{"total":76,"rows":[{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81,"area":null},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2202.08602","title":"Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations","created":"2022-02-17","cited_by_count":61,"area":null},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2205.06900","title":"MM-BD: Post-Training Detection of Backdoor Attacks with Arbitrary Backdoor Pattern Types Using a Maximum Margin Statistic","created":"2022-05-13","cited_by_count":55,"area":null},{"id":"2103.10013","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","created":"2021-03-18","cited_by_count":53,"area":null},{"id":"2112.03476","title":"Defending against Model Stealing via Verifying Embedded External Features","created":"2021-12-07","cited_by_count":46,"area":null},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2111.04625","title":"DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories","created":"2021-11-08","cited_by_count":42,"area":null},{"id":"2107.08909","title":"MEGEX: Data-Free Model Extraction Attack against Gradient-Based Explainable AI","created":"2021-07-19","cited_by_count":35,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2201.09243","title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work","created":"2022-01-23","cited_by_count":21,"area":null},{"id":"2208.02820","title":"MOVE: Effective and Harmless Ownership Verification via Embedded External Features","created":"2022-08-04","cited_by_count":21,"area":null},{"id":"2312.05386","title":"Model Extraction Attacks Revisited","created":"2023-12-08","cited_by_count":21,"area":null},{"id":"2410.08190","title":"Poison-splat: Computation Cost Attack on 3D Gaussian Splatting","created":"2024-10-10","cited_by_count":18,"area":null},{"id":"2205.08944","title":"SoK: The Impact of Unlabelled Data in Cyberthreat Detection","created":"2022-05-18","cited_by_count":15,"area":null},{"id":"2403.01472","title":"WARDEN: Multi-Directional Backdoor Watermarks for Embedding-as-a-Service Copyright Protection","created":"2024-03-03","cited_by_count":12,"area":null},{"id":"2302.08466","title":"Marich: A Query-efficient Distributionally Equivalent Model Extraction Attack using Public Data","created":"2023-02-16","cited_by_count":11,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2212.05428","title":"ezDPS: An Efficient and Zero-Knowledge Machine Learning Inference Pipeline","created":"2022-12-11","cited_by_count":10,"area":null},{"id":"2110.03802","title":"Hitting the Target: Stopping Active Learning at the Cost-Based Optimum","created":"2021-10-07","cited_by_count":9,"area":null},{"id":"2210.00108","title":"ImpNet: Imperceptible and blackbox-undetectable backdoors in compiled neural networks","created":"2022-09-30","cited_by_count":9,"area":null},{"id":"2302.02162","title":"AUTOLYCUS: Exploiting Explainable AI (XAI) for Model Extraction Attacks against Interpretable Models","created":"2023-02-04","cited_by_count":9,"area":null},{"id":"2101.02069","title":"Model Extraction and Defenses on Generative Adversarial Networks","created":"2021-01-06","cited_by_count":8,"area":null},{"id":"2106.01425","title":"GAL: Gradient Assisted Learning for Decentralized Multi-Organization Collaborations","created":"2021-06-02","cited_by_count":8,"area":null},{"id":"2107.01806","title":"Evaluating the Cybersecurity Risk of Real World, Machine Learning Production Systems","created":"2021-07-05","cited_by_count":6,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2310.14047","title":"MeaeQ: Mount Model Extraction Attacks with Efficient Queries","created":"2023-10-21","cited_by_count":6,"area":null},{"id":"2311.04588","title":"Army of Thieves: Enhancing Black-Box Model Extraction via Ensemble based sample selection","created":"2023-11-08","cited_by_count":6,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2308.16703","title":"Fault Injection and Safe-Error Attack for Extraction of Embedded Neural Network Models","created":"2023-08-31","cited_by_count":5,"area":null},{"id":"2208.03948","title":"AWEncoder: Adversarial Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-08-08","cited_by_count":4,"area":null},{"id":"2209.04022","title":"Privacy of Autonomous Vehicles: Risks, Protection Methods, and Future Directions","created":"2022-09-08","cited_by_count":4,"area":null},{"id":"2310.01959","title":"Beyond Labeling Oracles: What does it mean to steal ML models?","created":"2023-10-03","cited_by_count":4,"area":null},{"id":"2312.10578","title":"SAME: Sample Reconstruction against Model Extraction Attacks","created":"2023-12-17","cited_by_count":4,"area":null},{"id":"2409.14122","title":"Efficient and Effective Model Extraction","created":"2024-09-21","cited_by_count":4,"area":null},{"id":"2501.10985","title":"GRID: Protecting Training Graph from Link Stealing Attacks on GNN Models","created":"2025-01-19","cited_by_count":4,"area":null},{"id":"2511.13329","title":"RegionMarker: A Region-Triggered Semantic Watermarking Framework for Embedding-as-a-Service Copyright Protection","created":"2025-11-17","cited_by_count":4,"area":null},{"id":"2106.11424","title":"HODA: Hardness-Oriented Detection of Model Extraction Attacks","created":"2021-06-21","cited_by_count":3,"area":null},{"id":"2201.06093","title":"Adversarial Machine Learning Threat Analysis and Remediation