{"total":70,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248,"area":"safety"},{"id":"2206.10469","title":"The Privacy Onion Effect: Memorization is Relative","created":"2022-06-21","cited_by_count":136,"area":null},{"id":"2302.01316","title":"Are Diffusion Models Vulnerable to Membership Inference Attacks?","created":"2023-02-02","cited_by_count":136,"area":"diffusion"},{"id":"2205.03257","title":"Synthetic Data -- what, why and how?","created":"2022-05-06","cited_by_count":67,"area":null},{"id":"2211.06550","title":"TAPAS: a Toolbox for Adversarial Privacy Auditing of Synthetic Data","created":"2022-11-12","cited_by_count":57,"area":null},{"id":"2310.15007","title":"Did the Neurons Read your Book? Document-level Membership Inference for Large Language Models","created":"2023-10-23","cited_by_count":56,"area":"safety"},{"id":"2307.06272","title":"Exposing the Fake: Effective Diffusion-Generated Images Detection","created":"2023-07-12","cited_by_count":48,"area":"diffusion"},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2402.09363","title":"Copyright Traps for Large Language Models","created":"2024-02-14","cited_by_count":37,"area":null},{"id":"2111.07608","title":"Property Inference Attacks Against GANs","created":"2021-11-15","cited_by_count":33,"area":"safety"},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2306.10308","title":"Achilles' Heels: Vulnerable Record Identification in Synthetic Data Publishing","created":"2023-06-17","cited_by_count":28,"area":null},{"id":"2210.07714","title":"CrowdGuard: Federated Backdoor Detection in Federated Learning","created":"2022-10-14","cited_by_count":27,"area":null},{"id":"2301.10053","title":"A Linear Reconstruction Approach for Attribute Inference Attacks against Synthetic Data","created":"2023-01-24","cited_by_count":24,"area":null},{"id":"2105.02866","title":"Membership Inference Attacks on Deep Regression Models for Neuroimaging","created":"2021-05-06","cited_by_count":22,"area":"safety"},{"id":"2310.00339","title":"FedLPA: One-shot Federated Learning with Layer-Wise Posterior Aggregation","created":"2023-09-30","cited_by_count":22,"area":null},{"id":"2210.08871","title":"Industry-Scale Orchestrated Federated Learning for Drug Discovery","created":"2022-10-17","cited_by_count":19,"area":null},{"id":"2307.01701","title":"Synthetic is all you need: removing the auxiliary data assumption for membership inference attacks against synthetic data","created":"2023-07-04","cited_by_count":18,"area":"safety"},{"id":"2302.12685","title":"Active Membership Inference Attack under Local Differential Privacy in Federated Learning","created":"2023-02-24","cited_by_count":17,"area":"safety"},{"id":"2312.05114","title":"The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against \"Truly Anonymous\" Synthetic Datasets","created":"2023-12-08","cited_by_count":14,"area":null},{"id":"2402.09225","title":"Is My Data in Your AI? Membership Inference Test (MINT) applied to Face Biometrics","created":"2024-02-14","cited_by_count":13,"area":"safety"},{"id":"2205.03105","title":"LPGNet: Link Private Graph Networks for Node Classification","created":"2022-05-06","cited_by_count":12,"area":null},{"id":"2206.12401","title":"Debiasing Learning for Membership Inference Attacks Against Recommender Systems","created":"2022-06-24","cited_by_count":12,"area":"safety"},{"id":"2505.01524","title":"The DCR Delusion: Measuring the Privacy Risk of Synthetic Data","created":"2025-05-02","cited_by_count":11,"area":"safety"},{"id":"2207.12535","title":"Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning","created":"2022-07-25","cited_by_count":10,"area":"safety"},{"id":"2303.01230","title":"Synthetic Data: Methods, Use Cases, and Risks","created":"2023-03-01","cited_by_count":10,"area":null},{"id":"2202.04856","title":"PPA: Preference Profiling Attack Against Federated Learning","created":"2022-02-10","cited_by_count":9,"area":null},{"id":"2404.09536","title":"Noiseless Privacy-Preserving Decentralized Learning","created":"2024-04-15","cited_by_count":9,"area":null},{"id":"2210.07376","title":"ScionFL: Efficient and Robust Secure Quantized Aggregation","created":"2022-10-13","cited_by_count":8,"area":null},{"id":"2212.04371","title":"Skellam Mixture Mechanism: a Novel Approach to Federated Learning with Differential Privacy","created":"2022-12-08","cited_by_count":7,"area":null},{"id":"2104.10561","title":"Turning Federated Learning Systems Into Covert Channels","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2111.01363","title":"Knowledge Cross-Distillation for Membership Privacy","created":"2021-11-02","cited_by_count":6,"area":"safety"},{"id":"2211.05249","title":"QuerySnout: Automating the Discovery of Attribute Inference Attacks against Query-Based Systems","created":"2022-11-09","cited_by_count":6,"area":null},{"id":"2506.16666","title":"The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditing","created":"2025-06-20","cited_by_count":5,"area":null},{"id":"2105.06300","title":"Privacy Inference Attacks and Defenses in Cloud-based Deep Neural Network: A Survey","created":"2021-05-13","cited_by_count":4,"area":null},{"id":"2205.06506","title":"Collaborative Drug Discovery: Inference-level