{"total":90,"rows":[{"id":"2310.16789","title":"Detecting Pretraining Data from Large Language Models","created":"2023-10-25","cited_by_count":387,"area":null},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2202.06539","title":"Deduplicating Training Data Mitigates Privacy Risks in Language Models","created":"2022-02-14","cited_by_count":314,"area":null},{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248,"area":"safety"},{"id":"2206.00719","title":"Dataset Distillation using Neural Feature Regression","created":"2022-06-01","cited_by_count":177,"area":null},{"id":"2111.08440","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","created":"2021-11-15","cited_by_count":147,"area":"safety"},{"id":"2206.07758","title":"Reconstructing Training Data from Trained Neural Networks","created":"2022-06-15","cited_by_count":133,"area":null},{"id":"2301.05603","title":"A Comprehensive Survey of Dataset Distillation","created":"2023-01-13","cited_by_count":115,"area":null},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78,"area":"safety"},{"id":"2402.09910","title":"DE-COP: Detecting Copyrighted Content in Language Models Training Data","created":"2024-02-15","cited_by_count":74,"area":null},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2307.03694","title":"Scalable Membership Inference Attacks via Quantile Regression","created":"2023-07-07","cited_by_count":65,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2203.01925","title":"Label-Only Model Inversion Attacks via Boundary Repulsion","created":"2022-03-03","cited_by_count":56,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2106.11384","title":"Membership Inference on Word Embedding and Beyond","created":"2021-06-21","cited_by_count":35,"area":"safety"},{"id":"2312.08207","title":"Black-box Membership Inference Attacks against Fine-tuned Diffusion Models","created":"2023-12-13","cited_by_count":35,"area":"diffusion"},{"id":"2102.11673","title":"Measuring Data Leakage in Machine-Learning Models with Fisher Information","created":"2021-02-23","cited_by_count":33,"area":null},{"id":"2303.03446","title":"Students Parrot Their Teachers: Membership Inference on Model Distillation","created":"2023-03-06","cited_by_count":33,"area":"safety"},{"id":"2411.02902","title":"Membership Inference Attacks against Large Vision-Language Models","created":"2024-11-05","cited_by_count":33,"area":"mllm"},{"id":"2310.01424","title":"Identifying and Mitigating Privacy Risks Stemming from Language Models: A Survey","created":"2023-09-27","cited_by_count":30,"area":null},{"id":"2501.18624","title":"Membership Inference Attacks Against Vision-Language Models","created":"2025-01-27","cited_by_count":29,"area":"mllm"},{"id":"2202.03460","title":"Deletion Inference, Reconstruction, and Compliance in Machine (Un)Learning","created":"2022-02-07","cited_by_count":24,"area":"safety"},{"id":"2205.08443","title":"On the (In)security of Peer-to-Peer Decentralized Machine Learning","created":"2022-05-17","cited_by_count":23,"area":null},{"id":"2403.09562","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","created":"2024-03-14","cited_by_count":23,"area":"safety"},{"id":"2310.00339","title":"FedLPA: One-shot Federated Learning with Layer-Wise Posterior Aggregation","created":"2023-09-30","cited_by_count":22,"area":null},{"id":"2306.07273","title":"Gaussian Membership Inference Privacy","created":"2023-06-12","cited_by_count":21,"area":"safety"},{"id":"2203.09566","title":"Leveraging Adversarial Examples to Quantify Membership Information Leakage","created":"2022-03-17","cited_by_count":19,"area":null},{"id":"2206.01349","title":"On the Privacy Properties of GAN-generated Samples","created":"2022-06-03","cited_by_count":17,"area":"safety"},{"id":"2209.08615","title":"Membership Inference Attacks and Generalization: A Causal Perspective","created":"2022-09-18","cited_by_count":17,"area":"safety"},{"id":"2202.10276","title":"Poisoning Attacks and Defenses on Artificial Intelligence: A Survey","created":"2022-02-21","cited_by_count":16,"area":"safety"},{"id":"2208.08270","title":"On the Privacy Effect of Data Enhancement via the Lens of Memorization","created":"2022-08-17","cited_by_count":15,"area":null},{"id":"2401.10458","title":"Contrastive