{"total":131,"rows":[{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2302.09880","title":"Towards Unbounded Machine Unlearning","created":"2023-02-20","cited_by_count":268,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2104.10706","title":"Dataset Inference: Ownership Resolution in Machine Learning","created":"2021-04-21","cited_by_count":116,"area":"safety"},{"id":"2208.14933","title":"Membership Inference Attacks by Exploiting Loss Trajectory","created":"2022-08-31","cited_by_count":101,"area":"safety"},{"id":"2302.03162","title":"Protecting Language Generation Models via Invisible Watermarking","created":"2023-02-06","cited_by_count":90,"area":"safety"},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2112.02701","title":"Protecting Intellectual Property of Language Generation APIs with Lexical Watermark","created":"2021-12-05","cited_by_count":84,"area":"safety"},{"id":"2312.04469","title":"On the Learnability of Watermarks for Language Models","created":"2023-12-07","cited_by_count":81,"area":"safety"},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78,"area":"safety"},{"id":"2201.09441","title":"Federated Unlearning with Knowledge Distillation","created":"2022-01-24","cited_by_count":73,"area":"safety"},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2103.04980","title":"Deep Model Intellectual Property Protection via Deep Watermarking","created":"2021-03-08","cited_by_count":54,"area":"safety"},{"id":"2202.05749","title":"Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense","created":"2022-02-11","cited_by_count":47,"area":"safety"},{"id":"2207.05801","title":"RelaxLoss: Defending Membership Inference Attacks without Losing Utility","created":"2022-07-12","cited_by_count":37,"area":"safety"},{"id":"2303.03446","title":"Students Parrot Their Teachers: Membership Inference on Model Distillation","created":"2023-03-06","cited_by_count":33,"area":"safety"},{"id":"2210.03312","title":"Distillation-Resistant Watermarking for Model Protection in NLP","created":"2022-10-07","cited_by_count":30,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2503.23751","title":"Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks","created":"2025-03-31","cited_by_count":28,"area":"safety"},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2406.01983","title":"RKLD: Reverse KL-Divergence-based Knowledge Distillation for Unlearning Personal Information in Large Language Models","created":"2024-06-04","cited_by_count":21,"area":"safety"},{"id":"2205.13680","title":"Membership Inference Attack Using Self Influence Functions","created":"2022-05-26","cited_by_count":20,"area":"safety"},{"id":"2303.09732","title":"Rethinking White-Box Watermarks on Deep Learning Models under Neural Structural Obfuscation","created":"2023-03-17","cited_by_count":20,"area":"safety"},{"id":"2502.12176","title":"Ten Challenging Problems in Federated Foundation Models","created":"2025-02-14","cited_by_count":20,"area":"safety"},{"id":"2404.12922","title":"Is Retain Set All You Need in Machine Unlearning? Restoring Performance of Unlearned Models with Out-Of-Distribution Images","created":"2024-04-19","cited_by_count":18,"area":"safety"},{"id":"2410.23232","title":"Attribute-to-Delete: Machine Unlearning via Datamodel Matching","created":"2024-10-30","cited_by_count":18,"area":"safety"},{"id":"2401.15239","title":"MEA-Defender: A Robust Watermark against Model Extraction Attack","created":"2024-01-26","cited_by_count":17,"area":"safety"},{"id":"2203.02777","title":"Cosine Model Watermarking Against Ensemble Distillation","created":"2022-03-05","cited_by_count":13,"area":"safety"},{"id":"2309.16173","title":"Distill to Delete: Unlearning in Graph Networks with Knowledge