{"total":163,"rows":[{"id":"2109.13398","title":"Unrolling SGD: Understanding Factors Influencing Machine Unlearning","created":"2021-09-27","cited_by_count":279,"area":"safety"},{"id":"2304.04934","title":"Model Sparsity Can Simplify Machine Unlearning","created":"2023-04-11","cited_by_count":214,"area":"safety"},{"id":"2110.11794","title":"Federated Unlearning via Class-Discriminative Pruning","created":"2021-10-22","cited_by_count":115,"area":"safety"},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2208.14933","title":"Membership Inference Attacks by Exploiting Loss Trajectory","created":"2022-08-31","cited_by_count":101,"area":"safety"},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2310.00076","title":"Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks","created":"2023-09-29","cited_by_count":81,"area":"safety"},{"id":"2108.11023","title":"EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning","created":"2021-08-25","cited_by_count":73,"area":"safety"},{"id":"2201.09441","title":"Federated Unlearning with Knowledge Distillation","created":"2022-01-24","cited_by_count":73,"area":"safety"},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2210.09545","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","created":"2022-10-18","cited_by_count":57,"area":"safety"},{"id":"2106.06916","title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization","created":"2021-06-13","cited_by_count":52,"area":"safety"},{"id":"2102.10496","title":"Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits","created":"2021-02-21","cited_by_count":49,"area":"safety"},{"id":"2404.03233","title":"Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning","created":"2024-04-04","cited_by_count":48,"area":"safety"},{"id":"2206.03693","title":"Autoregressive Perturbations for Data Poisoning","created":"2022-06-08","cited_by_count":46,"area":"safety"},{"id":"2106.14851","title":"Data Poisoning Won't Save You From Facial Recognition","created":"2021-06-28","cited_by_count":45,"area":"safety"},{"id":"2403.07362","title":"Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning","created":"2024-03-12","cited_by_count":44,"area":"safety"},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40,"area":"safety"},{"id":"2210.10750","title":"Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queries","created":"2022-10-19","cited_by_count":40,"area":"safety"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2312.15172","title":"Pre-trained Trojan Attacks for Visual Recognition","created":"2023-12-23","cited_by_count":39,"area":"safety"},{"id":"2207.05801","title":"RelaxLoss: Defending Membership Inference Attacks without Losing Utility","created":"2022-07-12","cited_by_count":37,"area":"safety"},{"id":"2312.04095","title":"Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection","created":"2023-12-07","cited_by_count":37,"area":"safety"},{"id":"2202.11202","title":"Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning","created":"2022-02-22","cited_by_count":34,"area":"safety"},{"id":"2209.06997","title":"M^4I: Multi-modal Models Membership Inference","created":"2022-09-15","cited_by_count":34,"area":"safety"},{"id":"2309.08230","title":"A Duty to Forget, a Right to be Assured? Exposing Vulnerabilities in Machine Unlearning Services","created":"2023-09-15","cited_by_count":34,"area":"safety"},{"id":"2210.09671","title":"Not All Poisons are Created Equal: Robust Training against Data Poisoning","created":"2022-10-18","cited_by_count":30,"area":"safety"},{"id":"2211.07160","title":"FedTracker: Furnishing Ownership Verification and Traceability for Federated Learning Model","created":"2022-11-14","cited_by_count":30,"area":"safety"},{"id":"2503.23751","title":"Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks","created":"2025-03-31","cited_by_count":28,"area":"safety"},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2310.18574","title":"Breaking the Trilemma of Privacy, Utility, Efficiency via Controllable Machine Unlearning","created":"2023-10-28","cited_by_count":22,"area":"safety"},{"id":"2312.00761","title":"Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting","created":"2023-12-01","cited_by_count":22,"area":"safety"},{"id":"2302.10894","title":"Red Teaming Deep Neural Networks with Feature Synthesis Tools","created":"2023-02-08","cited_by_count":21,"area":"safety"},{"id":"2404.13588","title":"Machine Unlearning via Null Space Calibration","created":"2024-04-21","cited_by_count":21,"area":"safety"},{"id":"2409.00426","title":"Is Difficulty Calibration All We Need? Towards More Practical Membership Inference Attacks","created":"2024-08-31","cited_by_count":21,"area":"safety"},{"id":"2206.12381","title":"Defending Backdoor Attacks on Vision Transformer via Patch