@INPROCEEDINGS{keum:usec:2025, author = {Seongho Keum and Dongwon Shin and Leo Marchyok and Sanghyun Hong and Sooel Son}, title = {Private Investigator: Extracting Personally Identifiable Information from Large Language Models Using Optimized Prompts}, booktitle = {Proceedings of the {USENIX} Security Symposium}, pages = {8175--8194}, year = 2025 }