Distillation","created":"2023-09-28","cited_by_count":13,"area":"safety"},{"id":"2410.11272","title":"Cognitive Overload Attack:Prompt Injection for Long Context","created":"2024-10-15","cited_by_count":13,"area":"safety"},{"id":"2304.11285","title":"Identifying Appropriate Intellectual Property Protection Mechanisms for Machine Learning Models: A Systematization of Watermarking, Fingerprinting, Model Access, and Attacks","created":"2023-04-22","cited_by_count":12,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2605.24834","title":"Reflect-Guard: Enhancing LLM Safeguards against Adversarial Prompts via Logical Self-Reflection","created":"2026-05-24","cited_by_count":12,"area":"safety"},{"id":"2310.00222","title":"Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learning","created":"2023-09-30","cited_by_count":11,"area":"safety"},{"id":"2312.16823","title":"Layer Attack Unlearning: Fast and Accurate Machine Unlearning via Layer Level Attack and Knowledge Distillation","created":"2023-12-28","cited_by_count":11,"area":"safety"},{"id":"2403.08481","title":"SoK: Reducing the Vulnerability of Fine-tuned Language Models to Membership Inference Attacks","created":"2024-03-13","cited_by_count":11,"area":"safety"},{"id":"2405.17878","title":"An Information Theoretic Evaluation Metric For Strong Unlearning","created":"2024-05-28","cited_by_count":11,"area":"safety"},{"id":"2506.06278","title":"Distillation Robustifies Unlearning","created":"2025-06-06","cited_by_count":11,"area":"safety"},{"id":"2506.13972","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2211.07915","title":"Backdoor Attacks on Time Series: A Generative Approach","created":"2022-11-15","cited_by_count":10,"area":"safety"},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2407.17710","title":"Revisiting Machine Unlearning with Dimensional Alignment","created":"2024-07-25","cited_by_count":10,"area":"safety"},{"id":"2507.05578","title":"The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation","created":"2025-07-08","cited_by_count":10,"area":"safety"},{"id":"2306.02368","title":"Revisiting Data-Free Knowledge Distillation with Poisoned Teachers","created":"2023-06-04","cited_by_count":9,"area":"safety"},{"id":"2404.02462","title":"A Unified Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2024-04-03","cited_by_count":9,"area":"safety"},{"id":"2407.02356","title":"Enable the Right to be Forgotten with Federated Client Unlearning in Medical Imaging","created":"2024-07-02","cited_by_count":9,"area":"safety"},{"id":"2205.06986","title":"Evaluating Membership Inference Through Adversarial Robustness","created":"2022-05-14","cited_by_count":8,"area":"safety"},{"id":"2406.03508","title":"Mutual Information Guided Backdoor Mitigation for Pre-trained Encoders","created":"2024-06-05","cited_by_count":8,"area":"safety"},{"id":"2212.01082","title":"Membership Inference Attacks Against Semantic Segmentation Models","created":"2022-12-02","cited_by_count":7,"area":"safety"},{"id":"2405.07562","title":"GLiRA: Black-Box Membership Inference Attack via Knowledge Distillation","created":"2024-05-13","cited_by_count":7,"area":"safety"},{"id":"2411.01222","title":"$B^4$: A Black-Box Scrubbing Attack on LLM Watermarks","created":"2024-11-02","cited_by_count":7,"area":"safety"},{"id":"2505.23270","title":"Does Machine Unlearning Truly Remove Knowledge?","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2111.01363","title":"Knowledge Cross-Distillation for Membership Privacy","created":"2021-11-02","cited_by_count":6,"area":"safety"},{"id":"2211.15875","title":"Data Poisoning Attack Aiming the Vulnerability of Continual Learning","created":"2022-11-29","cited_by_count":6,"area":"safety"},{"id":"2307.03363","title":"Class-wise Federated