---
datasets:
- royweiss1/GPT_Keylogger_Dataset
language:
- en
license: mit
---

This is the model used in the USENIX Security 24' paper: "What Was Your Prompt? A Remote Keylogging Attack on AI Assistants".
It is a fine-tune of T5-Large that was trained to decipher ChatGPT's encrypted answers based only on the response's token lengths.
This model is the first-sentences model. Meaning it was trained to decipher only the first sentences of each response.
It was Trained on UltraChat Dataset - Questions About the world, and only the first answer of each dialog.


The Dataset split can be found here: https://huggingface.co./datasets/royweiss1/GPT_Keylogger_Dataset

The Github repository of the paper (containing also the training code): https://github.com/royweiss1/GPT_Keylogger


## Citation ##
If you find this model helpful please cite our paper:

```
@inproceedings{weissLLMSideChannel,
  title={What Was Your Prompt? A Remote Keylogging Attack on AI Assistants},
  author={Weiss, Roy and Ayzenshteyn, Daniel and Amit Guy and Mirsky, Yisroel}
  booktitle={USENIX Security},
  year={2024}
}
```