{"total":70,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248,"area":"safety"},{"id":"2103.14991","title":"Graph Unlearning","created":"2021-03-27","cited_by_count":138,"area":"safety"},{"id":"2201.05629","title":"Zero-Shot Machine Unlearning","created":"2022-01-14","cited_by_count":133,"area":"safety"},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2208.14933","title":"Membership Inference Attacks by Exploiting Loss Trajectory","created":"2022-08-31","cited_by_count":101,"area":"safety"},{"id":"2207.05521","title":"Federated Unlearning: How to Efficiently Erase a Client in FL?","created":"2022-07-12","cited_by_count":95,"area":"safety"},{"id":"2208.12268","title":"FedPrompt: Communication-Efficient and Privacy Preserving Prompt Tuning in Federated Learning","created":"2022-08-25","cited_by_count":91,"area":"safety"},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57,"area":"safety"},{"id":"2312.04095","title":"Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection","created":"2023-12-07","cited_by_count":37,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2209.06997","title":"M^4I: Multi-modal Models Membership Inference","created":"2022-09-15","cited_by_count":34,"area":"safety"},{"id":"2111.07608","title":"Property Inference Attacks Against GANs","created":"2021-11-15","cited_by_count":33,"area":"safety"},{"id":"2103.07101","title":"On the (In)Feasibility of Attribute Inference Attacks on Machine Learning Models","created":"2021-03-12","cited_by_count":31,"area":"safety"},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2401.05146","title":"Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metrics","created":"2024-01-10","cited_by_count":27,"area":"safety"},{"id":"2403.09562","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","created":"2024-03-14","cited_by_count":23,"area":"safety"},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2206.01349","title":"On the Privacy Properties of GAN-generated Samples","created":"2022-06-03","cited_by_count":17,"area":"safety"},{"id":"2302.12448","title":"Subspace based Federated Unlearning","created":"2023-02-24","cited_by_count":17,"area":"safety"},{"id":"2302.12685","title":"Active Membership Inference Attack under Local Differential Privacy in Federated Learning","created":"2023-02-24","cited_by_count":17,"area":"safety"},{"id":"2111.00430","title":"Efficient passive membership inference attack in federated learning","created":"2021-10-31","cited_by_count":16,"area":"safety"},{"id":"2111.05113","title":"Membership Inference Attacks Against Self-supervised Speech Models","created":"2021-11-09","cited_by_count":16,"area":"safety"},{"id":"2202.10276","title":"Poisoning Attacks and Defenses on Artificial Intelligence: A Survey","created":"2022-02-21","cited_by_count":16,"area":"safety"},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2310.00222","title":"Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learning","created":"2023-09-30","cited_by_count":11,"area":"safety"},{"id":"2311.14056","title":"DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release","created":"2023-11-23","cited_by_count":10,"area":"safety"},{"id":"2102.05561","title":"Meta Federated Learning","created":"2021-02-10","cited_by_count":8,"area":"safety"},{"id":"2205.06369","title":"How to Combine Membership-Inference Attacks on Multiple Updated Models","created":"2022-05-12","cited_by_count":8,"area":"safety"},{"id":"2111.01363","title":"Knowledge Cross-Distillation for Membership Privacy","created":"2021-11-02","cited_by_count":6,"area":"safety"},{"id":"2205.06469","title":"l-Leaks: Membership Inference Attacks with Logits","created":"2022-05-13","cited_by_count":5,"area":"safety"},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2401.00996","title":"Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment","created":"2024-01-02","cited_by_count":4,"area":"safety"},{"id":"2405.15316","title":"Decaf: Data Distribution Decompose Attack against Federated Learning","created":"2024-05-24","cited_by_count":4,"area":"safety"},{"id":"2203.16463","title":"Perfectly Accurate Membership Inference by a Dishonest Central Server in Federated Learning","created":"2022-03-30","cited_by_count":3,"area":"safety"},{"id":"2206.05565","title":"NeuGuard: Lightweight Neuron-Guided Defense against Membership Inference Attacks","created":"2022-06-11","cited_by_count":3,"area":"safety"},{"id":"2302.00271","title":"CATFL: Certificateless Authentication-based Trustworthy Federated Learning for 6G Semantic Communications","created":"2023-02-01","cited_by_count":3,"area":"safety"},{"id":"2506.05743","title":"When Better Features Mean Greater Risks: The Performance-Privacy Trade-Off in Contrastive Learning","created":"2025-06-06","cited_by_count":3,"area":"safety"},{"id":"2509.11080","title":"Membership