{"total":1436,"rows":[{"id":"2202.07646","title":"Quantifying Memorization Across Neural Language Models","created":"2022-02-15","cited_by_count":763,"area":null},{"id":"2107.06499","title":"Deduplicating Training Data Makes Language Models Better","created":"2021-07-14","cited_by_count":714,"area":null},{"id":"2102.02079","title":"Federated Learning on Non-IID Data Silos: An Experimental Study","created":"2021-02-03","cited_by_count":568,"area":null},{"id":"2304.11406","title":"LaMP: When Large Language Models Meet Personalization","created":"2023-04-22","cited_by_count":437,"area":null},{"id":"2110.05679","title":"Large Language Models Can Be Strong Differentially Private Learners","created":"2021-10-12","cited_by_count":412,"area":null},{"id":"2110.06500","title":"Differentially Private Fine-tuning of Language Models","created":"2021-10-13","cited_by_count":400,"area":null},{"id":"2310.16789","title":"Detecting Pretraining Data from Large Language Models","created":"2023-10-25","cited_by_count":387,"area":null},{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2104.07586","title":"See through Gradients: Image Batch Recovery via GradInversion","created":"2021-04-15","cited_by_count":326,"area":null},{"id":"2202.06539","title":"Deduplicating Training Data Mitigates Privacy Risks in Language Models","created":"2022-02-14","cited_by_count":314,"area":null},{"id":"2109.13916","title":"Unsolved Problems in ML Safety","created":"2021-09-28","cited_by_count":292,"area":null},{"id":"2310.17623","title":"Proving Test Set Contamination in Black Box Language Models","created":"2023-10-26","cited_by_count":230,"area":null},{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199,"area":null},{"id":"2202.05520","title":"What Does it Mean for a Language Model to Preserve Privacy?","created":"2022-02-11","cited_by_count":195,"area":null},{"id":"2101.04898","title":"Unlearnable Examples: Making Personal Data Unexploitable","created":"2021-01-13","cited_by_count":193,"area":null},{"id":"2206.00719","title":"Dataset Distillation using Neural Feature Regression","created":"2022-06-01","cited_by_count":177,"area":null},{"id":"2309.17410","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","created":"2023-09-29","cited_by_count":158,"area":null},{"id":"2112.12938","title":"Counterfactual Memorization in Neural Language Models","created":"2021-12-24","cited_by_count":156,"area":null},{"id":"2110.14051","title":"A Unified Survey on Anomaly, Novelty, Open-Set, and Out-of-Distribution Detection: Solutions and Future Challenges","created":"2021-10-26","cited_by_count":154,"area":null},{"id":"2201.04845","title":"Reconstructing Training Data with Informed Adversaries","created":"2022-01-13","cited_by_count":148,"area":null},{"id":"2406.04244","title":"Benchmark Data Contamination of Large Language Models: A Survey","created":"2024-06-06","cited_by_count":147,"area":null},{"id":"2206.10469","title":"The Privacy Onion Effect: Memorization is Relative","created":"2022-06-21","cited_by_count":136,"area":null},{"id":"2206.07758","title":"Reconstructing Training Data from Trained Neural Networks","created":"2022-06-15","cited_by_count":133,"area":null},{"id":"2307.01881","title":"ProPILE: Probing Privacy Leakage in Large Language Models","created":"2023-07-04","cited_by_count":129,"area":null},{"id":"2102.06387","title":"The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation","created":"2021-02-12","cited_by_count":128,"area":null},{"id":"2402.06954","title":"OpenFedLLM: Training Large Language Models on Decentralized Private Data via Federated Learning","created":"2024-02-10","cited_by_count":128,"area":null},{"id":"2301.07014","title":"Dataset Distillation: A Comprehensive Review","created":"2023-01-17","cited_by_count":127,"area":null},{"id":"2111.09509","title":"How much do language models copy from their training data? Evaluating linguistic novelty in text generation using RAVEN","created":"2021-11-18","cited_by_count":124,"area":null},{"id":"2305.08846","title":"Privacy Auditing with One (1) Training Run","created":"2023-05-15","cited_by_count":123,"area":null},{"id":"2206.00240","title":"Privacy for Free: How does Dataset Condensation Help Privacy?","created":"2022-06-01","cited_by_count":120,"area":null},{"id":"2302.04062","title":"Machine Learning for Synthetic Data Generation: A Review","created":"2023-02-08","cited_by_count":120,"area":null},{"id":"2204.08570","title":"A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability","created":"2022-04-18","cited_by_count":118,"area":null},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2301.05603","title":"A