{"total":74,"rows":[{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2310.12560","title":"Fast Model Debias with Machine Unlearning","created":"2023-10-19","cited_by_count":72,"area":"safety"},{"id":"2302.12580","title":"Membership Inference Attacks against Synthetic Data through Overfitting Detection","created":"2023-02-24","cited_by_count":66,"area":"safety"},{"id":"2311.09127","title":"Jailbreaking GPT-4V via Self-Adversarial Attacks with System Prompts","created":"2023-11-15","cited_by_count":65,"area":"safety"},{"id":"2105.10872","title":"CMUA-Watermark: A Cross-Model Universal Adversarial Watermark for Combating Deepfakes","created":"2021-05-23","cited_by_count":56,"area":"safety"},{"id":"2305.06321","title":"SepMark: Deep Separable Watermarking for Unified Source Tracing and Deepfake Detection","created":"2023-05-10","cited_by_count":44,"area":"safety"},{"id":"2403.07362","title":"Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning","created":"2024-03-12","cited_by_count":44,"area":"safety"},{"id":"2410.18057","title":"CLEAR: Character Unlearning in Textual and Visual Modalities","created":"2024-10-23","cited_by_count":39,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2111.07608","title":"Property Inference Attacks Against GANs","created":"2021-11-15","cited_by_count":33,"area":"safety"},{"id":"2306.07754","title":"Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis","created":"2023-06-13","cited_by_count":23,"area":"safety"},{"id":"2308.09437","title":"From Hope to Safety: Unlearning Biases of Deep Models via Gradient Penalization in Latent Space","created":"2023-08-18","cited_by_count":20,"area":"safety"},{"id":"2204.01960","title":"FaceSigns: Semi-Fragile Neural Watermarks for Media Authentication and Countering Deepfakes","created":"2022-04-05","cited_by_count":18,"area":"safety"},{"id":"2211.11656","title":"SIFU: Sequential Informed Federated Unlearning for Efficient and Provable Client Unlearning in Federated Optimization","created":"2022-11-21","cited_by_count":18,"area":"safety"},{"id":"2407.11867","title":"Targeted Unlearning with Single Layer Unlearning Gradient","created":"2024-07-16","cited_by_count":18,"area":"safety"},{"id":"2102.07762","title":"Membership Inference Attacks are Easier on Difficult Problems","created":"2021-02-15","cited_by_count":17,"area":"safety"},{"id":"2202.13295","title":"Efficient Attribute Unlearning: Towards Selective Removal of Input Attributes from Feature Representations","created":"2022-02-27","cited_by_count":17,"area":"safety"},{"id":"2302.12685","title":"Active Membership Inference Attack under Local Differential Privacy in Federated Learning","created":"2023-02-24","cited_by_count":17,"area":"safety"},{"id":"2311.01357","title":"Robust Identity Perceptual Watermark Against Deepfake Face Swapping","created":"2023-11-02","cited_by_count":17,"area":"safety"},{"id":"2402.09477","title":"PANORAMIA: Privacy Auditing of Machine Learning Models without Retraining","created":"2024-02-12","cited_by_count":17,"area":"safety"},{"id":"2303.09272","title":"Copyright Protection and Accountability of Generative AI:Attack, Watermarking and Attribution","created":"2023-03-15","cited_by_count":15,"area":"safety"},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2307.04550","title":"Gradient Surgery for One-shot Unlearning on Generative Model","created":"2023-07-10","cited_by_count":12,"area":"safety"},{"id":"2309.14054","title":"Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networks","created":"2023-09-25","cited_by_count":11,"area":"safety"},{"id":"2405.17462","title":"Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity","created":"2024-05-23","cited_by_count":11,"area":"safety"},{"id":"2106.00660","title":"Markpainting: Adversarial Machine Learning meets Inpainting","created":"2021-06-01","cited_by_count":9,"area":"safety"},{"id":"2406.07698","title":"Label Smoothing Improves Machine Unlearning","created":"2024-06-11","cited_by_count":9,"area":"safety"},{"id":"2310.07726","title":"Warfare:Breaking the Watermark Protection of AI-Generated Content","created":"2023-09-27","cited_by_count":8,"area":"safety"},{"id":"2310.11970","title":"Quantifying Privacy Risks of Prompts in Visual Prompt Learning","created":"2023-10-18","cited_by_count":8,"area":"safety"},{"id":"2208.07522","title":"Reliable Decision from Multiple Subtasks through Threshold Optimization: Content Moderation in the Wild","created":"2022-08-16","cited_by_count":7,"area":"safety"},{"id":"2511.07210","title":"Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization","created":"2025-11-10","cited_by_count":7,"area":"safety"},{"id":"2607.07907","title":"Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks","created":"2026-07-08","cited_by_count":7,"area":"safety"},{"id":"2307.03363","title":"Class-wise Federated Unlearning: Harnessing Active Forgetting with Teacher-Student Memory Generation","created":"2023-07-07","cited_by_count":6,"area":"safety"},{"id":"2311.05478","title":"Robust Retraining-free GAN Fingerprinting via Personalized Normalization","created":"2023-11-09","cited_by_count":6,"area":"safety"},{"id":"2410.01906","title":"Social Media Authentication and Combating Deepfakes using Semi-fragile Invisible Image Watermarking","created":"2024-10-02","cited_by_count":6,"area":"safety"},{"id":"2506.23731","title":"Radioactive Watermarks in Diffusion and Autoregressive Image Generative Models","created":"2025-06-30","cited_by_count":6,"area":"safety"},{"id":"2312.14895","title":"FAST: Feature Aware Similarity Thresholding for Weak Unlearning in Black-Box Generative Models","created":"2023-12-22","cited_by_count":5,"area":"safety"},{"id":"2401.08998","title":"Attack and Reset for Unlearning: Exploiting Adversarial Noise toward Machine Unlearning through Parameter Re-initialization","created":"2024-01-17","cited_by_count":5,"area":"safety"},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2404.02067","title":"Red-Teaming Segment Anything Model","created":"2024-04-02","cited_by_count":4,"area":"safety"},{"id":"2407.12069","title":"Unlearning Personal Data from a Single Image","created":"2024-07-16","cited_by_count":4,"area":"safety"},{"id":"2512.18035","title":"Towards Benchmarking Privacy Vulnerabilities in Selective Forgetting with Large Language Models","created":"2025-12-19","cited_by_count":4,"area":"safety"},{"id":"2203.16463","title":"Perfectly Accurate Membership Inference by a Dishonest Central Server in Federated Learning","created":"2022-03-30","cited_by_count":3,"area":"safety"},{"id":"2411.11006","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2503.09330","title":"Group-robust Machine Unlearning","created":"2025-03-12","cited_by_count":3,"area":"safety"},{"id":"2407.16686","title":"Can Large Language Models Automatically Jailbreak GPT-4V?","created":"2024-07-23","cited_by_count":2,"area":"safety"},{"id":"2409.02792","title":"UnLearning from Experience to Avoid Spurious Correlations","created":"2024-09-04","cited_by_count":2,"area":"safety"},{"id":"2410.09947","title":"Efficient Federated Unlearning under Plausible Deniability","created":"2024-10-13","cited_by_count":2,"area":"safety"},{"id":"2502.14558","title":"Model Inversion Attack against Federated Unlearning","created":"2025-02-20","cited_by_count":2,"area":"safety"},{"id":"2310.09479","title":"Unified High-binding Watermark for Unconditional Image Generation Models","created":"2023-10-14","cited_by_count":1,"area":"safety"},{"id":"2402.12861","title":"From