{"total":87,"rows":[{"id":"2111.08834","title":"Federated Learning for Smart Healthcare: A Survey","created":"2021-11-16","cited_by_count":184,"area":null},{"id":"2206.00719","title":"Dataset Distillation using Neural Feature Regression","created":"2022-06-01","cited_by_count":177,"area":null},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81,"area":null},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60,"area":null},{"id":"2108.04417","title":"Privacy-Preserving Machine Learning: Methods, Challenges and Directions","created":"2021-08-10","cited_by_count":58,"area":null},{"id":"2302.06755","title":"Dataset Distillation with Convexified Implicit Gradients","created":"2023-02-13","cited_by_count":46,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2102.04257","title":"Fairness for Unobserved Characteristics: Insights from Technological Impacts on Queer Communities","created":"2021-02-03","cited_by_count":40,"area":null},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2103.03918","title":"FedV: Privacy-Preserving Federated Learning over Vertically Partitioned Data","created":"2021-03-05","cited_by_count":31,"area":null},{"id":"2201.07513","title":"Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders","created":"2022-01-19","cited_by_count":31,"area":null},{"id":"2203.09702","title":"Federated Learning for Privacy Preservation in Smart Healthcare Systems: A Comprehensive Survey","created":"2022-03-18","cited_by_count":31,"area":null},{"id":"2410.22235","title":"Auditing $f$-Differential Privacy in One Run","created":"2024-10-29","cited_by_count":30,"area":null},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2302.10637","title":"A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacy","created":"2023-02-21","cited_by_count":24,"area":null},{"id":"2405.11930","title":"Data Contamination Calibration for Black-box LLMs","created":"2024-05-20","cited_by_count":24,"area":null},{"id":"2207.05164","title":"Machine Learning Security in Industry: A Quantitative Survey","created":"2022-07-11","cited_by_count":21,"area":null},{"id":"2209.01100","title":"Group Property Inference Attacks Against Graph Neural Networks","created":"2022-09-02","cited_by_count":21,"area":null},{"id":"2310.07152","title":"No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device ML","created":"2023-10-11","cited_by_count":21,"area":null},{"id":"2307.16273","title":"zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training","created":"2023-07-30","cited_by_count":20,"area":null},{"id":"2105.12049","title":"Honest-but-Curious Nets: Sensitive Attributes of Private Inputs Can Be Secretly Coded into the Classifiers' Outputs","created":"2021-05-25","cited_by_count":18,"area":null},{"id":"2304.02782","title":"FACE-AUDITOR: Data Auditing in Facial Recognition Systems","created":"2023-04-05","cited_by_count":16,"area":null},{"id":"2311.15792","title":"Rethinking Privacy in Machine Learning Pipelines from an Information Flow Control Perspective","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2407.15100","title":"A General Framework for Data-Use Auditing of ML Models","created":"2024-07-21","cited_by_count":16,"area":null},{"id":"2106.03785","title":"Generative Adversarial Networks: A Survey Towards Private and Secure Applications","created":"2021-06-07","cited_by_count":15,"area":null},{"id":"2110.03681","title":"Neural Tangent Kernel Empowered Federated Learning","created":"2021-10-07","cited_by_count":15,"area":null},{"id":"2302.06975","title":"A Review of the Role of Causality in Developing Trustworthy AI Systems","created":"2023-02-14","cited_by_count":14,"area":null},{"id":"2306.08604","title":"A Unified Framework of Graph Information Bottleneck for Robustness and Membership Privacy","created":"2023-06-14","cited_by_count":14,"area":null},{"id":"2208.02878","title":"Differentially Private Counterfactuals via Functional