Comprehensive Survey of Dataset Distillation","created":"2023-01-13","cited_by_count":115,"area":null},{"id":"2210.14348","title":"Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipe","created":"2022-10-25","cited_by_count":108,"area":null},{"id":"2110.03620","title":"Hyperparameter Tuning with Renyi Differential Privacy","created":"2021-10-07","cited_by_count":104,"area":null},{"id":"2204.05255","title":"Narcissus: A Practical Clean-Label Backdoor Attack with Limited Information","created":"2022-04-11","cited_by_count":103,"area":null},{"id":"2404.02936","title":"Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Models","created":"2024-04-03","cited_by_count":103,"area":null},{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2110.14962","title":"Gradient Inversion with Generative Image Prior","created":"2021-10-28","cited_by_count":101,"area":null},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2407.11016","title":"LongLaMP: A Benchmark for Personalized Long-form Text Generation","created":"2024-06-27","cited_by_count":97,"area":null},{"id":"2309.11765","title":"Privacy-Preserving In-Context Learning with Differentially Private Few-Shot Generation","created":"2023-09-21","cited_by_count":96,"area":null},{"id":"2202.00443","title":"The Text Anonymization Benchmark (TAB): A Dedicated Corpus and Evaluation Framework for Text Anonymization","created":"2022-01-25","cited_by_count":95,"area":null},{"id":"2104.14380","title":"PPFL: Privacy-preserving Federated Learning with Trusted Execution Environments","created":"2021-04-29","cited_by_count":93,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2205.07424","title":"Trustworthy Graph Neural Networks: Aspects, Methods and Trends","created":"2022-05-16","cited_by_count":89,"area":null},{"id":"2106.09352","title":"Large Scale Private Learning via Low-rank Reparametrization","created":"2021-06-17","cited_by_count":88,"area":null},{"id":"2206.07136","title":"Automatic Clipping: Differentially Private Deep Learning Made Easier and Stronger","created":"2022-06-14","cited_by_count":88,"area":null},{"id":"2212.06470","title":"Position: Considerations for Differentially Private Learning with Large-Scale Public Pretraining","created":"2022-12-13","cited_by_count":88,"area":null},{"id":"2201.12328","title":"Toward Training at ImageNet Scale with Differential Privacy","created":"2022-01-28","cited_by_count":87,"area":null},{"id":"2102.12677","title":"Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learning","created":"2021-02-25","cited_by_count":86,"area":null},{"id":"2111.00197","title":"Backdoor Pre-trained Models Can Transfer to All","created":"2021-10-30","cited_by_count":86,"area":null},{"id":"2205.13383","title":"BppAttack: Stealthy and Efficient Trojan Attacks against Deep Neural Networks via Image Quantization and Contrastive Adversarial Learning","created":"2022-05-26","cited_by_count":86,"area":null},{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86,"area":null},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2201.08135","title":"Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challenges","created":"2022-01-20","cited_by_count":84,"area":null},{"id":"2103.06191","title":"A Study of Face Obfuscation in ImageNet","created":"2021-03-10","cited_by_count":83,"area":null},{"id":"2305.15594","title":"Flocks of Stochastic Parrots: Differentially Private Prompt Learning for Large Language Models","created":"2023-05-24","cited_by_count":83,"area":null},{"id":"2103.12010","title":"Federated Quantum Machine Learning","created":"2021-03-22","cited_by_count":82,"area":null},{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81,"area":null},{"id":"2109.12273","title":"FedProc: Prototypical Contrastive Federated Learning on Non-IID data","created":"2021-09-25","cited_by_count":81,"area":null},{"id":"2107.03451","title":"Anticipating Safety Issues in E2E Conversational AI: Framework and Tooling","created":"2021-07-07","cited_by_count":78,"area":null},{"id":"2106.01221","title":"Differential Privacy for Text Analytics via Natural Text Sanitization","created":"2021-06-02","cited_by_count":77,"area":null},{"id":"2301.07573","title":"Synthcity: facilitating innovative use cases of synthetic data in different data modalities","created":"2023-01-18","cited_by_count":76,"area":null},{"id":"2201.10787","title":"Variational Model Inversion Attacks","created":"2022-01-26","cited_by_count":75,"area":null},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2111.09278","title":"Differentially Private