{"total":186,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2111.08834","title":"Federated Learning for Smart Healthcare: A Survey","created":"2021-11-16","cited_by_count":184,"area":null},{"id":"2206.00719","title":"Dataset Distillation using Neural Feature Regression","created":"2022-06-01","cited_by_count":177,"area":null},{"id":"2201.05629","title":"Zero-Shot Machine Unlearning","created":"2022-01-14","cited_by_count":133,"area":"safety"},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81,"area":null},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78,"area":"safety"},{"id":"2108.11023","title":"EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning","created":"2021-08-25","cited_by_count":73,"area":"safety"},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60,"area":null},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2108.04417","title":"Privacy-Preserving Machine Learning: Methods, Challenges and Directions","created":"2021-08-10","cited_by_count":58,"area":null},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57,"area":"safety"},{"id":"2302.06755","title":"Dataset Distillation with Convexified Implicit Gradients","created":"2023-02-13","cited_by_count":46,"area":null},{"id":"2202.03335","title":"Membership Inference Attacks and Defenses in Neural Network Pruning","created":"2022-02-07","cited_by_count":45,"area":"safety"},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2102.04257","title":"Fairness for Unobserved Characteristics: Insights from Technological Impacts on Queer Communities","created":"2021-02-03","cited_by_count":40,"area":null},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38,"area":null},{"id":"2207.05801","title":"RelaxLoss: Defending Membership Inference Attacks without Losing Utility","created":"2022-07-12","cited_by_count":37,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2103.03918","title":"FedV: Privacy-Preserving Federated Learning over Vertically Partitioned Data","created":"2021-03-05","cited_by_count":31,"area":null},{"id":"2201.07513","title":"Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders","created":"2022-01-19","cited_by_count":31,"area":null},{"id":"2203.09702","title":"Federated Learning for Privacy Preservation in Smart Healthcare Systems: A Comprehensive Survey","created":"2022-03-18","cited_by_count":31,"area":null},{"id":"2410.22235","title":"Auditing $f$-Differential Privacy in One Run","created":"2024-10-29","cited_by_count":30,"area":null},{"id":"2307.01610","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction","created":"2023-07-04","cited_by_count":29,"area":"safety"},{"id":"2203.06580","title":"One Parameter Defense -- Defending against Data Inference Attacks via Differential Privacy","created":"2022-03-13","cited_by_count":27,"area":"safety"},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2302.10637","title":"A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacy","created":"2023-02-21","cited_by_count":24,"area":null},{"id":"2405.11930","title":"Data Contamination Calibration for Black-box LLMs","created":"2024-05-20","cited_by_count":24,"area":null},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2105.02866","title":"Membership Inference Attacks on Deep Regression Models for Neuroimaging","created":"2021-05-06","cited_by_count":22,"area":"safety"},{"id":"2207.05164","title":"Machine Learning Security in Industry: A Quantitative Survey","created":"2022-07-11","cited_by_count":21,"area":null},{"id":"2209.01100","title":"Group Property Inference Attacks Against Graph Neural Networks","created":"2022-09-02","cited_by_count":21,"area":null},{"id":"2306.07273","title":"Gaussian Membership Inference Privacy","created":"2023-06-12","cited_by_count":21,"area":"safety"},{"id":"2310.07152","title":"No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device ML","created":"2023-10-11","cited_by_count":21,"area":null},{"id":"2205.13680","title":"Membership Inference Attack Using Self Influence Functions","created":"2022-05-26","cited_by_count":20,"area":"safety"},{"id":"2307.16273","title":"zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training","created":"2023-07-30","cited_by_count":20,"area":null},{"id":"2105.12049","title":"Honest-but-Curious