Unlearning: A Contrastive Approach to Machine Unlearning","created":"2024-01-19","cited_by_count":15,"area":"safety"},{"id":"2406.03880","title":"Memorization in deep learning: A survey","created":"2024-06-06","cited_by_count":15,"area":null},{"id":"2405.20771","title":"Towards Black-Box Membership Inference Attack for Diffusion Models","created":"2024-05-25","cited_by_count":14,"area":"diffusion"},{"id":"2105.03875","title":"Bounding Information Leakage in Machine Learning","created":"2021-05-09","cited_by_count":11,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2103.01496","title":"DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing","created":"2021-03-02","cited_by_count":10,"area":null},{"id":"2105.05381","title":"Accuracy-Privacy Trade-off in Deep Ensemble: A Membership Inference Perspective","created":"2021-05-12","cited_by_count":10,"area":"safety"},{"id":"2206.04591","title":"Privacy Leakage in Text Classification: A Data Extraction Approach","created":"2022-06-09","cited_by_count":10,"area":null},{"id":"2211.15918","title":"Similarity Distribution based Membership Inference Attack on Person Re-identification","created":"2022-11-29","cited_by_count":8,"area":"safety"},{"id":"2402.09299","title":"Trained Without My Consent: Detecting Code Inclusion In Language Models Trained on Code","created":"2024-02-14","cited_by_count":8,"area":null},{"id":"2101.05405","title":"Training Data Leakage Analysis in Language Models","created":"2021-01-14","cited_by_count":7,"area":null},{"id":"2207.10802","title":"Combing for Credentials: Active Pattern Extraction from Smart Reply","created":"2022-07-14","cited_by_count":7,"area":null},{"id":"2212.01082","title":"Membership Inference Attacks Against Semantic Segmentation Models","created":"2022-12-02","cited_by_count":7,"area":"safety"},{"id":"2111.01363","title":"Knowledge Cross-Distillation for Membership Privacy","created":"2021-11-02","cited_by_count":6,"area":"safety"},{"id":"2306.13789","title":"Deconstructing Classifiers: Towards A Data Reconstruction Attack Against Text Classification Models","created":"2023-06-23","cited_by_count":6,"area":null},{"id":"2407.01306","title":"Unveiling the Unseen: Exploring Whitebox Membership Inference through the Lens of Explainability","created":"2024-07-01","cited_by_count":6,"area":"safety"},{"id":"2501.11577","title":"Rethinking Membership Inference Attacks Against Transfer Learning","created":"2025-01-20","cited_by_count":6,"area":"safety"},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2507.21412","title":"Cascading and Proxy Membership Inference Attacks","created":"2025-07-29","cited_by_count":6,"area":"safety"},{"id":"2110.05524","title":"Generalization Techniques Empirically Outperform Differential Privacy against Membership Inference","created":"2021-10-11","cited_by_count":5,"area":"safety"},{"id":"2205.06469","title":"l-Leaks: Membership Inference Attacks with Logits","created":"2022-05-13","cited_by_count":5,"area":"safety"},{"id":"2409.14513","title":"Order of Magnitude Speedups for LLM Membership Inference","created":"2024-09-22","cited_by_count":5,"area":"safety"},{"id":"2402.10686","title":"On the Impact of Uncertainty and Calibration on Likelihood-Ratio Membership Inference Attacks","created":"2024-02-16","cited_by_count":4,"area":"safety"},{"id":"2212.02701","title":"On the Discredibility of Membership Inference Attacks","created":"2022-12-06","cited_by_count":3,"area":"safety"},{"id":"2509.06796","title":"Imitative Membership Inference Attack","created":"2025-09-08","cited_by_count":3,"area":"safety"},{"id":"2210.11592","title":"New data poison attacks on machine learning classifiers for mobile exfiltration","created":"2022-10-20","cited_by_count":2,"area":"safety"},{"id":"2310.00488","title":"Membership Privacy Risks of Sharpness Aware Minimization","created":"2023-09-30","cited_by_count":2,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2401.04929","title":"Learning-Based Difficulty Calibration for Enhanced Membership Inference Attacks","created":"2024-01-10","cited_by_count":2,"area":"safety"},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2407.00866","title":"Silver