Mechanism","created":"2022-08-04","cited_by_count":13,"area":null},{"id":"2210.09634","title":"DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling","created":"2022-10-18","cited_by_count":13,"area":null},{"id":"2101.02656","title":"Adversarial Machine Learning for 5G Communications Security","created":"2021-01-07","cited_by_count":12,"area":null},{"id":"2205.04525","title":"Towards a multi-stakeholder value-based assessment framework for algorithmic systems","created":"2022-05-09","cited_by_count":12,"area":null},{"id":"2112.02230","title":"SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning","created":"2021-12-04","cited_by_count":10,"area":null},{"id":"2209.03175","title":"On the utility and protection of optimization with differential privacy and classic regularization techniques","created":"2022-09-07","cited_by_count":10,"area":null},{"id":"2305.02143","title":"GANonymization: A GAN-based Face Anonymization Framework for Preserving Emotional Expressions","created":"2023-05-03","cited_by_count":9,"area":null},{"id":"2109.03675","title":"EMA: Auditing Data Removal from Trained Models","created":"2021-09-08","cited_by_count":8,"area":null},{"id":"2208.05969","title":"Safety and Performance, Why not Both? Bi-Objective Optimized Model Compression toward AI Software Deployment","created":"2022-08-11","cited_by_count":8,"area":null},{"id":"2405.03911","title":"Federated Graph Condensation with Information Bottleneck Principles","created":"2024-05-07","cited_by_count":8,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2201.04677","title":"When Machine Learning Meets Spectrum Sharing Security: Methodologies and Challenges","created":"2022-01-12","cited_by_count":6,"area":null},{"id":"2102.07969","title":"Machine Learning Based Cyber Attacks Targeting on Controlled Information: A Survey","created":"2021-02-16","cited_by_count":5,"area":null},{"id":"2107.12173","title":"Membership Inference Attack and Defense for Wireless Signal Classifiers with Deep Learning","created":"2021-07-22","cited_by_count":5,"area":null},{"id":"2202.02242","title":"Dikaios: Privacy Auditing of Algorithmic Fairness via Attribute Inference Attacks","created":"2022-02-04","cited_by_count":5,"area":null},{"id":"2209.01688","title":"On the Privacy Risks of Cell-Based NAS Architectures","created":"2022-09-04","cited_by_count":5,"area":null},{"id":"2307.02984","title":"A Privacy-Preserving Walk in the Latent Space of Generative Models for Medical Applications","created":"2023-07-06","cited_by_count":5,"area":null},{"id":"2105.01401","title":"A Review of Confidentiality Threats Against Embedded Neural Network Models","created":"2021-05-04","cited_by_count":4,"area":null},{"id":"2105.06300","title":"Privacy Inference Attacks and Defenses in Cloud-based Deep Neural Network: A Survey","created":"2021-05-13","cited_by_count":4,"area":null},{"id":"2109.09023","title":"Anti-Neuron Watermarking: Protecting Personal Data Against Unauthorized Neural Networks","created":"2021-09-18","cited_by_count":4,"area":null},{"id":"2207.02337","title":"Federated and Transfer Learning: A Survey on Adversaries and Defense Mechanisms","created":"2022-07-05","cited_by_count":4,"area":null},{"id":"2208.11669","title":"Towards Sparsified Federated Neuroimaging Models via Weight Pruning","created":"2022-08-24","cited_by_count":4,"area":null},{"id":"2501.10985","title":"GRID: Protecting Training Graph from Link Stealing Attacks on GNN Models","created":"2025-01-19","cited_by_count":4,"area":null},{"id":"2110.03369","title":"The Connection between Out-of-Distribution Generalization and Privacy of ML Models","created":"2021-10-07","cited_by_count":3,"area":null},{"id":"2201.08786","title":"FedComm: Federated Learning as a Medium for Covert Communication","created":"2022-01-21","cited_by_count":3,"area":null},{"id":"2206.07164","title":"Edge Security: Challenges and Issues","created":"2022-06-14","cited_by_count":3,"area":null},{"id":"2306.00687","title":"Adversarial Robustness in Unsupervised Machine Learning: A Systematic