Mean to Extreme: Formal Differential Privacy Bounds on the Success of Real-World Data Reconstruction Attacks","created":"2024-02-20","cited_by_count":1,"area":"safety"},{"id":"2403.05842","title":"TokenMark: A Modality-Agnostic Watermark for Pre-trained Transformers","created":"2024-03-09","cited_by_count":1,"area":"safety"},{"id":"2412.16512","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","created":"2024-12-21","cited_by_count":1,"area":"safety"},{"id":"2507.18794","title":"CLEAR: Unlearning Spurious Style-Content Associations with Contrastive LEarning with Anti-contrastive Regularization","created":"2025-07-24","cited_by_count":1,"area":"safety"},{"id":"2512.13317","title":"Face Identity Unlearning for Retrieval via Embedding Dispersion","created":"2025-12-15","cited_by_count":1,"area":"safety"},{"id":"2411.03363","title":"TDDBench: A Benchmark for Training data detection","created":"2024-11-05","cited_by_count":0,"area":"safety"},{"id":"2503.05684","title":"Fairness-Aware Low-Rank Representation Fine-Tuning","created":"2025-03-07","cited_by_count":0,"area":"safety"},{"id":"2504.21042","title":"What's Pulling the Strings? Evaluating Integrity and Attribution in AI Training and Inference through Concept Shift","created":"2025-04-28","cited_by_count":0,"area":"safety"},{"id":"2505.18783","title":"Soft Weighted Machine Unlearning","created":"2025-05-24","cited_by_count":0,"area":"safety"},{"id":"2506.04712","title":"UNO: Unlearning via Orthogonalization in Generative models","created":"2025-06-05","cited_by_count":0,"area":"safety"},{"id":"2509.07456","title":"Bias-Aware Machine Unlearning: Towards Fairer Vision Models via Controllable Forgetting","created":"2025-09-09","cited_by_count":0,"area":"safety"},{"id":"2511.04949","title":"DeepForgeSeal: Latent Space-Driven Semi-Fragile Watermarking for Deepfake Detection Using Adversarial Reinforcement Learning","created":"2025-11-07","cited_by_count":0,"area":"safety"},{"id":"2512.22303","title":"Attack-Aware Deepfake Detection under Counter-Forensic Manipulations","created":"2025-12-26","cited_by_count":0,"area":"safety"},{"id":"2602.03316","title":"Invisible Clean-Label Backdoor Attacks for Generative Data Augmentation","created":"2026-02-03","cited_by_count":0,"area":"safety"},{"id":"2603.23178","title":"SAiW: Source-Attributable Invisible Watermarking for Proactive Deepfake Defense","created":"2026-03-24","cited_by_count":0,"area":"safety"},{"id":"2604.08111","title":"Bias Redistribution in Visual Machine Unlearning: Does Forgetting One Group Harm Another?","created":"2026-04-09","cited_by_count":0,"area":"safety"},{"id":"2604.26519","title":"GIFGuard: Proactive Forensics against Deepfakes in Facial GIFs via Spatiotemporal Watermarking","created":"2026-04-29","cited_by_count":0,"area":"safety"},{"id":"2605.17658","title":"When a Zero-Shooter Cheats: Improving Age Estimation via Activation Steering","created":"2026-05-17","cited_by_count":0,"area":"safety"},{"id":"2606.29759","title":"GoodDiffusion: Proactive Copyright Protection for Diffusion Bridge Models via Learnable Sample-specific Signatures","created":"2026-06-29","cited_by_count":0,"area":"safety"},{"id":"2606.29880","title":"IREU: Identity-Related Encoder-Only Unlearning for Customized Portrait Generation","created":"2026-06-29","cited_by_count":0,"area":"safety"},{"id":"2607.05726","title":"Association Restoration Test: Revealing Restorable Shortcuts after Unlearning","created":"2026-07-07","cited_by_count":0,"area":"safety"},{"id":"2608.30087","title":"The Nearest Target Is the Wrong One: Target Separation in Arc2Face Identity Unlearning","created":"2026-08-30","cited_by_count":0,"area":"safety"}],"next_cursor":null}