Nets: Sensitive Attributes of Private Inputs Can Be Secretly Coded into the Classifiers' Outputs","created":"2021-05-25","cited_by_count":18,"area":null},{"id":"2209.08615","title":"Membership Inference Attacks and Generalization: A Causal Perspective","created":"2022-09-18","cited_by_count":17,"area":"safety"},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2304.02782","title":"FACE-AUDITOR: Data Auditing in Facial Recognition Systems","created":"2023-04-05","cited_by_count":16,"area":null},{"id":"2311.15792","title":"Rethinking Privacy in Machine Learning Pipelines from an Information Flow Control Perspective","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2406.07687","title":"Adversarial Machine Unlearning","created":"2024-06-11","cited_by_count":16,"area":"safety"},{"id":"2407.15100","title":"A General Framework for Data-Use Auditing of ML Models","created":"2024-07-21","cited_by_count":16,"area":null},{"id":"2106.03785","title":"Generative Adversarial Networks: A Survey Towards Private and Secure Applications","created":"2021-06-07","cited_by_count":15,"area":null},{"id":"2110.03681","title":"Neural Tangent Kernel Empowered Federated Learning","created":"2021-10-07","cited_by_count":15,"area":null},{"id":"2212.00612","title":"Purifier: Defending Data Inference Attacks via Transforming Confidence Scores","created":"2022-12-01","cited_by_count":15,"area":"safety"},{"id":"2502.19726","title":"Tokens for Learning, Tokens for Unlearning: Mitigating Membership Inference Attacks in Large Language Models via Dual-Purpose Training","created":"2025-02-27","cited_by_count":15,"area":"safety"},{"id":"2302.06975","title":"A Review of the Role of Causality in Developing Trustworthy AI Systems","created":"2023-02-14","cited_by_count":14,"area":null},{"id":"2306.08604","title":"A Unified Framework of Graph Information Bottleneck for Robustness and Membership Privacy","created":"2023-06-14","cited_by_count":14,"area":null},{"id":"2208.02878","title":"Differentially Private Counterfactuals via Functional Mechanism","created":"2022-08-04","cited_by_count":13,"area":null},{"id":"2210.09634","title":"DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling","created":"2022-10-18","cited_by_count":13,"area":null},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2405.16978","title":"OSLO: One-Shot Label-Only Membership Inference Attacks","created":"2024-05-27","cited_by_count":13,"area":"safety"},{"id":"2101.02656","title":"Adversarial Machine Learning for 5G Communications Security","created":"2021-01-07","cited_by_count":12,"area":null},{"id":"2205.04525","title":"Towards a multi-stakeholder value-based assessment framework for algorithmic systems","created":"2022-05-09","cited_by_count":12,"area":null},{"id":"2206.12401","title":"Debiasing Learning for Membership Inference Attacks Against Recommender Systems","created":"2022-06-24","cited_by_count":12,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2402.06289","title":"FedMIA: An Effective Membership Inference Attack Exploiting \"All for One\" Principle in Federated Learning","created":"2024-02-09","cited_by_count":12,"area":"safety"},{"id":"2104.08273","title":"Membership Inference Attacks on Knowledge Graphs","created":"2021-04-16","cited_by_count":11,"area":"safety"},{"id":"2105.05381","title":"Accuracy-Privacy Trade-off in Deep Ensemble: A Membership Inference Perspective","created":"2021-05-12","cited_by_count":10,"area":"safety"},{"id":"2112.02230","title":"SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning","created":"2021-12-04","cited_by_count":10,"area":null},{"id":"2207.12535","title":"Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning","created":"2022-07-25","cited_by_count":10,"area":"safety"},{"id":"2209.03175","title":"On the utility and protection of optimization with differential privacy and classic regularization techniques","created":"2022-09-07","cited_by_count":10,"area":null},{"id":"2103.03078","title":"Defending Medical Image Diagnostics against Privacy Attacks using