{"total":130,"rows":[{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78,"area":"safety"},{"id":"2111.07380","title":"Eluding Secure Aggregation in Federated Learning via Model Inconsistency","created":"2021-11-14","cited_by_count":67,"area":null},{"id":"2104.14362","title":"From Distributed Machine Learning to Federated Learning: A Survey","created":"2021-04-29","cited_by_count":66,"area":null},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60,"area":null},{"id":"2106.07873","title":"Reverse Engineering of Generative Models: Inferring Model Hyperparameters from Generated Images","created":"2021-06-15","cited_by_count":58,"area":null},{"id":"2203.00846","title":"PUMA: Performance Unchanged Model Augmentation for Training Data Removal","created":"2022-03-02","cited_by_count":58,"area":null},{"id":"2101.02032","title":"Socially Responsible AI Algorithms: Issues, Purposes, and Challenges","created":"2021-01-01","cited_by_count":56,"area":null},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2209.01292","title":"Are Attribute Inference Attacks Just Imputation?","created":"2022-09-02","cited_by_count":49,"area":null},{"id":"2104.10949","title":"CryptGPU: Fast Privacy-Preserving Machine Learning on the GPU","created":"2021-04-22","cited_by_count":46,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2109.06024","title":"Formalizing and Estimating Distribution Inference Risks","created":"2021-09-13","cited_by_count":43,"area":null},{"id":"2310.18362","title":"SoK: Memorization in General-Purpose Large Language Models","created":"2023-10-24","cited_by_count":37,"area":null},{"id":"2105.00529","title":"GRNN: Generative Regression Neural Network -- A Data Leakage Attack for Federated Learning","created":"2021-05-02","cited_by_count":36,"area":null},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2209.10117","title":"A Comprehensive Survey on Trustworthy Recommender Systems","created":"2022-09-21","cited_by_count":32,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2306.14123","title":"Privacy and Fairness in Federated Learning: on the Perspective of Trade-off","created":"2023-06-25","cited_by_count":26,"area":null},{"id":"2210.08371","title":"Sketching for First Order Method: Efficient Algorithm for Low-Bandwidth Channel and Vulnerability","created":"2022-10-15","cited_by_count":25,"area":null},{"id":"2302.10637","title":"A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacy","created":"2023-02-21","cited_by_count":24,"area":null},{"id":"2504.12459","title":"On Linear Representations and Pretraining Data Frequency in Language Models","created":"2025-04-16","cited_by_count":23,"area":null},{"id":"2209.01100","title":"Group Property Inference Attacks Against Graph Neural Networks","created":"2022-09-02","cited_by_count":21,"area":null},{"id":"2307.10655","title":"A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency","created":"2023-07-20","cited_by_count":21,"area":null},{"id":"2206.03317","title":"Subject Membership Inference Attacks in Federated Learning","created":"2022-06-07","cited_by_count":20,"area":"safety"},{"id":"2104.13061","title":"Property Inference Attacks on Convolutional Neural Networks: Influence and Implications of Target Model's Complexity","created":"2021-04-27","cited_by_count":19,"area":null},{"id":"2105.01798","title":"Pervasive AI for IoT applications: A Survey on Resource-efficient Distributed Artificial Intelligence","created":"2021-05-04","cited_by_count":18,"area":null},{"id":"2209.08541","title":"Distribution inference risks: Identifying and mitigating sources of leakage","created":"2022-09-18","cited_by_count":17,"area":null},{"id":"2311.09994","title":"Towards more Practical Threat Models in Artificial Intelligence Security","created":"2023-11-16","cited_by_count":17,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2111.00430","title":"Efficient passive membership inference attack in federated learning","created":"2021-10-31","cited_by_count":16,"area":"safety"},{"id":"2301.04017","title":"Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregation","created":"2023-01-09","cited_by_count":16,"area":null},{"id":"2106.03785","title":"Generative Adversarial Networks: A Survey Towards Private and Secure Applications","created":"2021-06-07","cited_by_count":15,"area":null},{"id":"2212.07591","title":"Dissecting Distribution Inference","created":"2022-12-15","cited_by_count":15,"area":null},{"id":"2110.03469","title":"Federated Learning from Small