{"total":520,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2104.07586","title":"See through Gradients: Image Batch Recovery via GradInversion","created":"2021-04-15","cited_by_count":326,"area":null},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248,"area":"safety"},{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199,"area":null},{"id":"2102.13451","title":"FjORD: Fair and Accurate Federated Learning under heterogeneous targets with Ordered Dropout","created":"2021-02-26","cited_by_count":192,"area":null},{"id":"2310.06816","title":"Text Embeddings Reveal (Almost) As Much As Text","created":"2023-10-10","cited_by_count":192,"area":null},{"id":"2106.06639","title":"Federated Learning with Buffered Asynchronous Aggregation","created":"2021-06-11","cited_by_count":190,"area":null},{"id":"2103.14991","title":"Graph Unlearning","created":"2021-03-27","cited_by_count":138,"area":"safety"},{"id":"2201.05629","title":"Zero-Shot Machine Unlearning","created":"2022-01-14","cited_by_count":133,"area":"safety"},{"id":"2206.07758","title":"Reconstructing Training Data from Trained Neural Networks","created":"2022-06-15","cited_by_count":133,"area":null},{"id":"2104.02151","title":"Distributed Learning in Wireless Networks: Recent Progress and Future Challenges","created":"2021-04-05","cited_by_count":129,"area":null},{"id":"2102.06387","title":"The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation","created":"2021-02-12","cited_by_count":128,"area":null},{"id":"2112.02918","title":"When the Curious Abandon Honesty: Federated Learning Is Not Private","created":"2021-12-06","cited_by_count":127,"area":null},{"id":"2301.07014","title":"Dataset Distillation: A Comprehensive Review","created":"2023-01-17","cited_by_count":127,"area":null},{"id":"2206.00240","title":"Privacy for Free: How does Dataset Condensation Help Privacy?","created":"2022-06-01","cited_by_count":120,"area":null},{"id":"2302.04062","title":"Machine Learning for Synthetic Data Generation: A Review","created":"2023-02-08","cited_by_count":120,"area":null},{"id":"2110.13057","title":"Robbing the Fed: Directly Obtaining Private Data in Federated Learning with Modified Models","created":"2021-10-25","cited_by_count":108,"area":null},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2110.14962","title":"Gradient Inversion with Generative Image Prior","created":"2021-10-28","cited_by_count":101,"area":null},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2208.14933","title":"Membership Inference Attacks by Exploiting Loss Trajectory","created":"2022-08-31","cited_by_count":101,"area":"safety"},{"id":"2207.05521","title":"Federated Unlearning: How to Efficiently Erase a Client in FL?","created":"2022-07-12","cited_by_count":95,"area":"safety"},{"id":"2104.14380","title":"PPFL: Privacy-preserving Federated Learning with Trusted Execution Environments","created":"2021-04-29","cited_by_count":93,"area":null},{"id":"2208.12268","title":"FedPrompt: Communication-Efficient and Privacy Preserving Prompt Tuning in Federated Learning","created":"2022-08-25","cited_by_count":91,"area":"safety"},{"id":"2302.08888","title":"Multimodal Federated Learning via Contrastive Representation Ensemble","created":"2023-02-17","cited_by_count":86,"area":null},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2201.08135","title":"Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challenges","created":"2022-01-20","cited_by_count":84,"area":null},{"id":"2103.06191","title":"A Study of Face Obfuscation in ImageNet","created":"2021-03-10","cited_by_count":83,"area":null},{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81,"area":null},{"id":"2109.12273","title":"FedProc: Prototypical Contrastive Federated Learning on Non-IID data","created":"2021-09-25","cited_by_count":81,"area":null},{"id":"2203.15696","title":"Auditing Privacy Defenses in Federated Learning via Generative Gradient Leakage","created":"2022-03-29","cited_by_count":72,"area":null},{"id":"2205.08514","title":"Recovering Private Text in Federated Learning of Language Models","created":"2022-05-17","cited_by_count":70,"area":null},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2111.07380","title":"Eluding Secure Aggregation in Federated Learning via Model Inconsistency","created":"2021-11-14","cited_by_count":67,"area":null},{"id":"2104.14362","title":"From Distributed Machine Learning to Federated Learning: A