Unlearning: Harnessing Active Forgetting with Teacher-Student Memory Generation","created":"2023-07-07","cited_by_count":6,"area":"safety"},{"id":"2402.05453","title":"Mitigating Privacy Risk in Membership Inference by Convex-Concave Loss","created":"2024-02-08","cited_by_count":6,"area":"safety"},{"id":"2403.03846","title":"Can Distillation Mitigate Backdoor Attacks in Pre-trained Encoders?","created":"2024-03-06","cited_by_count":6,"area":"safety"},{"id":"2511.19339","title":"POUR: A Provably Optimal Method for Unlearning Representations via Neural Collapse","created":"2025-11-24","cited_by_count":6,"area":"safety"},{"id":"2602.15143","title":"Protecting Language Models Against Unauthorized Distillation through Trace Rewriting","created":"2026-02-16","cited_by_count":6,"area":"safety"},{"id":"2304.14364","title":"CONSCENDI: A Contrastive and Scenario-Guided Distillation Approach to Guardrail Models for Virtual Assistants","created":"2023-04-27","cited_by_count":5,"area":"safety"},{"id":"2407.10106","title":"DistillSeq: A Framework for Safety Alignment Testing in Large Language Models using Knowledge Distillation","created":"2024-07-14","cited_by_count":5,"area":"safety"},{"id":"2505.14832","title":"SEPS: A Separability Measure for Robust Unlearning in LLMs","created":"2025-05-20","cited_by_count":5,"area":"safety"},{"id":"2505.22037","title":"Jailbreak Distillation: Renewable Safety Benchmarking","created":"2025-05-28","cited_by_count":5,"area":"safety"},{"id":"2209.01994","title":"Federated Zero-Shot Learning for Visual Recognition","created":"2022-09-05","cited_by_count":4,"area":"safety"},{"id":"2308.13269","title":"Heterogeneous Decentralized Machine Unlearning with Seed Model Distillation","created":"2023-08-25","cited_by_count":4,"area":"safety"},{"id":"2401.00996","title":"Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment","created":"2024-01-02","cited_by_count":4,"area":"safety"},{"id":"2407.12069","title":"Unlearning Personal Data from a Single Image","created":"2024-07-16","cited_by_count":4,"area":"safety"},{"id":"2412.08969","title":"Deep Learning Model Security: Threats and Defenses","created":"2024-12-12","cited_by_count":4,"area":"safety"},{"id":"2505.06027","title":"Unilogit: Robust Machine Unlearning for LLMs Using Uniform-Target Self-Distillation","created":"2025-05-09","cited_by_count":4,"area":"safety"},{"id":"2505.15209","title":"DUSK: Do Not Unlearn Shared Knowledge","created":"2025-05-21","cited_by_count":4,"area":"safety"},{"id":"2506.01318","title":"Unlearning's Blind Spots: Over-Unlearning and Prototypical Relearning Attack","created":"2025-06-02","cited_by_count":4,"area":"safety"},{"id":"2601.22359","title":"The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples","created":"2026-01-29","cited_by_count":4,"area":"safety"},{"id":"2604.15166","title":"Class Unlearning via Depth-Aware Removal of Forget-Specific Directions","created":"2026-04-16","cited_by_count":4,"area":"safety"},{"id":"2102.03523","title":"Ownership Verification of DNN Architectures via Hardware Cache Side Channels","created":"2021-02-06","cited_by_count":3,"area":"safety"},{"id":"2206.05565","title":"NeuGuard: Lightweight Neuron-Guided Defense against Membership Inference Attacks","created":"2022-06-11","cited_by_count":3,"area":"safety"},{"id":"2401.10375","title":"Foundation Models in Federated Learning: Assessing Backdoor Vulnerabilities","created":"2024-01-18","cited_by_count":3,"area":"safety"},{"id":"2407.14738","title":"Flatness-aware Sequential Learning Generates Resilient Backdoors","created":"2024-07-20","cited_by_count":3,"area":"safety"},{"id":"2409.06130","title":"Revisiting Black-Box Model Ownership Verification through Information