Linings in the Shadows: Harnessing Membership Inference for Machine Unlearning","created":"2024-07-01","cited_by_count":2,"area":"safety"},{"id":"2605.01129","title":"Revisiting Privacy Leakage in Machine Unlearning: Membership Inference Beyond the Forgotten Set","created":"2026-05-01","cited_by_count":2,"area":"safety"},{"id":"2110.03054","title":"On the Privacy Risks of Deploying Recurrent Neural Networks in Machine Learning Models","created":"2021-10-06","cited_by_count":1,"area":null},{"id":"2209.01538","title":"Data Provenance via Differential Auditing","created":"2022-09-04","cited_by_count":1,"area":null},{"id":"2302.14769","title":"Membership Inference Attack for Beluga Whales Discrimination","created":"2023-02-28","cited_by_count":1,"area":"safety"},{"id":"2404.00696","title":"Privacy Re-identification Attacks on Tabular GANs","created":"2024-03-31","cited_by_count":1,"area":null},{"id":"2411.11144","title":"CLMIA: Membership Inference Attacks via Unsupervised Contrastive Learning","created":"2024-11-17","cited_by_count":1,"area":"safety"},{"id":"2502.17358","title":"DIS-CO: Discovering Copyrighted Content in VLMs Training Data","created":"2025-02-24","cited_by_count":1,"area":"mllm"},{"id":"2506.23296","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","created":"2025-06-29","cited_by_count":1,"area":null},{"id":"2507.23291","title":"Evaluating the Dynamics of Membership Privacy in Deep Learning","created":"2025-07-31","cited_by_count":1,"area":"safety"},{"id":"2601.15874","title":"SoK: Challenges in Tabular Membership Inference Attacks","created":"2026-01-22","cited_by_count":1,"area":"safety"},{"id":"2301.03596","title":"Membership Inference Attacks Against Latent Factor Model","created":"2022-12-15","cited_by_count":0,"area":"safety"},{"id":"2310.20299","title":"Verification of Neural Networks Local Differential Classification Privacy","created":"2023-10-31","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2406.00249","title":"Privacy Challenges in Meta-Learning: An Investigation on Model-Agnostic Meta-Learning","created":"2024-06-01","cited_by_count":0,"area":null},{"id":"2411.03363","title":"TDDBench: A Benchmark for Training data detection","created":"2024-11-05","cited_by_count":0,"area":"safety"},{"id":"2503.04231","title":"One-Shot Clustering for Federated Learning","created":"2025-03-06","cited_by_count":0,"area":null},{"id":"2509.01587","title":"One-Shot Clustering for Federated Learning Under Clustering-Agnostic Assumption","created":"2025-09-01","cited_by_count":0,"area":null},{"id":"2510.21783","title":"Noise Aggregation Analysis Driven by Small-Noise Injection: Efficient Membership Inference for Diffusion Models","created":"2025-10-18","cited_by_count":0,"area":"diffusion"},{"id":"2512.02786","title":"FiMMIA: scaling semantic perturbation-based membership inference across modalities","created":"2025-12-02","cited_by_count":0,"area":"safety"},{"id":"2602.12943","title":"Neighborhood Blending: A Lightweight Inference-Time Defense Against Membership Inference Attacks","created":"2026-02-13","cited_by_count":0,"area":"safety"},{"id":"2603.19375","title":"Automated Membership Inference Attacks (AutoMIA): Discovering MIA Signal Computations using LLM Agents","created":"2026-03-19","cited_by_count":0,"area":"agents"},{"id":"2603.22987","title":"A Critical Review on the Effectiveness and Privacy Threats of Membership Inference Attacks","created":"2026-03-24","cited_by_count":0,"area":"safety"},{"id":"2605.17341","title":"Single-Sample Black-Box Membership Inference Attack against Vision-Language Models via Cross-modal Semantic Alignment","created":"2026-05-17","cited_by_count":0,"area":"mllm"},{"id":"2607.16207","title":"JUMP: Single-Pass Membership Inference on Fine-Tuned Diffusion Language Models","created":"2026-05-09","cited_by_count":0,"area":"diffusion"},{"id":"2609.09848","title":"Subgroup Membership Inference Audits of Differentially Private Synthetic Text","created":"2026-09-09","cited_by_count":0,"area":"safety"},{"id":"2610.18486","title":"SoK: Rethinking Membership Inference in Tabular Machine Learning","created":"2026-10-13","cited_by_count":0,"area":"safety"}],"next_cursor":null}