Survey","created":"2021-04-29","cited_by_count":66,"area":null},{"id":"2102.01854","title":"Provably Secure Federated Learning against Malicious Clients","created":"2021-02-03","cited_by_count":63,"area":null},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60,"area":null},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57,"area":"safety"},{"id":"2111.11343","title":"Decentralized Federated Learning through Proxy Model Sharing","created":"2021-11-22","cited_by_count":57,"area":null},{"id":"2101.07511","title":"Collaborative Federated Learning For Healthcare: Multi-Modal COVID-19 Diagnosis at the Edge","created":"2021-01-19","cited_by_count":56,"area":null},{"id":"2203.01925","title":"Label-Only Model Inversion Attacks via Boundary Repulsion","created":"2022-03-03","cited_by_count":56,"area":null},{"id":"2201.12675","title":"Decepticons: Corrupted Transformers Breach Privacy in Federated Learning for Language Models","created":"2022-01-29","cited_by_count":53,"area":null},{"id":"2203.11894","title":"GradViT: Gradient Inversion of Vision Transformers","created":"2022-03-22","cited_by_count":53,"area":null},{"id":"2204.05011","title":"FederatedScope: A Flexible Federated Learning Platform for Heterogeneity","created":"2022-04-11","cited_by_count":53,"area":null},{"id":"2306.09486","title":"FedMultimodal: A Benchmark For Multimodal Federated Learning","created":"2023-06-15","cited_by_count":51,"area":null},{"id":"2305.16157","title":"Training Data Extraction From Pre-trained Language Models: A Survey","created":"2023-05-25","cited_by_count":45,"area":null},{"id":"2308.04699","title":"GIFD: A Generative Gradient Inversion Method with Feature Domain Optimization","created":"2023-08-09","cited_by_count":45,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2106.06089","title":"Gradient Disaggregation: Breaking Privacy in Federated Learning by Reconstructing the User Participant Matrix","created":"2021-06-10","cited_by_count":43,"area":null},{"id":"2408.12787","title":"LLM-PBE: Assessing Data Privacy in Large Language Models","created":"2024-08-23","cited_by_count":41,"area":null},{"id":"2107.01154","title":"Gradient-Leakage Resilient Federated Learning","created":"2021-07-02","cited_by_count":40,"area":null},{"id":"2110.09074","title":"Towards General Deep Leakage in Federated Learning","created":"2021-10-18","cited_by_count":40,"area":null},{"id":"2402.12959","title":"Prompt Stealing Attacks Against Large Language Models","created":"2024-02-20","cited_by_count":40,"area":null},{"id":"2203.03761","title":"The Fundamental Price of Secure Aggregation in Differentially Private Federated Learning","created":"2022-03-07","cited_by_count":39,"area":null},{"id":"2206.04055","title":"Gradient Obfuscation Gives a False Sense of Security in Federated Learning","created":"2022-06-08","cited_by_count":39,"area":null},{"id":"2310.18362","title":"SoK: Memorization in General-Purpose Large Language Models","created":"2023-10-24","cited_by_count":37,"area":null},{"id":"2312.04095","title":"Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection","created":"2023-12-07","cited_by_count":37,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2105.00529","title":"GRNN: Generative Regression Neural Network -- A Data Leakage Attack for Federated Learning","created":"2021-05-02","cited_by_count":36,"area":null},{"id":"2303.12233","title":"LOKI: Large-scale Data Reconstruction Attack against Federated Learning through Model Manipulation","created":"2023-03-21","cited_by_count":36,"area":null},{"id":"2109.05659","title":"Source Inference Attacks in Federated Learning","created":"2021-09-13","cited_by_count":34,"area":null},{"id":"2111.04706","title":"Bayesian Framework for Gradient Leakage","created":"2021-11-08","cited_by_count":34,"area":null},{"id":"2209.06997","title":"M^4I: Multi-modal Models Membership Inference","created":"2022-09-15","cited_by_count":34,"area":"safety"},{"id":"2111.07608","title":"Property Inference Attacks Against GANs","created":"2021-11-15","cited_by_count":33,"area":"safety"},{"id":"2303.11242","title":"Make Landscape Flatter in Differentially Private Federated Learning","created":"2023-03-20","cited_by_count":33,"area":null},{"id":"2111.11066","title":"FedCV: A Federated Learning Framework for Diverse Computer Vision Tasks","created":"2021-11-22","cited_by_count":32,"area":null},{"id":"2305.14888","title":"Privacy Implications of Retrieval-Based Language Models","created":"2023-05-24","cited_by_count":32,"area":null},{"id":"2103.07101","title":"On