Prompt Recovery for Large Language Models

Authors

  • Ruochen Feng
  • Jincheng Hu
  • Yifang Chen

DOI:

https://doi.org/10.61173/gmghz885

Keywords:

Large Language Models, Prompt Recovery, Pre-trained Model, Model Stacking, Predictive Entropy

Abstract

Understanding and recovering prompts in large language models (LLMs) is vital for addressing concerns related to privacy, copyright, and beyond. However, there is a lack of extensive research in this area. To fill this gap, we implemented model stacking techniques, such as utilizing mean prompts and embedding models, tailored for specific datasets. While these individual models were designed for particular datasets, our combined stacking model demonstrated improved accuracy in prompt recovery across diverse datasets. Although there was a slight decline in performance on the initial dataset, our comprehensive evaluation across multiple LLMs and prompt benchmarks indicates that our stacking model exceeds the performance of existing methods. Notably, this approach uses a single LLM without depending on external resources, making it an efficient and accessible solution for prompt recovery.

References

[1] J. Schulman et al., “Introducing ChatGPT,” OpenAI, 2022. [Online]. Available: https://openai.com/blog/chatgpt.

[2] F. Zheng, “Input reconstruction attack against vertical federated large language models,” arXiv preprint arXiv:2311.07585, 2023.

[3] J. X. Morris, W. Zhao, J. T. Chiu, V. Shmatikov, and A. M. Rush, “Language model inversion,” 2023.

[4] L. Gao, R. Peng, Y. Zhang, J. Zhao, “DORY: Deliberative Prompt Recovery for LLM,” arXiv:2405.20657, 2024

[5] W. Zhao et al., “A Survey of Large Language Models,” arXiv:2303.18223, 2023

[6] S. Bubeck et al., “Sparks of Artificial General Intelligence: Early experiments with GPT-4,” arXiv:2303.12712, 2023

[7] LLM prompt recovery. Kaggle. (n.d.-b). https://www.kaggle. com/competitions/llm-prompt-recovery/discussion/494621

Downloads

Published

2024-10-29