Datasets","created":"2021-10-07","cited_by_count":14,"area":null},{"id":"2306.01181","title":"TMI! Finetuned Models Leak Private Information from their Pretraining Data","created":"2023-06-01","cited_by_count":14,"area":null},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2407.16607","title":"Data Mixture Inference: What do BPE Tokenizers Reveal about their Training Data?","created":"2024-07-23","cited_by_count":13,"area":null},{"id":"2211.14952","title":"Federated Learning Attacks and Defenses: A Survey","created":"2022-11-27","cited_by_count":12,"area":null},{"id":"2408.05131","title":"Range Membership Inference Attacks","created":"2024-08-09","cited_by_count":12,"area":"safety"},{"id":"2207.08367","title":"Protecting Global Properties of Datasets with Distribution Privacy Mechanisms","created":"2022-07-18","cited_by_count":11,"area":null},{"id":"2103.01496","title":"DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing","created":"2021-03-02","cited_by_count":10,"area":null},{"id":"2105.05381","title":"Accuracy-Privacy Trade-off in Deep Ensemble: A Membership Inference Perspective","created":"2021-05-12","cited_by_count":10,"area":"safety"},{"id":"2202.12319","title":"Privacy-preserving machine learning with tensor networks","created":"2022-02-24","cited_by_count":9,"area":null},{"id":"2306.05093","title":"Investigating the Effect of Misalignment on Membership Privacy in the White-box Setting","created":"2023-06-08","cited_by_count":9,"area":null},{"id":"2311.16065","title":"A Survey on Vulnerability of Federated Learning: A Learning Algorithm Perspective","created":"2023-11-27","cited_by_count":9,"area":null},{"id":"2407.11359","title":"Feature Inference Attack on Shapley Values","created":"2024-07-16","cited_by_count":9,"area":null},{"id":"2410.01276","title":"Deep Unlearn: Benchmarking Machine Unlearning for Image Classification","created":"2024-10-02","cited_by_count":9,"area":"safety"},{"id":"2303.11643","title":"Manipulating Transfer Learning for Property Inference","created":"2023-03-21","cited_by_count":8,"area":null},{"id":"2310.11970","title":"Quantifying Privacy Risks of Prompts in Visual Prompt Learning","created":"2023-10-18","cited_by_count":8,"area":"safety"},{"id":"2112.08806","title":"Correlation inference attacks against machine learning models","created":"2021-12-16","cited_by_count":7,"area":null},{"id":"2312.16203","title":"User Consented Federated Recommender System Against Personalized Attribute Inference Attack","created":"2023-12-23","cited_by_count":7,"area":null},{"id":"2409.18222","title":"Trustworthy AI: Securing Sensitive Data in Large Language Models","created":"2024-09-26","cited_by_count":7,"area":null},{"id":"2104.10561","title":"Turning Federated Learning Systems Into Covert Channels","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2107.01806","title":"Evaluating the Cybersecurity Risk of Real World, Machine Learning Production Systems","created":"2021-07-05","cited_by_count":6,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2111.01363","title":"Knowledge Cross-Distillation for Membership Privacy","created":"2021-11-02","cited_by_count":6,"area":"safety"},{"id":"2211.05249","title":"QuerySnout: Automating the Discovery of Attribute Inference Attacks against Query-Based Systems","created":"2022-11-09","cited_by_count":6,"area":null},{"id":"2303.02014","title":"Summary Statistic Privacy in Data Sharing","created":"2023-03-03","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2102.07969","title":"Machine Learning Based Cyber Attacks Targeting on Controlled Information: A Survey","created":"2021-02-16","cited_by_count":5,"area":null},{"id":"2202.02242","title":"Dikaios: Privacy Auditing of Algorithmic Fairness via Attribute Inference Attacks","created":"2022-02-04","cited_by_count":5,"area":null},{"id":"2202.08099","title":"Measuring Unintended Memorisation of Unique Private Features in Neural Networks","created":"2022-02-16","cited_by_count":5,"area":null},{"id":"2209.03620","title":"Black-Box Audits for Group Distribution Shifts","created":"2022-09-08","cited_by_count":5,"area":null},{"id":"2308.09552","title":"Attesting Distributional Properties of Training Data for Machine Learning","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2103.08987","title":"SoK: Privacy-Preserving Collaborative Tree-based Model Learning","created":"2021-03-16","cited_by_count":4,"area":null},{"id":"2105.06300","title":"Privacy Inference Attacks and Defenses in Cloud-based Deep Neural Network: A