Theory","created":"2024-09-10","cited_by_count":3,"area":"safety"},{"id":"2501.13683","title":"Unlearning Clients, Features and Samples in Vertical Federated Learning","created":"2025-01-23","cited_by_count":3,"area":"safety"},{"id":"2503.06519","title":"Can Small Language Models Reliably Resist Jailbreak Attacks? A Comprehensive Evaluation","created":"2025-03-09","cited_by_count":3,"area":"safety"},{"id":"2506.17231","title":"Efficient and Stealthy Jailbreak Attacks via Adversarial Prompt Distillation from LLMs to SLMs","created":"2025-05-26","cited_by_count":3,"area":"safety"},{"id":"2509.06796","title":"Imitative Membership Inference Attack","created":"2025-09-08","cited_by_count":3,"area":"safety"},{"id":"2308.09971","title":"Disposable Transfer Learning for Selective Source Task Unlearning","created":"2023-08-19","cited_by_count":2,"area":"safety"},{"id":"2408.07587","title":"FedQUIT: On-Device Federated Unlearning via a Quasi-Competent Virtual Teacher","created":"2024-08-14","cited_by_count":2,"area":"safety"},{"id":"2502.15836","title":"Soft Token Attacks Cannot Reliably Audit Unlearning in Large Language Models","created":"2025-02-20","cited_by_count":2,"area":"safety"},{"id":"2502.18518","title":"Swallowing the Poison Pills: Insights from Vulnerability Disparity Among LLMs","created":"2025-02-23","cited_by_count":2,"area":"safety"},{"id":"2503.22539","title":"Efficient Verified Machine Unlearning For Distillation","created":"2025-03-28","cited_by_count":2,"area":"safety"},{"id":"2503.23748","title":"THEMIS: Towards Practical Intellectual Property Protection for Post-Deployment On-Device Deep Learning Models","created":"2025-03-31","cited_by_count":2,"area":"safety"},{"id":"2506.07356","title":"Safety-Aligned Weights Are Not Enough: Refusal-Teacher-Guided Finetuning Enhances Safety and Downstream Performance under Harmful Finetuning Attacks","created":"2025-06-09","cited_by_count":2,"area":"safety"},{"id":"2605.31293","title":"Divergence Decoding: Inference-Time Unlearning via Auxiliary Models","created":"2026-05-29","cited_by_count":2,"area":"safety"},{"id":"2607.19424","title":"JailMeter: An Evidence-Based Evaluation Framework for Jailbreak Attacks on Large Language Models","created":"2026-07-20","cited_by_count":2,"area":"safety"},{"id":"2305.05503","title":"BadCS: A Backdoor Attack Framework for Code search","created":"2023-05-09","cited_by_count":1,"area":"safety"},{"id":"2308.14322","title":"Machine Unlearning Methodology base on Stochastic Teacher Network","created":"2023-08-28","cited_by_count":1,"area":"safety"},{"id":"2401.11365","title":"Confidence Preservation Property in Knowledge Distillation Abstractions","created":"2024-01-21","cited_by_count":1,"area":"safety"},{"id":"2411.17126","title":"From Machine Learning to Machine Unlearning: Complying with GDPR's Right to be Forgotten while Maintaining Business Value of Predictive Models","created":"2024-11-26","cited_by_count":1,"area":"safety"},{"id":"2502.07011","title":"DROP: Poison Dilution via Knowledge Distillation for Federated Learning","created":"2025-02-10","cited_by_count":1,"area":"safety"},{"id":"2505.10351","title":"A Unified and Scalable Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2025-05-15","cited_by_count":1,"area":"safety"},{"id":"2505.11837","title":"On Membership Inference Attacks in Knowledge Distillation","created":"2025-05-17","cited_by_count":1,"area":"safety"},{"id":"2510.04966","title":"ActiveMark: on watermarking of visual foundation models via massive activations","created":"2025-10-06","cited_by_count":1,"area":"safety"},{"id":"2602.03379","title":"Rethinking Benign Relearning: Syntax as the Hidden Driver of Unlearning Failures","created":"2026-02-03","cited_by_count":1,"area":"safety"}],"next_cursor":"100"}