Inference Attacks on Recommender System: A Survey","created":"2025-09-14","cited_by_count":3,"area":"safety"},{"id":"2603.07567","title":"Revisiting the LiRA Membership Inference Attack Under Realistic Assumptions","created":"2026-03-08","cited_by_count":3,"area":"safety"},{"id":"2604.21197","title":"Toward Efficient Membership Inference Attacks against Federated Large Language Models: A Projection Residual Approach","created":"2026-04-23","cited_by_count":3,"area":"safety"},{"id":"2210.11592","title":"New data poison attacks on machine learning classifiers for mobile exfiltration","created":"2022-10-20","cited_by_count":2,"area":"safety"},{"id":"2210.16258","title":"On the Vulnerability of Data Points under Multiple Membership Inference Attacks and Target Models","created":"2022-10-28","cited_by_count":2,"area":"safety"},{"id":"2307.12181","title":"Security and Privacy Issues of Federated Learning","created":"2023-07-22","cited_by_count":2,"area":"safety"},{"id":"2401.04929","title":"Learning-Based Difficulty Calibration for Enhanced Membership Inference Attacks","created":"2024-01-10","cited_by_count":2,"area":"safety"},{"id":"2601.21564","title":"Representation Unlearning: Forgetting through Information Compression","created":"2026-01-29","cited_by_count":2,"area":"safety"},{"id":"2601.22589","title":"FedCARE: Federated Unlearning with Conflict-Aware Projection and Relearning-Resistant Recovery","created":"2026-01-30","cited_by_count":2,"area":"safety"},{"id":"2205.08821","title":"Lessons Learned: Defending Against Property Inference Attacks","created":"2022-05-18","cited_by_count":1,"area":"safety"},{"id":"2404.07139","title":"Towards a Game-theoretic Understanding of Explanation-based Membership Inference Attacks","created":"2024-04-10","cited_by_count":1,"area":"safety"},{"id":"2409.13004","title":"Data Poisoning and Leakage Analysis in Federated Learning","created":"2024-09-19","cited_by_count":1,"area":"safety"},{"id":"2412.12837","title":"Exposing the Vulnerability of Decentralized Learning to Membership Inference Attacks Through the Lens of Graph Mixing","created":"2024-12-17","cited_by_count":1,"area":"safety"},{"id":"2601.06641","title":"Leveraging Soft Prompts for Privacy Attacks in Federated Prompt Tuning","created":"2026-01-10","cited_by_count":1,"area":"safety"},{"id":"2601.06866","title":"United We Defend: Collaborative Membership Inference Defenses in Federated Learning","created":"2026-01-11","cited_by_count":1,"area":"safety"},{"id":"2601.07214","title":"BlindU: Blind Machine Unlearning without Revealing Erasing Data","created":"2026-01-12","cited_by_count":1,"area":"safety"},{"id":"2606.09189","title":"Pretrained, Frozen, Still Leaking: Auditing Cross-Encoder Attribute Transfer in EEG Foundation Models","created":"2026-06-08","cited_by_count":1,"area":"safety"},{"id":"2209.11020","title":"Privacy Attacks Against Biometric Models with Fewer Samples: Incorporating the Output of Multiple Models","created":"2022-09-22","cited_by_count":0,"area":"safety"},{"id":"2301.03596","title":"Membership Inference Attacks Against Latent Factor Model","created":"2022-12-15","cited_by_count":0,"area":"safety"},{"id":"2406.07917","title":"Graph Transductive Defense: a Two-Stage Defense for Graph Membership Inference Attacks","created":"2024-06-12","cited_by_count":0,"area":"safety"},{"id":"2502.08001","title":"Unveiling Client Privacy Leakage from Public Dataset Usage in Federated Distillation","created":"2025-02-11","cited_by_count":0,"area":"safety"},{"id":"2505.07149","title":"AugMixCloak: A Defense against Membership Inference Attacks via Image Transformation","created":"2025-05-11","cited_by_count":0,"area":"safety"},{"id":"2507.09602","title":"DRAGD: A Federated Unlearning Data Reconstruction Attack Based on Gradient Differences","created":"2025-07-13","cited_by_count":0,"area":"safety"},{"id":"2602.12943","title":"Neighborhood Blending: A Lightweight Inference-Time Defense Against Membership Inference Attacks","created":"2026-02-13","cited_by_count":0,"area":"safety"},{"id":"2604.02780","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","created":"2026-04-03","cited_by_count":0,"area":"safety"},{"id":"2604.12737","title":"Evaluating Differential Privacy Against Membership Inference in Federated Learning: Insights from the NIST Genomics Red Team Challenge","created":"2026-04-14","cited_by_count":0,"area":"safety"},{"id":"2604.19891","title":"A Data-Free Membership Inference Attack on Federated Learning in Hardware Assurance","created":"2026-04-21","cited_by_count":0,"area":"safety"},{"id":"2604.19936","title":"Generalization and Membership Inference Attack a Practical Perspective","created":"2026-04-21","cited_by_count":0,"area":"safety"}],"next_cursor":null}