Processing","created":"2022-06-24","cited_by_count":20,"area":"safety"},{"id":"2308.09437","title":"From Hope to Safety: Unlearning Biases of Deep Models via Gradient Penalization in Latent Space","created":"2023-08-18","cited_by_count":20,"area":"safety"},{"id":"2105.06209","title":"DeepObliviate: A Powerful Charm for Erasing Data Residual Memory in Deep Neural Networks","created":"2021-05-13","cited_by_count":19,"area":"safety"},{"id":"2110.13541","title":"Qu-ANTI-zation: Exploiting Quantization Artifacts for Achieving Adversarial Outcomes","created":"2021-10-26","cited_by_count":19,"area":"safety"},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2305.00097","title":"NNSplitter: An Active Defense Solution for DNN Model via Automated Weight Obfuscation","created":"2023-04-28","cited_by_count":16,"area":"safety"},{"id":"2402.01401","title":"An Information Theoretic Approach to Machine Unlearning","created":"2024-02-02","cited_by_count":16,"area":"safety"},{"id":"2507.06908","title":"MIND: A Multi-agent Framework for Zero-shot Harmful Meme Detection","created":"2025-07-09","cited_by_count":15,"area":"safety"},{"id":"2206.08477","title":"Backdoor Attacks on Vision Transformers","created":"2022-06-16","cited_by_count":13,"area":"safety"},{"id":"2207.12405","title":"Versatile Weight Attack via Flipping Limited Bits","created":"2022-07-25","cited_by_count":13,"area":"safety"},{"id":"2402.15109","title":"Remaining-data-free Machine Unlearning by Suppressing Sample Contribution","created":"2024-02-23","cited_by_count":13,"area":"safety"},{"id":"2405.16978","title":"OSLO: One-Shot Label-Only Membership Inference Attacks","created":"2024-05-27","cited_by_count":13,"area":"safety"},{"id":"2406.08288","title":"Decoupling the Class Label and the Target Concept in Machine Unlearning","created":"2024-06-12","cited_by_count":12,"area":"safety"},{"id":"2310.00222","title":"Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learning","created":"2023-09-30","cited_by_count":11,"area":"safety"},{"id":"2312.16823","title":"Layer Attack Unlearning: Fast and Accurate Machine Unlearning via Layer Level Attack and Knowledge Distillation","created":"2023-12-28","cited_by_count":11,"area":"safety"},{"id":"2405.15495","title":"Towards Natural Machine Unlearning","created":"2024-05-24","cited_by_count":11,"area":"safety"},{"id":"2506.13972","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2306.15875","title":"Fake the Real: Backdoor Attack on Deep Speech Classification via Voice Conversion","created":"2023-06-28","cited_by_count":10,"area":"safety"},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2310.05192","title":"HOD: A Benchmark Dataset for Harmful Object Detection","created":"2023-10-08","cited_by_count":10,"area":"safety"},{"id":"2403.08618","title":"SAP: Corrective Machine Unlearning with Scaled Activation Projection for Label Noise Robustness","created":"2024-03-13","cited_by_count":10,"area":"safety"},{"id":"2406.07698","title":"Label Smoothing Improves Machine Unlearning","created":"2024-06-11","cited_by_count":9,"area":"safety"},{"id":"2407.01251","title":"QUEEN: Query Unlearning against Model Extraction","created":"2024-07-01","cited_by_count":9,"area":"safety"},{"id":"2410.05583","title":"NegMerge: Sign-Consensual Weight Merging for Machine Unlearning","created":"2024-10-08","cited_by_count":9,"area":"safety"},{"id":"2410.10128","title":"Edge Unlearning is Not \"on Edge\"! An Adaptive Exact Unlearning System on Resource-Constrained Devices","created":"2024-10-14","cited_by_count":9,"area":"safety"},{"id":"2501.16663","title":"Data Duplication: A Novel Multi-Purpose Attack Paradigm in Machine Unlearning","created":"2025-01-28","cited_by_count":9,"area":"safety"},{"id":"2205.06986","title":"Evaluating Membership Inference Through Adversarial Robustness","created":"2022-05-14","cited_by_count":8,"area":"safety"},{"id":"2211.15918","title":"Similarity Distribution based Membership Inference Attack on Person Re-identification","created":"2022-11-29","cited_by_count":8,"area":"safety"},{"id":"2310.05331","title":"Unlearning with Fisher Masking","created":"2023-10-09","cited_by_count":8,"area":"safety"},{"id":"2403.18774","title":"RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees","created":"2024-01-23","cited_by_count":8,"area":"safety"},{"id":"2503.17198","title":"Jailbreaking the Non-Transferable Barrier via Test-Time Data Disguising","created":"2025-03-21","cited_by_count":8,"area":"safety"},{"id":"2212.10103","title":"VSVC: Backdoor attack against Keyword Spotting based on Voiceprint Selection and Voice Conversion","created":"2022-12-20","cited_by_count":7,"area":"safety"},{"id":"2302.14500","title":"FreeEagle: Detecting Complex Neural Trojans in Data-Free Cases","created":"2023-02-28","cited_by_count":7,"area":"safety"},{"id":"2311.10448","title":"DeepClean: Machine Unlearning on the Cheap by Resetting Privacy Sensitive Weights using the Fisher Diagonal","created":"2023-11-17","cited_by_count":7,"area":"safety"},{"id":"2403.09603","title":"Optimistic Verifiable Training by Controlling Hardware Nondeterminism","created":"2024-03-14","cited_by_count":7,"area":"safety"},{"id":"2405.07562","title":"GLiRA: Black-Box Membership Inference Attack via Knowledge Distillation","created":"2024-05-13","cited_by_count":7,"area":"safety"},{"id":"2411.13553","title":"AI-generated Image Detection: Passive or Watermark?","created":"2024-11-20","cited_by_count":7,"area":"safety"},{"id":"2511.07210","title":"Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization","created":"2025-11-10","cited_by_count":7,"area":"safety"},{"id":"2111.05528","title":"Lightweight machine unlearning in neural network","created":"2021-11-10","cited_by_count":6,"area":"safety"},{"id":"2205.04145","title":"Verifying Integrity of Deep Ensemble Models by Lossless Black-box Watermarking with Sensitive Samples","created":"2022-05-09","cited_by_count":6,"area":"safety"},{"id":"2412.16780","title":"Forget Vectors at Play: Universal Input Perturbations Driving Machine Unlearning in Image Classification","created":"2024-12-21","cited_by_count":6,"area":"safety"},{"id":"2501.11577","title":"Rethinking Membership Inference Attacks Against Transfer Learning","created":"2025-01-20","cited_by_count":6,"area":"safety"},{"id":"2507.21412","title":"Cascading and Proxy Membership Inference Attacks","created":"2025-07-29","cited_by_count":6,"area":"safety"},{"id":"2104.09203","title":"Protecting the Intellectual Properties of Deep Neural Networks with an Additional Class and Steganographic Images","created":"2021-04-19","cited_by_count":5,"area":"safety"},{"id":"2310.03838","title":"Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning","created":"2023-10-05","cited_by_count":5,"area":"safety"},{"id":"2311.03865","title":"When Fairness Meets Privacy: Exploring Privacy Threats in Fair Binary Classifiers via Membership Inference Attacks","created":"2023-11-07","cited_by_count":5,"area":"safety"},{"id":"2406.12516","title":"Update Selective Parameters: Federated Machine Unlearning Based on Model Explanation","created":"2024-06-18","cited_by_count":5,"area":"safety"},{"id":"2407.02747","title":"Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvature","created":"2024-07-03","cited_by_count":5,"area":"safety"},{"id":"2103.09008","title":"The Influence of Dropout on Membership Inference in Differentially Private Models","created":"2021-03-16","cited_by_count":4,"area":"safety"},{"id":"2201.12211","title":"Backdoors Stuck At The Frontdoor: Multi-Agent Backdoor Attacks That Backfire","created":"2022-01-28","cited_by_count":4,"area":"safety"},{"id":"2207.13321","title":"DynaMarks: Defending Against Deep Learning Model Extraction Using Dynamic Watermarking","created":"2022-07-27","cited_by_count":4,"area":"safety"},{"id":"2303.03648","title":"Can Membership Inferencing be Refuted?","created":"2023-03-07","cited_by_count":4,"area":"safety"},{"id":"2401.00996","title":"Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment","created":"2024-01-02","cited_by_count":4,"area":"safety"},{"id":"2404.17674","title":"Center-Based Relaxed Learning Against Membership Inference Attacks","created":"2024-04-26","cited_by_count":4,"area":"safety"},{"id":"2503.22413","title":"Instance-Level Data-Use Auditing of Visual ML Models","created":"2025-03-28","cited_by_count":4,"area":"safety"},{"id":"2504.13610","title":"Fairness and Robustness in Machine Unlearning","created":"2025-04-18","cited_by_count":4,"area":"safety"},{"id":"2509.16391","title":"CoUn: Empowering Machine Unlearning via Contrastive Learning","created":"2025-09-19","cited_by_count":4,"area":"safety"},{"id":"2510.13451","title":"Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts","created":"2025-10-15","cited_by_count":4,"area":"safety"},{"id":"2512.18035","title":"Towards Benchmarking Privacy Vulnerabilities in Selective Forgetting with Large Language Models","created":"2025-12-19","cited_by_count":4,"area":"safety"},{"id":"2601.22359","title":"The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples","created":"2026-01-29","cited_by_count":4,"area":"safety"},{"id":"2109.03975","title":"Membership Inference Attacks Against Temporally Correlated Data in Deep Reinforcement Learning","created":"2021-09-08","cited_by_count":3,"area":"safety"},{"id":"2407.14738","title":"Flatness-aware Sequential Learning Generates Resilient Backdoors","created":"2024-07-20","cited_by_count":3,"area":"safety"},{"id":"2506.20893","title":"On the Necessity of Output Distribution Reweighting for Effective Class Unlearning","created":"2025-06-25","cited_by_count":3,"area":"safety"}],"next_cursor":"100"}