z., Zhu, T., Tan, C., Liu, B., Lu, H., Chen, W.: Probing language models for pre-training data detection. In: Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics, pp. 1576\u20131587 (2024)","DOI":"10.18653\/v1\/2024.acl-long.86"},{"key":"10_CR21","doi-asserted-by":"crossref","unstructured":"Liu, Z., Ye, H., Chen, C., Zheng, Y., Lam, K.Y.: Threats, attacks, and defenses in machine unlearning: a survey. IEEE Open J. Comput. Soc. (2025)","DOI":"10.1109\/OJCS.2025.3543483"},{"key":"10_CR22","doi-asserted-by":"crossref","unstructured":"Lu, P., et al.: Learn to explain: multimodal reasoning via thought chains for science question answering. In: 36th Conference on Neural Information Processing Systems (NeurIPS) (2022)","DOI":"10.52202\/068431-0182"},{"key":"10_CR23","unstructured":"Lu, P., et al.: ICONQA: a new benchmark for abstract diagram understanding and visual language reasoning. In: Proceedings of the AAAI Conference on Artificial Intelligence (AAAI), vol.\u00a037, pp. 9537\u20139547 (2023)"},{"key":"10_CR24","doi-asserted-by":"crossref","unstructured":"Masry, A., Long, D.X., Tan, J.Q., Joty, S., Hoque, E.: ChartQA: a benchmark for question answering about charts with visual and logical reasoning. In: Findings of the Association for Computational Linguistics: EMNLP, pp. 993\u20131007 (2022)","DOI":"10.18653\/v1\/2022.findings-acl.177"},{"key":"10_CR25","unstructured":"Meeus, M., Jain, S., Rei, M., de\u00a0Montjoye, Y.A.: Did the neurons read your book? document-level membership inference for large language models. In: 33rd USENIX Security Symposium, pp. 2369\u20132385 (2024)"},{"key":"10_CR26","unstructured":"Meeus, M., Shilov, I., Faysse, M., de\u00a0Montjoye, Y.A.: Copyright traps for large language models. In: Forty-first International Conference on Machine Learning (2024), https:\/\/openreview.net\/forum?id=LDq1JPdc55"},{"key":"10_CR27","unstructured":"National institute of standards and technology (NIST): adversarial machine learning: a taxonomy and terminology of attacks and mitigations. Technical Report, NIST AI 100-2e2025 (2025)"},{"key":"10_CR28","unstructured":"Patel, O., Wang, R.: Activation monitoring: advantages of using internal representations for LLM oversight. In: 2nd NeurIPS Works. on Attributing Model Behavior at Scale (2025)"},{"issue":"6088","key":"10_CR29","doi-asserted-by":"publisher","first-page":"533","DOI":"10.1038\/323533a0","volume":"323","author":"DE Rumelhart","year":"1986","unstructured":"Rumelhart, D.E., Hinton, G.E., Williams, R.J.: Learning representations by back-propagating errors. Nature 323(6088), 533\u2013536 (1986)","journal-title":"Nature"},{"key":"10_CR30","unstructured":"Sablayrolles, A., Douze, M., Schmid, C., Ollivier, Y., J\u00e9gou, H.: White-box vs black-box: bayes optimal strategies for membership inference. In: International Conference on Machine Learning, pp. 5558\u20135567. PMLR (2019)"},{"key":"10_CR31","doi-asserted-by":"crossref","unstructured":"Schwenk, D., Khandelwal, A., Clark, C., Marino, K., Mottaghi, R.: A-okvqa: a benchmark for visual question answering using world knowledge. In: European Conference on Computer Vision, pp. 146\u2013162. Springer (2022)","DOI":"10.1007\/978-3-031-20074-8_9"},{"key":"10_CR32","unstructured":"Shi, W., et al.: Detecting pretraining data from large language models. In: 12th International Conference on Learning Representations, ICLR 2024 (2024)"},{"key":"10_CR33","doi-asserted-by":"crossref","unstructured":"Shi, W., et al.: Math-LLaVA: bootstrapping mathematical reasoning for multimodal large language models. arXiv preprint arXiv:2406.17294 (2024)","DOI":"10.18653\/v1\/2024.findings-emnlp.268"},{"key":"10_CR34","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"742","DOI":"10.1007\/978-3-030-58536-5_44","volume-title":"Computer Vision \u2013 ECCV 2020","author":"O Sidorov","year":"2020","unstructured":"Sidorov, O., Hu, R., Rohrbach, M., Singh, A.: TextCaps: a dataset for image captioning with reading comprehension. In: Vedaldi, A., Bischof, H., Brox, T., Frahm, J.