Review","created":"2023-06-01","cited_by_count":3,"area":null},{"id":"2407.16164","title":"Representation Magnitude has a Liability to Privacy Vulnerability","created":"2024-07-23","cited_by_count":3,"area":null},{"id":"2409.19413","title":"Membership Privacy Evaluation in Deep Spiking Neural Networks","created":"2024-09-28","cited_by_count":3,"area":null},{"id":"2411.09945","title":"TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models","created":"2024-11-15","cited_by_count":3,"area":null},{"id":"2507.16872","title":"CompLeak: Deep Learning Model Compression Exacerbates Privacy Leakage","created":"2025-07-22","cited_by_count":3,"area":null},{"id":"2208.05009","title":"Privacy-Aware Adversarial Network in Human Mobility Prediction","created":"2022-08-09","cited_by_count":2,"area":null},{"id":"2310.00488","title":"Membership Privacy Risks of Sharpness Aware Minimization","created":"2023-09-30","cited_by_count":2,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2505.05872","title":"A Taxonomy of Attacks and Defenses in Split Learning","created":"2025-05-09","cited_by_count":2,"area":null},{"id":"2601.11635","title":"Now You See Me, Now You Don't: A Unified Framework for Expression Consistent Anonymization in Talking Head Videos","created":"2026-01-14","cited_by_count":2,"area":null},{"id":"2604.12342","title":"CoLA: A Choice Leakage Attack Framework to Expose Privacy Risks in Subset Training","created":"2026-04-14","cited_by_count":2,"area":null},{"id":"2111.05628","title":"Machine Learning Models Disclosure from Trusted Research Environments (TRE), Challenges and Opportunities","created":"2021-11-10","cited_by_count":1,"area":null},{"id":"2210.01864","title":"Recycling Scraps: Improving Private Learning by Leveraging Intermediate Checkpoints","created":"2022-10-04","cited_by_count":1,"area":null},{"id":"2310.12112","title":"A Cautionary Tale: On the Role of Reference Data in Empirical Privacy Defenses","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2404.00696","title":"Privacy Re-identification Attacks on Tabular GANs","created":"2024-03-31","cited_by_count":1,"area":null},{"id":"2411.07070","title":"On Active Privacy Auditing in Supervised Fine-tuning for White-Box Language Models","created":"2024-11-11","cited_by_count":1,"area":null},{"id":"2506.19360","title":"SoK: Can Synthetic Images Replace Real Data? A Survey of Utility and Privacy of Synthetic Image Generation","created":"2025-06-24","cited_by_count":1,"area":null},{"id":"2509.19921","title":"On the Fragility of Contribution Score Computation in Federated Learning","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2602.02296","title":"Decoupling Generalizability and Membership Privacy Risks in Neural Networks","created":"2026-02-02","cited_by_count":1,"area":null},{"id":"2105.03726","title":"Mental Models of Adversarial Machine Learning","created":"2021-05-08","cited_by_count":0,"area":null},{"id":"2107.02894","title":"Adversarial Machine Learning for Cybersecurity and Computer Vision: Current Developments and Challenges","created":"2021-06-30","cited_by_count":0,"area":null},{"id":"2112.07850","title":"HyObscure: Hybrid Obscuring for Privacy-Preserving Data Publishing","created":"2021-12-15","cited_by_count":0,"area":null},{"id":"2203.02635","title":"Training privacy-preserving video analytics pipelines by suppressing features that reveal information about private attributes","created":"2022-03-05","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2502.08008","title":"An Interactive Framework for Implementing Privacy-Preserving Federated Learning: Experiments on Large Language Models","created":"2025-02-11","cited_by_count":0,"area":null},{"id":"2603.13186","title":"Learnability and Privacy Vulnerability are Entangled in a Few Critical Weights","created":"2026-03-13","cited_by_count":0,"area":null},{"id":"2603.13570","title":"Privacy-Preserving Machine Learning for IoT: A Cross-Paradigm Survey and Future Roadmap","created":"2026-03-13","cited_by_count":0,"area":null}],"next_cursor":null}