safety security
The Vector Database Stored Shadow Questions Instead of the Document
SHAQ decomposed a document into generated queries so stored embeddings revealed less source text while preserving retrieval performance.
Summary
SHAQ decomposed a document into generated queries so stored embeddings revealed less source text while preserving retrieval performance.
Embedding-inversion attacks try to reconstruct text from vectors stored for retrieval. SHAQ changes what is stored: a language model generates diverse shadow queries for each document, and the system embeds those queries rather than the original document itself. Across the authors' retrieval datasets, the defense lowered one reported recovery rate to 0.2104, protected up to 19.50 percent more tokens than baseline defenses and reached as much as 0.7967 MAP@10, including utility gains up to 5.53 percent. These are benchmark results for the paper's attack and retrieval settings, not a guarantee against every inversion technique.
Why it matters
SHAQ decomposed a document into generated queries so stored embeddings revealed less source text while preserving retrieval performance.
Limits and context
- These are benchmark results for the paper's attack and retrieval settings, not a guarantee against every inversion technique.
Key claims
SHAQ decomposed a document into generated queries so stored embeddings revealed less source text while preserving retrieval performance.
Qualification: These are benchmark results for the paper's attack and retrieval settings, not a guarantee against every inversion technique.
Evidence: source-2026-09-08-006
Sources
- arXiv preprint 2609.04767arXiv · primary research
Corrections
No corrections have been recorded for this story.