{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,19]],"date-time":"2026-03-19T09:18:36Z","timestamp":1773911916290,"version":"3.50.1"},"reference-count":32,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key Research and Development Plan, China,","award":["2023YFC3306100"],"award-info":[{"award-number":["2023YFC3306100"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272372"],"award-info":[{"award-number":["62272372"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tifs.2026.3671112","type":"journal-article","created":{"date-parts":[[2026,3,5]],"date-time":"2026-03-05T20:42:22Z","timestamp":1772743342000},"page":"2873-2888","source":"Crossref","is-referenced-by-count":0,"title":["Extracting Training Dialogue Data From Large Language Model-Based Task Bots"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-9446-2226","authenticated-orcid":false,"given":"Shuo","family":"Zhang","sequence":"first","affiliation":[{"name":"MOE Key Laboratory for Intelligent Networks and Network Security, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3476-8248","authenticated-orcid":false,"given":"Junzhou","family":"Zhao","sequence":"additional","affiliation":[{"name":"MOE Key Laboratory for Intelligent Networks and Network Security, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-8556-3041","authenticated-orcid":false,"given":"Junji","family":"Hou","sequence":"additional","affiliation":[{"name":"MOE Key Laboratory for Intelligent Networks and Network Security, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5779-6108","authenticated-orcid":false,"given":"Pinghui","family":"Wang","sequence":"additional","affiliation":[{"name":"MOE Key Laboratory for Intelligent Networks and Network Security, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9539-5046","authenticated-orcid":false,"given":"Chenxu","family":"Wang","sequence":"additional","affiliation":[{"name":"MOE Key Laboratory for Intelligent Networks and Network Security, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jing","family":"Tao","sequence":"additional","affiliation":[{"name":"MOE Key Laboratory for Intelligent Networks and Network Security, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-023-09322-1"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.nlp4convai-1.19"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00399"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i16.17674"},{"key":"ref5","first-page":"20179","article-title":"A simple language model for task-oriented dialogue","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Hosseini-Asl"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.findings-acl.708"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i10.21320"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i17.29830"},{"key":"ref9","first-page":"2633","article-title":"Extracting training data from large language models","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Carlini"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.52202\/075280-1708"},{"key":"ref11","first-page":"40306","article-title":"Bag of tricks for training data extraction from language models","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Yu"},{"key":"ref12","first-page":"5253","article-title":"Extracting training data from diffusion models","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Carlini"},{"key":"ref13","article-title":"GPT-4 technical report","volume-title":"arXiv:2303.08774","author":"Achiam","year":"2023"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.seretod-1.6"},{"key":"ref15","first-page":"10697","article-title":"Deduplicating training data mitigates privacy risks in language models","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Kandpal"},{"key":"ref16","article-title":"Scalable extraction of training data from (Production) language models","volume-title":"arXiv:2311.17035","author":"Nasr","year":"2023"},{"key":"ref17","article-title":"Follow my instruction and spill the beans: Scalable data extraction from retrieval-augmented generation systems","author":"Qi","year":"2024","journal-title":"arXiv:2402.17840"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.acl-long.216"},{"key":"ref19","article-title":"Llama 2: Open foundation and fine-tuned chat models","author":"Touvron","year":"2023","journal-title":"arXiv:2307.09288"},{"key":"ref20","article-title":"MultiWOZ 2.1: A consolidated multi-domain dialogue dataset with state corrections and state tracking baselines","author":"Eric","year":"2019","journal-title":"arXiv:1907.01669"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1503.02531"},{"key":"ref22","first-page":"1","article-title":"Sequence to sequence learning with neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"27","author":"Sutskever"},{"key":"ref23","article-title":"Diverse beam search: Decoding diverse solutions from neural sequence models","author":"Vijayakumar","year":"2016","journal-title":"arXiv:1610.02424"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P19-1365"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1121\/1.2016299"},{"key":"ref26","volume-title":"Zlib Compression Library","author":"Gailly","year":"2024"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.naacl-main.57"},{"key":"ref28","article-title":"LoRA: Low-rank adaptation of large language models","author":"Hu","year":"2021","journal-title":"arXiv:2106.09685"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P18-1082"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00536"},{"key":"ref31","article-title":"The curious case of neural text degeneration","author":"Holtzman","year":"2019","journal-title":"arXiv:1904.09751"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0067"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/11313711\/11422042.pdf?arnumber=11422042","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,19]],"date-time":"2026-03-19T04:52:20Z","timestamp":1773895940000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11422042\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":32,"URL":"https:\/\/doi.org\/10.1109\/tifs.2026.3671112","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}