the (In)Feasibility of Attribute Inference Attacks on Machine Learning Models","created":"2021-03-12","cited_by_count":31,"area":"safety"},{"id":"2201.02873","title":"LoMar: A Local Defense Against Poisoning Attack on Federated Learning","created":"2022-01-08","cited_by_count":31,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2106.04405","title":"Federated Neural Collaborative Filtering","created":"2021-06-02","cited_by_count":30,"area":null},{"id":"2310.01424","title":"Identifying and Mitigating Privacy Risks Stemming from Language Models: A Survey","created":"2023-09-27","cited_by_count":30,"area":null},{"id":"2401.05146","title":"Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metrics","created":"2024-01-10","cited_by_count":27,"area":"safety"},{"id":"2111.01108","title":"Resource-Efficient Federated Learning","created":"2021-11-01","cited_by_count":26,"area":null},{"id":"2206.12395","title":"Data Leakage in Federated Averaging","created":"2022-06-24","cited_by_count":26,"area":null},{"id":"2306.14123","title":"Privacy and Fairness in Federated Learning: on the Perspective of Trade-off","created":"2023-06-25","cited_by_count":26,"area":null},{"id":"2107.06018","title":"This Person (Probably) Exists. Identity Membership Attacks Against GAN Generated Faces","created":"2021-07-13","cited_by_count":25,"area":null},{"id":"2210.08371","title":"Sketching for First Order Method: Efficient Algorithm for Low-Bandwidth Channel and Vulnerability","created":"2022-10-15","cited_by_count":25,"area":null},{"id":"2401.17319","title":"Decentralized Federated Learning: A Survey on Security and Privacy","created":"2024-01-25","cited_by_count":25,"area":null},{"id":"2106.09680","title":"Accuracy, Interpretability, and Differential Privacy via Explainable Boosting","created":"2021-06-17","cited_by_count":24,"area":null},{"id":"2302.04787","title":"On the Privacy-Robustness-Utility Trilemma in Distributed Learning","created":"2023-02-09","cited_by_count":24,"area":null},{"id":"2302.10637","title":"A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacy","created":"2023-02-21","cited_by_count":24,"area":null},{"id":"2205.08443","title":"On the (In)security of Peer-to-Peer Decentralized Machine Learning","created":"2022-05-17","cited_by_count":23,"area":null},{"id":"2403.09562","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","created":"2024-03-14","cited_by_count":23,"area":"safety"},{"id":"2406.05392","title":"Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Survey","created":"2024-06-08","cited_by_count":23,"area":null},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2103.01953","title":"Privacy Amplification for Federated Learning via User Sampling and Wireless Aggregation","created":"2021-03-02","cited_by_count":22,"area":null},{"id":"2207.08869","title":"FLAIR: Federated Learning Annotated Image Repository","created":"2022-07-18","cited_by_count":22,"area":null},{"id":"2310.00339","title":"FedLPA: One-shot Federated Learning with Layer-Wise Posterior Aggregation","created":"2023-09-30","cited_by_count":22,"area":null},{"id":"2012.15589","title":"PFL-MoE: Personalized Federated Learning Based on Mixture of Experts","created":"2020-12-31","cited_by_count":21,"area":"moe"},{"id":"2110.14019","title":"Reliable and Trustworthy Machine Learning for Health Using Dataset Shift Detection","created":"2021-10-26","cited_by_count":21,"area":null},{"id":"2209.01100","title":"Group Property Inference Attacks Against Graph Neural Networks","created":"2022-09-02","cited_by_count":21,"area":null},{"id":"2306.04959","title":"FedSecurity: Benchmarking Attacks and Defenses in Federated Learning and Federated LLMs","created":"2023-06-08","cited_by_count":21,"area":null},{"id":"2307.00974","title":"Over-The-Air Federated Learning: Status Quo, Open Challenges, and Future Directions","created":"2023-07-03","cited_by_count":21,"area":null},{"id":"2307.10655","title":"A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency","created":"2023-07-20","cited_by_count":21,"area":null},{"id":"2104.13061","title":"Property Inference Attacks on Convolutional Neural Networks: Influence and Implications of Target Model's Complexity","created":"2021-04-27","cited_by_count":19,"area":null},{"id":"2202.01971","title":"Aggregation Service for Federated Learning: An Efficient, Secure, and More Resilient Realization","created":"2022-02-04","cited_by_count":19,"area":null}],"next_cursor":"100"}