in Open Radio Access Network (O-RAN)","created":"2022-01-16","cited_by_count":3,"area":null},{"id":"2304.06808","title":"Active Cost-aware Labeling of Streaming Data","created":"2023-04-13","cited_by_count":3,"area":null},{"id":"2306.11338","title":"FDINet: Protecting against DNN Model Extraction via Feature Distortion Index","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2308.16562","title":"The Power of MEME: Adversarial Malware Creation with Model-Based Reinforcement Learning","created":"2023-08-31","cited_by_count":3,"area":null},{"id":"2411.09945","title":"TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models","created":"2024-11-15","cited_by_count":3,"area":null},{"id":"2606.05725","title":"An Embarrassingly Simple Detector for Model Extraction Attacks in Large Language Model API Traffic","created":"2026-06-04","cited_by_count":3,"area":null},{"id":"2606.15810","title":"Let Them Steal: Trapping Large Language Model Extraction Attacks with Knowledge Honeypot","created":"2026-06-14","cited_by_count":3,"area":null},{"id":"2209.06300","title":"PINCH: An Adversarial Extraction Attack Framework for Deep Learning Models","created":"2022-09-13","cited_by_count":2,"area":null},{"id":"2307.01292","title":"Pareto-Secure Machine Learning (PSML): Fingerprinting and Securing Inference Serving Systems","created":"2023-07-03","cited_by_count":2,"area":null},{"id":"2308.05127","title":"Data-Free Model Extraction Attacks in the Context of Object Detection","created":"2023-08-09","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2507.00724","title":"Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features","created":"2025-06-24","cited_by_count":2,"area":null},{"id":"2602.09748","title":"Linear Model Extraction via Factual and Counterfactual Queries","created":"2026-02-10","cited_by_count":2,"area":null},{"id":"2103.06797","title":"BODAME: Bilevel Optimization for Defense Against Model Extraction","created":"2021-03-11","cited_by_count":1,"area":null},{"id":"2109.10770","title":"Exploring Adversarial Examples for Efficient Active Learning in Machine Learning Classifiers","created":"2021-09-22","cited_by_count":1,"area":null},{"id":"2109.14857","title":"First to Possess His Statistics: Data-Free Model Extraction Attack on Tabular Data","created":"2021-09-30","cited_by_count":1,"area":null},{"id":"2202.00008","title":"MEGA: Model Stealing via Collaborative Generator-Substitute Networks","created":"2022-01-31","cited_by_count":1,"area":null},{"id":"2204.06241","title":"Stealing and Evading Malware Classifiers and Antivirus at Low False Positive Conditions","created":"2022-04-13","cited_by_count":1,"area":null},{"id":"2404.02696","title":"Deep Privacy Funnel Model: From a Discriminative to a Generative Approach with an Application to Face Recognition","created":"2024-04-03","cited_by_count":1,"area":null},{"id":"2502.15567","title":"Model Privacy: A Unified Framework for Understanding Model Stealing Attacks and Defenses","created":"2025-02-21","cited_by_count":1,"area":null},{"id":"2502.19502","title":"Models That Are Interpretable But Not Transparent","created":"2025-02-26","cited_by_count":1,"area":null},{"id":"2205.02511","title":"One Picture is Worth a Thousand Words: A New Wallet Recovery Process","created":"2022-05-05","cited_by_count":0,"area":null},{"id":"2206.11480","title":"A Framework for Understanding Model Extraction Attack and Defense","created":"2022-06-23","cited_by_count":0,"area":null},{"id":"2206.14371","title":"Matryoshka: Stealing Functionality of Private ML Data by Hiding Models in Model","created":"2022-06-29","cited_by_count":0,"area":null},{"id":"2303.04980","title":"Decision-BADGE: Decision-based Adversarial Batch Attack with Directional Gradient Estimation","created":"2023-03-09","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2405.18671","title":"Watermarking Counterfactual Explanations","created":"2024-05-29","cited_by_count":0,"area":null},{"id":"2411.00380","title":"DeepCore: Simple Fingerprint Construction for Differentiating Homologous and Piracy Models","created":"2024-11-01","cited_by_count":0,"area":null},{"id":"2411.07468","title":"Privacy-Preserving Verifiable Neural Network Inference Service","created":"2024-11-12","cited_by_count":0,"area":null},{"id":"2411.09359","title":"Your Semantic-Independent Watermark is Fragile: A Semantic Perturbation Attack against EaaS Watermark","created":"2024-11-14","cited_by_count":0,"area":null},{"id":"2503.06188","title":"Attackers Can Do Better: Over- and Understated Factors of Model Stealing Attacks","created":"2025-03-08","cited_by_count":0,"area":null},{"id":"2509.22060","title":"Decoding Deception: Understanding Automatic Speech Recognition Vulnerabilities in Evasion and Poisoning Attacks","created":"2025-09-26","cited_by_count":0,"area":null},{"id":"2603.15842","title":"Informationally Compressive Anonymization: Non-Degrading Sensitive Input Protection for Privacy-Preserving Supervised Machine Learning","created":"2026-03-16","cited_by_count":0,"area":null},{"id":"2604.18716","title":"TrEEStealer: Stealing Decision Trees via Enclave Side Channels","created":"2026-04-20","cited_by_count":0,"area":null},{"id":"2609.31643","title":"Information Design Against Gaming and Learning Adversaries","created":"2026-09-12","cited_by_count":0,"area":null}],"next_cursor":null}