Survey","created":"2021-05-13","cited_by_count":4,"area":null},{"id":"2203.06555","title":"Label-only Model Inversion Attack: The Attack that Requires the Least Information","created":"2022-03-13","cited_by_count":4,"area":null},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2306.05208","title":"PriSampler: Mitigating Property Inference of Diffusion Models","created":"2023-06-08","cited_by_count":4,"area":"diffusion"},{"id":"2311.17228","title":"Survey on AI Ethics: A Socio-technical Perspective","created":"2023-11-28","cited_by_count":4,"area":null},{"id":"2408.16913","title":"Analyzing Inference Privacy Risks Through Gradients in Machine Learning","created":"2024-08-29","cited_by_count":4,"area":null},{"id":"2506.10364","title":"Can We Infer Confidential Properties of Training Data from LLMs?","created":"2025-06-12","cited_by_count":4,"area":null},{"id":"2510.13451","title":"Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts","created":"2025-10-15","cited_by_count":4,"area":"safety"},{"id":"2106.03699","title":"Formalizing Distribution Inference Risks","created":"2021-06-07","cited_by_count":3,"area":null},{"id":"2110.03369","title":"The Connection between Out-of-Distribution Generalization and Privacy of ML Models","created":"2021-10-07","cited_by_count":3,"area":null},{"id":"2201.06093","title":"Adversarial Machine Learning Threat Analysis and Remediation in Open Radio Access Network (O-RAN)","created":"2022-01-16","cited_by_count":3,"area":null},{"id":"2201.08786","title":"FedComm: Federated Learning as a Medium for Covert Communication","created":"2022-01-21","cited_by_count":3,"area":null},{"id":"2207.12327","title":"Technical Report: Assisting Backdoor Federated Learning with Whole Population Knowledge Alignment","created":"2022-07-25","cited_by_count":3,"area":null},{"id":"2401.00870","title":"ConfusionPrompt: Practical Private Inference for Online Large Language Models","created":"2023-12-30","cited_by_count":3,"area":null},{"id":"2406.10884","title":"Linkage on Security, Privacy and Fairness in Federated Learning: New Balances and New Perspectives","created":"2024-06-16","cited_by_count":3,"area":null},{"id":"2409.19417","title":"Subject Data Auditing via Source Inference Attack in Cross-Silo Federated Learning","created":"2024-09-28","cited_by_count":3,"area":null},{"id":"2411.03663","title":"Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approach","created":"2024-11-06","cited_by_count":3,"area":null},{"id":"2504.04033","title":"Disparate Privacy Vulnerability: Targeted Attribute Inference Attacks and Defenses","created":"2025-04-05","cited_by_count":3,"area":null},{"id":"2601.01966","title":"Refinement Provenance Inference: Detecting LLM-Refined Training Prompts from Model Behavior","created":"2026-01-05","cited_by_count":3,"area":null},{"id":"2212.10628","title":"Holistic risk assessment of inference attacks in machine learning","created":"2022-12-15","cited_by_count":2,"area":null},{"id":"2304.05135","title":"RecUP-FL: Reconciling Utility and Privacy in Federated Learning via User-configurable Privacy Defense","created":"2023-04-11","cited_by_count":2,"area":null},{"id":"2307.01292","title":"Pareto-Secure Machine Learning (PSML): Fingerprinting and Securing Inference Serving Systems","created":"2023-07-03","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2109.11830","title":"The More, the Better? A Study on Collaborative Machine Learning for DGA Detection","created":"2021-09-24","cited_by_count":1,"area":null},{"id":"2205.08821","title":"Lessons Learned: Defending Against Property Inference Attacks","created":"2022-05-18","cited_by_count":1,"area":"safety"},{"id":"2205.10079","title":"Unintended memorisation of unique features in neural networks","created":"2022-05-20","cited_by_count":1,"area":null},{"id":"2210.01864","title":"Recycling Scraps: Improving Private Learning by Leveraging Intermediate Checkpoints","created":"2022-10-04","cited_by_count":1,"area":null},{"id":"2210.03205","title":"Synthetic Dataset Generation for Privacy-Preserving Machine Learning","created":"2022-10-06","cited_by_count":1,"area":null},{"id":"2211.04157","title":"Inferring Class Label Distribution of Training Data from Classifiers: An Accuracy-Augmented Meta-Classifier Attack","created":"2022-11-08","cited_by_count":1,"area":null},{"id":"2312.00843","title":"Exploring the Robustness of Decentralized Training for Large Language Models","created":"2023-12-01","cited_by_count":1,"area":null}],"next_cursor":"100"}