{"total":70,"rows":[{"id":"2104.10706","title":"Dataset Inference: Ownership Resolution in Machine Learning","created":"2021-04-21","cited_by_count":116,"area":"safety"},{"id":"2103.05633","title":"Proof-of-Learning: Definitions and Practice","created":"2021-03-09","cited_by_count":84,"area":null},{"id":"2112.02701","title":"Protecting Intellectual Property of Language Generation APIs with Lexical Watermark","created":"2021-12-05","cited_by_count":84,"area":"safety"},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58,"area":null},{"id":"2112.05588","title":"Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Models","created":"2021-12-10","cited_by_count":46,"area":"safety"},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2111.04625","title":"DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories","created":"2021-11-08","cited_by_count":42,"area":null},{"id":"2210.03312","title":"Distillation-Resistant Watermarking for Model Protection in NLP","created":"2022-10-07","cited_by_count":30,"area":"safety"},{"id":"2105.09121","title":"Single-Layer Vision Transformers for More Accurate Early Exits with Less Overhead","created":"2021-05-19","cited_by_count":26,"area":"inference"},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2201.09243","title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work","created":"2022-01-23","cited_by_count":21,"area":null},{"id":"2312.05386","title":"Model Extraction Attacks Revisited","created":"2023-12-08","cited_by_count":21,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2301.04006","title":"IronForge: An Open, Secure, Fair, Decentralized Federated Learning","created":"2023-01-07","cited_by_count":15,"area":null},{"id":"2202.12506","title":"On the Effectiveness of Dataset Watermarking in Adversarial Settings","created":"2022-02-25","cited_by_count":12,"area":null},{"id":"2207.01991","title":"Conflicting Interactions Among Protection Mechanisms for Machine Learning Models","created":"2022-07-05","cited_by_count":12,"area":null},{"id":"2302.08466","title":"Marich: A Query-efficient Distributionally Equivalent Model Extraction Attack using Public Data","created":"2023-02-16","cited_by_count":11,"area":null},{"id":"2311.05863","title":"Watermarking Vision-Language Pre-trained Models for Multi-modal Embedding as a Service","created":"2023-11-10","cited_by_count":11,"area":"mllm"},{"id":"2108.13952","title":"Morphence: Moving Target Defense Against Adversarial Examples","created":"2021-08-31","cited_by_count":9,"area":null},{"id":"2207.00091","title":"Threat Assessment in Machine Learning based Systems","created":"2022-06-30","cited_by_count":9,"area":null},{"id":"2407.01251","title":"QUEEN: Query Unlearning against Model Extraction","created":"2024-07-01","cited_by_count":9,"area":"safety"},{"id":"2107.05166","title":"Stateful Detection of Model Extraction Attacks","created":"2021-07-12","cited_by_count":8,"area":null},{"id":"2303.18178","title":"Robust and IP-Protecting Vertical Federated Learning against Unexpected Quitting of Parties","created":"2023-03-28","cited_by_count":7,"area":null},{"id":"2403.10790","title":"QuantumLeak: Stealing Quantum Neural Networks from Cloud-based NISQ Machines","created":"2024-03-16","cited_by_count":7,"area":null},{"id":"2110.07683","title":"Don't Knock! Rowhammer at the Backdoor of DNN Models","created":"2021-10-14","cited_by_count":6,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2310.14047","title":"MeaeQ: Mount Model Extraction Attacks with Efficient Queries","created":"2023-10-21","cited_by_count":6,"area":null},{"id":"2311.04588","title":"Army of Thieves: Enhancing Black-Box Model Extraction via Ensemble based sample selection","created":"2023-11-08","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2303.08581","title":"Model Extraction Attacks on Split Federated Learning","created":"2023-03-13","cited_by_count":5,"area":null},{"id":"2403.03590","title":"DeepEclipse: How to Break White-Box DNN-Watermarking Schemes","created":"2024-03-06","cited_by_count":5,"area":null},{"id":"2310.01959","title":"Beyond Labeling Oracles: What does it mean to steal ML models?","created":"2023-10-03","cited_by_count":4,"area":null},{"id":"2504.00366","title":"CopyQNN: Quantum Neural Network Extraction Attack under Varying Quantum Noise","created":"2025-04-01","cited_by_count":4,"area":null},{"id":"2101.08717","title":"Copycat CNN: Are Random Non-Labeled Data Enough to Steal Knowledge from Black-box Models?","created":"2021-01-21","cited_by_count":3,"area":null},{"id":"2104.12623","title":"Good Artists Copy, Great Artists Steal: Model Extraction Attacks Against Image Translation Models","created":"2021-04-26","cited_by_count":3,"area":null},{"id":"2106.11424","title":"HODA: Hardness-Oriented Detection of Model Extraction Attacks","created":"2021-06-21","cited_by_count":3,"area":null},{"id":"2201.06093","title":"Adversarial Machine Learning Threat Analysis and Remediation in Open Radio Access Network (O-RAN)","created":"2022-01-16","cited_by_count":3,"area":null},{"id":"2301.12914","title":"PromptMix: Text-to-image diffusion models enhance the performance of lightweight networks","created":"2023-01-30","cited_by_count":3,"area":"diffusion"},{"id":"2306.11338","title":"FDINet: Protecting against DNN Model Extraction via Feature Distortion Index","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2308.16562","title":"The Power of MEME: Adversarial Malware Creation with Model-Based Reinforcement Learning","created":"2023-08-31","cited_by_count":3,"area":null},{"id":"2606.15810","title":"Let Them Steal: Trapping Large Language Model Extraction Attacks with Knowledge Honeypot","created":"2026-06-14","cited_by_count":3,"area":null},{"id":"2206.07321","title":"Morphence-2.0: Evasion-Resilient Moving Target Defense Powered by Out-of-Distribution Detection","created":"2022-06-15","cited_by_count":2,"area":null},{"id":"2307.01292","title":"Pareto-Secure Machine Learning (PSML): Fingerprinting and Securing Inference Serving Systems","created":"2023-07-03","cited_by_count":2,"area":null},{"id":"2310.00096","title":"Towards Few-Call Model Stealing via Active Self-Paced Knowledge Distillation and Diffusion-Based Image Generation","created":"2023-09-29","cited_by_count":2,"area":"diffusion"},{"id":"2502.18077","title":"Examining the Threat Landscape: Foundation Models and Model Stealing","created":"2025-02-25","cited_by_count":2,"area":null},{"id":"2511.20710","title":"Are Neuro-Inspired Multi-Modal Vision-Language Models Resilient to Membership Inference Privacy Leakage?","created":"2025-11-24","cited_by_count":2,"area":"mllm"},{"id":"2204.06241","title":"Stealing and Evading Malware Classifiers and Antivirus at Low False Positive Conditions","created":"2022-04-13","cited_by_count":1,"area":null},{"id":"2308.03363","title":"A reading survey on adversarial machine learning: Adversarial attacks and their understanding","created":"2023-08-07","cited_by_count":1,"area":null},{"id":"2312.15036","title":"SODA: Protecting Proprietary Information in On-Device Machine Learning Models","created":"2023-12-22","cited_by_count":1,"area":null},{"id":"2403.02870","title":"Precise Extraction of Deep Learning Models via Side-Channel Attacks on Edge/Endpoint Devices","created":"2024-03-05","cited_by_count":1,"area":null},{"id":"2502.19502","title":"Models That Are Interpretable But Not Transparent","created":"2025-02-26","cited_by_count":1,"area":null},{"id":"2506.23296","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","created":"2025-06-29","cited_by_count":1,"area":null},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2206.14371","title":"Matryoshka: Stealing Functionality of Private ML Data by Hiding Models in Model","created":"2022-06-29","cited_by_count":0,"area":null},{"id":"2211.13644","title":"Seeds Don't Lie: An Adaptive Watermarking Framework for Computer Vision Models","created":"2022-11-24","cited_by_count":0,"area":"safety"},{"id":"2211.16044","title":"Model Extraction Attack against Self-supervised Speech Models","created":"2022-11-29","cited_by_count":0,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2309.06377","title":"Adversarial attacks on hybrid classical-quantum Deep Learning models for Histopathological Cancer Detection","created":"2023-09-08","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2402.11953","title":"Stealing the Invisible: Unveiling Pre-Trained CNN Models through Adversarial Examples and Timing Side-Channels","created":"2024-02-19","cited_by_count":0,"area":null},{"id":"2406.00249","title":"Privacy Challenges in Meta-Learning: An Investigation on Model-Agnostic Meta-Learning","created":"2024-06-01","cited_by_count":0,"area":null},{"id":"2406.00828","title":"Imitating the Functionality of Image-to-Image Models Using a Single Example","created":"2024-06-02","cited_by_count":0,"area":null},{"id":"2503.06188","title":"Attackers Can Do Better: Over- and Understated Factors of Model Stealing Attacks","created":"2025-03-08","cited_by_count":0,"area":null},{"id":"2508.21654","title":"I Stolenly Swear That I Am Up to (No) Good: Design and Evaluation of Model Stealing Attacks","created":"2025-08-29","cited_by_count":0,"area":null},{"id":"2509.11159","title":"Stabilizing Data-Free Model Extraction","created":"2025-09-14","cited_by_count":0,"area":null},{"id":"2603.06359","title":"Tiny, Hardware-Independent, Compression-based Classification","created":"2026-03-06","cited_by_count":0,"area":null},{"id":"2605.18762","title":"ALDEN: Boosting Private Data Extraction from Retrieval-Augmented Generation Systems via Active Learning and Distribution Estimation","created":"2026-04-10","cited_by_count":0,"area":"rag"},{"id":"2607.16414","title":"Signal-based Model Access Risk Analysis for AI System Operations Security","created":"2026-07-17","cited_by_count":0,"area":null},{"id":"2608.11495","title":"Defending against Model Extraction for GNNs with Model Reprogramming","created":"2026-08-11","cited_by_count":0,"area":null}],"next_cursor":null}