Generative Methods","created":"2021-03-04","cited_by_count":9,"area":"safety"},{"id":"2305.02143","title":"GANonymization: A GAN-based Face Anonymization Framework for Preserving Emotional Expressions","created":"2023-05-03","cited_by_count":9,"area":null},{"id":"2402.11989","title":"Privacy-Preserving Low-Rank Adaptation against Membership Inference Attacks for Latent Diffusion Models","created":"2024-02-19","cited_by_count":9,"area":"diffusion"},{"id":"2404.02462","title":"A Unified Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2024-04-03","cited_by_count":9,"area":"safety"},{"id":"2506.13009","title":"Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective","created":"2025-06-16","cited_by_count":9,"area":"safety"},{"id":"2102.03314","title":"On Utility and Privacy in Synthetic Genomic Data","created":"2021-02-05","cited_by_count":8,"area":"safety"},{"id":"2109.03675","title":"EMA: Auditing Data Removal from Trained Models","created":"2021-09-08","cited_by_count":8,"area":null},{"id":"2205.06369","title":"How to Combine Membership-Inference Attacks on Multiple Updated Models","created":"2022-05-12","cited_by_count":8,"area":"safety"},{"id":"2208.05969","title":"Safety and Performance, Why not Both? Bi-Objective Optimized Model Compression toward AI Software Deployment","created":"2022-08-11","cited_by_count":8,"area":null},{"id":"2211.15918","title":"Similarity Distribution based Membership Inference Attack on Person Re-identification","created":"2022-11-29","cited_by_count":8,"area":"safety"},{"id":"2405.03911","title":"Federated Graph Condensation with Information Bottleneck Principles","created":"2024-05-07","cited_by_count":8,"area":null},{"id":"2212.01082","title":"Membership Inference Attacks Against Semantic Segmentation Models","created":"2022-12-02","cited_by_count":7,"area":"safety"},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2111.01363","title":"Knowledge Cross-Distillation for Membership Privacy","created":"2021-11-02","cited_by_count":6,"area":"safety"},{"id":"2201.04677","title":"When Machine Learning Meets Spectrum Sharing Security: Methodologies and Challenges","created":"2022-01-12","cited_by_count":6,"area":null},{"id":"2203.00915","title":"MIAShield: Defending Membership Inference Attacks via Preemptive Exclusion of Members","created":"2022-03-02","cited_by_count":6,"area":"safety"},{"id":"2402.05453","title":"Mitigating Privacy Risk in Membership Inference by Convex-Concave Loss","created":"2024-02-08","cited_by_count":6,"area":"safety"},{"id":"2501.11577","title":"Rethinking Membership Inference Attacks Against Transfer Learning","created":"2025-01-20","cited_by_count":6,"area":"safety"},{"id":"2102.07969","title":"Machine Learning Based Cyber Attacks Targeting on Controlled Information: A Survey","created":"2021-02-16","cited_by_count":5,"area":null},{"id":"2107.12173","title":"Membership Inference Attack and Defense for Wireless Signal Classifiers with Deep Learning","created":"2021-07-22","cited_by_count":5,"area":null},{"id":"2110.05524","title":"Generalization Techniques Empirically Outperform Differential Privacy against Membership Inference","created":"2021-10-11","cited_by_count":5,"area":"safety"},{"id":"2202.02242","title":"Dikaios: Privacy Auditing of Algorithmic Fairness via Attribute Inference Attacks","created":"2022-02-04","cited_by_count":5,"area":null},{"id":"2205.06469","title":"l-Leaks: Membership Inference Attacks with Logits","created":"2022-05-13","cited_by_count":5,"area":"safety"},{"id":"2209.01688","title":"On the Privacy Risks of Cell-Based NAS Architectures","created":"2022-09-04","cited_by_count":5,"area":null},{"id":"2307.02984","title":"A Privacy-Preserving Walk in the Latent Space of Generative Models for Medical Applications","created":"2023-07-06","cited_by_count":5,"area":null},{"id":"2502.10450","title":"Trustworthy AI: Safety, Bias, and Privacy -- A Survey","created":"2025-02-11","cited_by_count":5,"area":"safety"},{"id":"2105.01401","title":"A Review of Confidentiality Threats Against Embedded Neural Network Models","created":"2021-05-04","cited_by_count":4,"area":null}],"next_cursor":"100"}