-M. (eds.) ECCV 2020. LNCS, vol. 12347, pp. 742\u2013758. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-58536-5_44"},{"key":"10_CR35","unstructured":"Vaswani, A.: Attention is all you need. In: Advances in Neural Information Processing Systems (2017)"},{"issue":"1","key":"10_CR36","doi-asserted-by":"publisher","first-page":"98","DOI":"10.1109\/MSP.2008.930649","volume":"26","author":"Z Wang","year":"2009","unstructured":"Wang, Z., Bovik, A.C.: Mean squared error: love it or leave it? a new look at signal fidelity measures. IEEE Signal Process. Mag. 26(1), 98\u2013117 (2009)","journal-title":"IEEE Signal Process. Mag."},{"issue":"4","key":"10_CR37","doi-asserted-by":"publisher","first-page":"600","DOI":"10.1109\/TIP.2003.819861","volume":"13","author":"Z Wang","year":"2004","unstructured":"Wang, Z., Bovik, A.C., Sheikh, H.R., Simoncelli, E.P.: Image quality assessment: from error visibility to structural similarity. IEEE Trans. Image Process. 13(4), 600\u2013612 (2004)","journal-title":"IEEE Trans. Image Process."},{"key":"10_CR38","unstructured":"Xu, Z., et al.: Magpie: alignment data synthesis from scratch by prompting aligned llms with nothing. arXiv preprint arXiv:2406.08464 (2024)"},{"key":"10_CR39","doi-asserted-by":"crossref","unstructured":"Yan, B., et al.: On protecting the data privacy of large language models (LLMs): a survey. arXiv preprint arXiv:2403.05156 (2024)","DOI":"10.1109\/ICMC60390.2024.00008"},{"key":"10_CR40","doi-asserted-by":"crossref","unstructured":"Yao, Y., Duan, J., Xu, K., Cai, Y., Sun, Z., Zhang, Y.: A survey on large language model (LLM) security and privacy: the good, the bad, and the ugly. high-confidence computing, p. 100211 (2024)","DOI":"10.1016\/j.hcc.2024.100211"},{"key":"10_CR41","doi-asserted-by":"crossref","unstructured":"Yeom, S., Giacomelli, I., Fredrikson, M., Jha, S.: Privacy risk in machine learning: analyzing the connection to overfitting. In: IEEE 31st Computer Security Foundations Symposium, pp. 268\u2013282. IEEE (2018)","DOI":"10.1109\/CSF.2018.00027"},{"key":"10_CR42","doi-asserted-by":"crossref","unstructured":"Zhang, J., Das, D., Kamath, G., Tram\u00e8r, F.: Membership inference attacks cannot prove that a model was trained on your data. In: Proceedings of IEEE SatML (2025)","DOI":"10.1109\/SaTML64287.2025.00025"},{"key":"10_CR43","unstructured":"Zhao, W.X., et al.: A survey of large language models. arXiv preprint arXiv:2303.18223, vol. 1, no. 2 (2023)"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-07884-1_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,17]],"date-time":"2026-08-17T09:54:51Z","timestamp":1786960491000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-07884-1_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,13]]},"ISBN":["9783032078834","9783032078841"],"references-count":43,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-07884-1_10","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,10,13]]},"assertion":[{"value":"13 October 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Toulouse","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.esorics2025.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}