Data Protection Perspective","created":"2022-05-13","cited_by_count":4,"area":null},{"id":"2209.04022","title":"Privacy of Autonomous Vehicles: Risks, Protection Methods, and Future Directions","created":"2022-09-08","cited_by_count":4,"area":null},{"id":"2310.12665","title":"SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models","created":"2023-10-19","cited_by_count":4,"area":"safety"},{"id":"2311.17453","title":"Privacy Measurement in Tabular Synthetic Data: State of the Art and Future Research Directions","created":"2023-11-29","cited_by_count":4,"area":null},{"id":"2406.18671","title":"A Zero Auxiliary Knowledge Membership Inference Attack on Aggregate Location Data","created":"2024-06-26","cited_by_count":4,"area":"safety"},{"id":"2109.03975","title":"Membership Inference Attacks Against Temporally Correlated Data in Deep Reinforcement Learning","created":"2021-09-08","cited_by_count":3,"area":"safety"},{"id":"2512.17254","title":"Practical Framework for Privacy-Preserving and Byzantine-robust Federated Learning","created":"2025-12-19","cited_by_count":3,"area":null},{"id":"2112.03452","title":"Location Leakage in Federated Signal Maps","created":"2021-12-07","cited_by_count":2,"area":null},{"id":"2310.18606","title":"Where have you been? A Study of Privacy Risk for Point-of-Interest Recommendation","created":"2023-10-28","cited_by_count":2,"area":null},{"id":"2505.19589","title":"Model Agnostic Differentially Private Causal Inference","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2506.01907","title":"SMOTE-DP: Improving Privacy-Utility Tradeoff with Synthetic Data","created":"2025-06-02","cited_by_count":2,"area":null},{"id":"2306.03600","title":"Avoid Adversarial Adaption in Federated Learning by Multi-Metric Investigations","created":"2023-06-06","cited_by_count":1,"area":"safety"},{"id":"2403.06595","title":"Towards more accurate and useful data anonymity vulnerability measures","created":"2024-03-11","cited_by_count":1,"area":"safety"},{"id":"2404.16851","title":"EdgeLeakage: Membership Information Leakage in Distributed Edge Intelligence Systems","created":"2024-03-08","cited_by_count":1,"area":"safety"},{"id":"2407.02870","title":"Membership Inference Attacks Against Time-Series Models","created":"2024-07-03","cited_by_count":1,"area":"safety"},{"id":"2408.04931","title":"Privacy-Preserved Taxi Demand Prediction System Utilizing Distributed Data","created":"2024-08-09","cited_by_count":1,"area":null},{"id":"2411.11144","title":"CLMIA: Membership Inference Attacks via Unsupervised Contrastive Learning","created":"2024-11-17","cited_by_count":1,"area":"safety"},{"id":"2505.07085","title":"Privacy of Groups in Dense Street Imagery","created":"2025-05-11","cited_by_count":1,"area":null},{"id":"2510.24807","title":"Learning to Attack: Uncovering Privacy Risks in Sequential Data Releases","created":"2025-10-28","cited_by_count":1,"area":null},{"id":"2601.15874","title":"SoK: Challenges in Tabular Membership Inference Attacks","created":"2026-01-22","cited_by_count":1,"area":"safety"},{"id":"2601.22434","title":"Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspective","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2203.05212","title":"Membership Privacy Protection for Image Translation Models via Adversarial Knowledge Distillation","created":"2022-03-10","cited_by_count":0,"area":"safety"},{"id":"2301.03596","title":"Membership Inference Attacks Against Latent Factor Model","created":"2022-12-15","cited_by_count":0,"area":"safety"},{"id":"2405.15423","title":"Lost in the Averages: A New Specific Setup to Evaluate Membership Inference Attacks Against Machine Learning Models","created":"2024-05-24","cited_by_count":0,"area":"safety"},{"id":"2409.14645","title":"Demystifying Trajectory Recovery From Ash: An Open-Source Evaluation and Enhancement","created":"2024-09-23","cited_by_count":0,"area":null},{"id":"2412.20456","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","created":"2024-12-29","cited_by_count":0,"area":"safety"},{"id":"2504.18497","title":"DeSIA: Attribute Inference Attacks Against Limited Fixed Aggregate Statistics","created":"2025-04-25","cited_by_count":0,"area":null},{"id":"2509.04169","title":"Privacy Risks in Time Series Forecasting: User- and Record-Level Membership Inference","created":"2025-09-04","cited_by_count":0,"area":"safety"},{"id":"2602.12943","title":"Neighborhood Blending: A Lightweight Inference-Time Defense Against Membership Inference Attacks","created":"2026-02-13","cited_by_count":0,"area":"safety"},{"id":"2602.18934","title":"LoMime: Query-Efficient Membership Inference using Model Extraction in Label-Only Settings","created":"2026-02-21","cited_by_count":0,"area":"safety"},{"id":"2604.19891","title":"A Data-Free Membership Inference Attack on Federated Learning in Hardware Assurance","created":"2026-04-21","cited_by_count":0,"area":"safety"},{"id":"2608.02052","title":"Secrets Everywhere: Auditing Memorization in Mobility Prediction Models","created":"2026-08-03","cited_by_count":0,"area":null},{"id":"2610.18486","title":"SoK: Rethinking Membership Inference in Tabular Machine Learning","created":"2026-10-13","cited_by_count":0,"area":"safety"}],"next_cursor":null}