Federated Learning on Heterogeneous Data","created":"2021-11-17","cited_by_count":74,"area":null},{"id":"2102.05855","title":"Differential Privacy Dynamics of Langevin Diffusion and Noisy Gradient Descent","created":"2021-02-11","cited_by_count":73,"area":null},{"id":"2302.04460","title":"Bag of Tricks for Training Data Extraction from Language Models","created":"2023-02-09","cited_by_count":70,"area":null},{"id":"2307.09218","title":"A Comprehensive Survey of Forgetting in Deep Learning Beyond Continual Learning","created":"2023-07-16","cited_by_count":69,"area":null},{"id":"2311.13647","title":"Language Model Inversion","created":"2023-11-22","cited_by_count":68,"area":null},{"id":"2111.07380","title":"Eluding Secure Aggregation in Federated Learning via Model Inconsistency","created":"2021-11-14","cited_by_count":67,"area":null},{"id":"2205.03257","title":"Synthetic Data -- what, why and how?","created":"2022-05-06","cited_by_count":67,"area":null},{"id":"2210.00038","title":"Differentially Private Optimization on Large Model at Small Cost","created":"2022-09-30","cited_by_count":65,"area":null},{"id":"2209.11715","title":"The \"Beatrix'' Resurrections: Robust Backdoor Detection via Gram Matrices","created":"2022-09-23","cited_by_count":63,"area":null},{"id":"2303.11568","title":"Large AI Models in Health Informatics: Applications, Challenges, and the Future","created":"2023-03-21","cited_by_count":61,"area":null},{"id":"2505.24832","title":"How much do language models memorize?","created":"2025-05-30","cited_by_count":61,"area":null},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60,"area":null},{"id":"2104.14222","title":"Privacy-Preserving Portrait Matting","created":"2021-04-29","cited_by_count":60,"area":null},{"id":"2106.03216","title":"On Memorization in Probabilistic Deep Generative Models","created":"2021-06-06","cited_by_count":60,"area":null},{"id":"2106.07873","title":"Reverse Engineering of Generative Models: Inferring Model Hyperparameters from Generated Images","created":"2021-06-15","cited_by_count":58,"area":null},{"id":"2108.04417","title":"Privacy-Preserving Machine Learning: Methods, Challenges and Directions","created":"2021-08-10","cited_by_count":58,"area":null},{"id":"2203.00846","title":"PUMA: Performance Unchanged Model Augmentation for Training Data Removal","created":"2022-03-02","cited_by_count":58,"area":null},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58,"area":null},{"id":"2211.06550","title":"TAPAS: a Toolbox for Adversarial Privacy Auditing of Synthetic Data","created":"2022-11-12","cited_by_count":57,"area":null},{"id":"2310.14942","title":"Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand","created":"2023-10-09","cited_by_count":57,"area":null},{"id":"2312.03724","title":"DP-OPT: Make Large Language Model Your Privacy-Preserving Prompt Engineer","created":"2023-11-27","cited_by_count":57,"area":null},{"id":"2402.03358","title":"A Comprehensive Survey on Graph Reduction: Sparsification, Coarsening, and Condensation","created":"2024-01-29","cited_by_count":57,"area":null},{"id":"2101.02032","title":"Socially Responsible AI Algorithms: Issues, Purposes, and Challenges","created":"2021-01-01","cited_by_count":56,"area":null},{"id":"2203.01925","title":"Label-Only Model Inversion Attacks via Boundary Repulsion","created":"2022-03-03","cited_by_count":56,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2407.17817","title":"Demystifying Verbatim Memorization in Large Language Models","created":"2024-07-25","cited_by_count":56,"area":null},{"id":"2409.14781","title":"Pretraining Data Detection for Large Language Models: A Divergence-based Calibration Method","created":"2024-09-23","cited_by_count":55,"area":null},{"id":"2203.11481","title":"Mixed Differential Privacy in Computer Vision","created":"2022-03-22","cited_by_count":54,"area":null},{"id":"2103.10013","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","created":"2021-03-18","cited_by_count":53,"area":null},{"id":"2203.11894","title":"GradViT: Gradient Inversion of Vision Transformers","created":"2022-03-22","cited_by_count":53,"area":null},{"id":"2312.16475","title":"Federated Continual Learning via Knowledge Fusion: A Survey","created":"2023-12-27","cited_by_count":53,"area":null},{"id":"2106.03408","title":"Antipodes of Label Differential Privacy: PATE and ALIBI","created":"2021-06-07","cited_by_count":52,"area":null},{"id":"2110.08760","title":"Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implications","created":"2021-10-17","cited_by_count":52,"area":null}],"next_cursor":"100"}