{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,31]],"date-time":"2025-10-31T23:22:32Z","timestamp":1761952952903,"version":"build-2065373602"},"publisher-location":"Singapore","reference-count":27,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819533978","type":"print"},{"value":"9789819533985","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T00:00:00Z","timestamp":1761955200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T00:00:00Z","timestamp":1761955200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-981-95-3398-5_15","type":"book-chapter","created":{"date-parts":[[2025,10,31]],"date-time":"2025-10-31T23:19:24Z","timestamp":1761952764000},"page":"174-186","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Data Leakage Detection in\u00a0Large Vision-Language Models via\u00a0Multimodal Perturbation"],"prefix":"10.1007","author":[{"given":"Xin","family":"Wang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhaoxiang","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yue","family":"Zhan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kaikai","family":"Zhao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kai","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shiguo","family":"Lian","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,11,1]]},"reference":[{"key":"15_CR1","unstructured":"Bai, S., et\u00a0al.: Qwen2.5-VL technical report. arXiv preprint arXiv:2502.13923 (2025)"},{"key":"15_CR2","unstructured":"Carlini, N., et\u00a0al.: Extracting training data from large language models. In: 30th USENIX Security Symposium, pp. 2633\u20132650 (2021)"},{"key":"15_CR3","doi-asserted-by":"crossref","unstructured":"Chen, L., Li, J., Dong, X., Zhang, P., He, C., Wang, J., Zhao, F., Lin, D.: ShareGPT4V: improving large multi-modal models with better captions. In: European Conference on Computer Vision, pp. 370\u2013387. Springer (2024)","DOI":"10.1007\/978-3-031-72643-9_22"},{"key":"15_CR4","unstructured":"Choquette-Choo, C.A., Tramer, F., Carlini, N., Papernot, N.: Label-only membership inference attacks. In: ICML, pp. 1964\u20131974. PMLR (2021)"},{"key":"15_CR5","unstructured":"Dai, W., et al.: InstructBLIP: towards general-purpose vision-language models with instruction tuning. In: Thirty-seventh Conference on Neural Information Processing Systems (2023)"},{"issue":"6","key":"15_CR6","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3712001","volume":"57","author":"BC Das","year":"2025","unstructured":"Das, B.C., Amini, M.H., Wu, Y.: Security and privacy challenges of large language models: a survey. ACM Comput. Surv. 57(6), 1\u201339 (2025)","journal-title":"ACM Comput. Surv."},{"key":"15_CR7","doi-asserted-by":"crossref","unstructured":"Deng, C., Zhao, Y., Tang, X., Gerstein, M., Cohan, A.: Investigating data contamination in modern benchmarks for large language models. In: NAACL, pp. 8706\u20138719 (2024)","DOI":"10.18653\/v1\/2024.naacl-long.482"},{"key":"15_CR8","doi-asserted-by":"crossref","unstructured":"Dong, Y., Jiang, X., Liu, H., Jin, Z., Gu, B., Yang, M., Li, G.: Generalization or memorization: Data contamination and trustworthy evaluation for large language models. arXiv preprint arXiv:2402.15938 (2024)","DOI":"10.18653\/v1\/2024.findings-acl.716"},{"key":"15_CR9","first-page":"134981","volume":"37","author":"W Fu","year":"2025","unstructured":"Fu, W., Wang, H., Gao, C., Liu, G., Li, Y., Jiang, T.: Membership inference attacks against fine-tuned large language models via self-prompt calibration. Adv. Neural. Inf. Process. Syst. 37, 134981\u2013135010 (2025)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"15_CR10","unstructured":"Hu, Y., Li, Z., Liu, Z., Zhang, Y., Qin, Z., Ren, K., Chen, C.: Membership inference attacks against vision-language models. arXiv preprint arXiv:2501.18624 (2025)"},{"key":"15_CR11","doi-asserted-by":"crossref","unstructured":"Kiyomaru, H., Sugiura, I., Kawahara, D., Kurohashi, S.: A comprehensive analysis of memorization in large language models. In: Proceedings of the 17th International Natural Language Generation Conference, pp. 584\u2013596 (2024)","DOI":"10.18653\/v1\/2024.inlg-main.45"},{"key":"15_CR12","doi-asserted-by":"crossref","unstructured":"Ko, M., Jin, M., Wang, C., Jia, R.: Practical membership inference attacks against large-scale multi-modal models: a pilot study. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 4871\u20134881 (2023)","DOI":"10.1109\/ICCV51070.2023.00449"},{"key":"15_CR13","unstructured":"Li, B., et al.: LLaVA-OneVision: easy visual task transfer. Transactions on Machine Learning Research (2025)"},{"key":"15_CR14","unstructured":"Li, Y.: Estimating contamination via perplexity: Quantifying memorisation in language model evaluation. arXiv preprint arXiv:2309.10677 (2023)"},{"key":"15_CR15","first-page":"98645","volume":"37","author":"Z Li","year":"2025","unstructured":"Li, Z., Wu, Y., Chen, Y., Tonin, F., Abad Rocamora, E., Cevher, V.: Membership inference attacks against large vision-language models. Adv. Neural. Inf. Process. Syst. 37, 98645\u201398674 (2025)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"15_CR16","unstructured":"Lin, C.Y.: ROUGE: a package for automatic evaluation of summaries. In: Text summarization branches out, pp. 74\u201381 (2004)"},{"key":"15_CR17","doi-asserted-by":"crossref","unstructured":"Liu, H., Li, C., Li, Y., Lee, Y.J.: Improved baselines with visual instruction tuning. In: CVPR, pp. 26296\u201326306 (2024)","DOI":"10.1109\/CVPR52733.2024.02484"},{"key":"15_CR18","doi-asserted-by":"crossref","unstructured":"Mireshghallah, F., Goyal, K., Uniyal, A., Berg-Kirkpatrick, T., Shokri, R.: Quantifying privacy risks of masked language models using membership inference attacks. In: EMNLP, pp. 8332\u20138347 (2022)","DOI":"10.18653\/v1\/2022.emnlp-main.570"},{"key":"15_CR19","doi-asserted-by":"crossref","unstructured":"Niu, J., et\u00a0al.: Comparing different membership inference attacks with a comprehensive benchmark. IEEE Transactions on Information Forensics and Security (2025)","DOI":"10.1109\/TIFS.2025.3550070"},{"key":"15_CR20","unstructured":"Oren, Y., Meister, N., Chatterji, N.S., Ladhak, F., Hashimoto, T.: Proving test set contamination in black-box language models. In: The Twelfth International Conference on Learning Representations (2023)"},{"key":"15_CR21","unstructured":"Shi, W., et al.: Detecting pretraining data from large language models. In: The Twelfth International Conference on Learning Representations, pp. 1\u201313 (2024)"},{"key":"15_CR22","doi-asserted-by":"crossref","unstructured":"Shokri, R., Stronati, M., Song, C., Shmatikov, V.: Membership inference attacks against machine learning models. In: 2017 IEEE Symposium on Security and Privacy (SP), pp. 3\u201318. IEEE (2017)","DOI":"10.1109\/SP.2017.41"},{"key":"15_CR23","unstructured":"Team, G., et\u00a0al.: Gemini: a family of highly capable multimodal models. arXiv preprint arXiv:2312.11805 (2023)"},{"key":"15_CR24","doi-asserted-by":"crossref","unstructured":"Yeom, S., Giacomelli, I., Fredrikson, M., Jha, S.: Privacy risk in machine learning: analyzing the connection to overfitting. In: 2018 IEEE 31st Computer Security Foundations Symposium (CSF), pp. 268\u2013282. IEEE (2018)","DOI":"10.1109\/CSF.2018.00027"},{"key":"15_CR25","unstructured":"Zhang, J., et al.: Min-K%++: improved baseline for pre-training data detection from large language models. In: ICLR (2025)"},{"issue":"8","key":"15_CR26","doi-asserted-by":"publisher","first-page":"5625","DOI":"10.1109\/TPAMI.2024.3369699","volume":"46","author":"J Zhang","year":"2024","unstructured":"Zhang, J., Huang, J., Jin, S., Lu, S.: Vision-language models for vision tasks: a survey. IEEE Trans. Pattern Anal. Mach. Intell. 46(8), 5625\u20135644 (2024)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"15_CR27","unstructured":"Zhu, D., Chen, J., Shen, X., Li, X., Elhoseiny, M.: MiniGPT-4: enhancing vision-language understanding with advanced large language models. In: ICLR (2024)"}],"container-title":["Lecture Notes in Computer Science","Image and Graphics"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-95-3398-5_15","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,31]],"date-time":"2025-10-31T23:19:27Z","timestamp":1761952767000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-95-3398-5_15"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,1]]},"ISBN":["9789819533978","9789819533985"],"references-count":27,"URL":"https:\/\/doi.org\/10.1007\/978-981-95-3398-5_15","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11,1]]},"assertion":[{"value":"1 November 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICIG","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Image and Graphics","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Xuzhou","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31 October 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2 November 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icig2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/icig.csig.org.cn\/2025\/index.html","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}