{"total":122,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2209.02299","title":"A Survey of Machine Unlearning","created":"2022-09-06","cited_by_count":312,"area":"safety"},{"id":"2202.05520","title":"What Does it Mean for a Language Model to Preserve Privacy?","created":"2022-02-11","cited_by_count":195,"area":null},{"id":"2203.03929","title":"Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks","created":"2022-03-08","cited_by_count":175,"area":"safety"},{"id":"2201.04845","title":"Reconstructing Training Data with Informed Adversaries","created":"2022-01-13","cited_by_count":148,"area":null},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2403.03329","title":"Guardrail Baselines for Unlearning in LLMs","created":"2024-03-05","cited_by_count":96,"area":"safety"},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81,"area":null},{"id":"2201.00763","title":"DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspection","created":"2022-01-03","cited_by_count":81,"area":null},{"id":"2203.07618","title":"Do Language Models Plagiarize?","created":"2022-03-15","cited_by_count":73,"area":null},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2106.06916","title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization","created":"2021-06-13","cited_by_count":52,"area":"safety"},{"id":"2108.09033","title":"UnSplit: Data-Oblivious Model Inversion, Model Stealing, and Label Inference Attacks Against Split Learning","created":"2021-08-20","cited_by_count":52,"area":null},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2104.12669","title":"Exploiting Explanations for Model Inversion Attacks","created":"2021-04-26","cited_by_count":49,"area":null},{"id":"2404.03233","title":"Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning","created":"2024-04-04","cited_by_count":48,"area":"safety"},{"id":"2205.12506","title":"Memorization in NLP Fine-tuning Methods","created":"2022-05-25","cited_by_count":45,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2110.09074","title":"Towards General Deep Leakage in Federated Learning","created":"2021-10-18","cited_by_count":40,"area":null},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2405.07406","title":"Machine Unlearning: A Comprehensive Survey","created":"2024-05-13","cited_by_count":35,"area":"safety"},{"id":"2111.07608","title":"Property Inference Attacks Against GANs","created":"2021-11-15","cited_by_count":33,"area":"safety"},{"id":"2304.04625","title":"Reinforcement Learning-Based Black-Box Model Inversion Attacks","created":"2023-04-10","cited_by_count":33,"area":null},{"id":"2209.10117","title":"A Comprehensive Survey on Trustworthy Recommender Systems","created":"2022-09-21","cited_by_count":32,"area":null},{"id":"2206.05483","title":"Bilateral Dependency Optimization: Defending Against Model-inversion Attacks","created":"2022-06-11","cited_by_count":30,"area":null},{"id":"2210.07714","title":"CrowdGuard: Federated Backdoor Detection in Federated Learning","created":"2022-10-14","cited_by_count":27,"area":null},{"id":"2306.14123","title":"Privacy and Fairness in Federated Learning: on the Perspective of Trade-off","created":"2023-06-25","cited_by_count":26,"area":null},{"id":"2405.20272","title":"Reconstruction Attacks on Machine Unlearning: Simple Models are Vulnerable","created":"2024-05-30","cited_by_count":25,"area":"safety"},{"id":"2202.03460","title":"Deletion Inference, Reconstruction, and Compliance in Machine (Un)Learning","created":"2022-02-07","cited_by_count":24,"area":"safety"},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2303.17046","title":"Have it your way: Individualized Privacy Assignment for DP-SGD","created":"2023-03-29","cited_by_count":21,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2309.00886","title":"Tight Bounds for Machine Unlearning via Differential Privacy","created":"2023-09-02","cited_by_count":18,"area":"safety"},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2111.04394","title":"Get a Model! Model Hijacking Attack Against Machine Learning Models","created":"2021-11-08","cited_by_count":14,"area":null},{"id":"2312.05114","title":"The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against \"Truly Anonymous\" Synthetic Datasets","created":"2023-12-08","cited_by_count":14,"area":null},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2408.05131","title":"Range Membership Inference Attacks","created":"2024-08-09","cited_by_count":12,"area":"safety"},{"id":"2104.08273","title":"Membership Inference Attacks on Knowledge Graphs","created":"2021-04-16","cited_by_count":11,"area":"safety"},{"id":"2105.03875","title":"Bounding Information Leakage in Machine Learning","created":"2021-05-09","cited_by_count":11,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2306.03235","title":"Information Flow Control in Machine Learning through Modular Model Architecture","created":"2023-06-05","cited_by_count":11,"area":null},{"id":"2402.19232","title":"Trained Random Forests Completely Reveal your Dataset","created":"2024-02-29","cited_by_count":11,"area":null},{"id":"2103.01496","title":"DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing","created":"2021-03-02","cited_by_count":10,"area":null},{"id":"2209.01215","title":"Exploiting Fairness to Enhance Sensitive Attributes Reconstruction","created":"2022-09-02","cited_by_count":10,"area":null},{"id":"2306.05093","title":"Investigating the Effect of Misalignment on Membership Privacy in the White-box Setting","created":"2023-06-08","cited_by_count":9,"area":null},{"id":"2307.10981","title":"PATROL: Privacy-Oriented Pruning for Collaborative Inference Against Model Inversion Attacks","created":"2023-07-20","cited_by_count":9,"area":null},{"id":"2405.19211","title":"Gone but Not Forgotten: Improved Benchmarks for Machine Unlearning","created":"2024-05-29","cited_by_count":9,"area":"safety"},{"id":"2205.06369","title":"How to Combine Membership-Inference Attacks on Multiple Updated Models","created":"2022-05-12","cited_by_count":8,"area":"safety"},{"id":"2304.09515","title":"Secure Split Learning against Property Inference, Data Reconstruction, and Feature Space Hijacking Attacks","created":"2023-04-19","cited_by_count":8,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2112.08806","title":"Correlation inference attacks against machine learning models","created":"2021-12-16","cited_by_count":7,"area":null},{"id":"2308.15099","title":"Probabilistic Dataset Reconstruction from Interpretable Models","created":"2023-08-29","cited_by_count":7,"area":null},{"id":"2306.13789","title":"Deconstructing Classifiers: Towards A Data Reconstruction Attack Against Text Classification Models","created":"2023-06-23","cited_by_count":6,"area":null},{"id":"2404.00673","title":"A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasures","created":"2024-03-31","cited_by_count":6,"area":null},{"id":"2502.19770","title":"TAPE: Tailored Posterior Difference for Auditing of Machine Unlearning","created":"2025-02-27","cited_by_count":6,"area":"safety"},{"id":"2503.00383","title":"Theoretical Insights in Model Inversion Robustness and Conditional Entropy Maximization for Collaborative Inference Systems","created":"2025-03-01","cited_by_count":6,"area":null},{"id":"2505.08576","title":"MUBox: A Critical Evaluation Framework of Deep Machine Unlearning","created":"2025-05-13","cited_by_count":6,"area":"safety"},{"id":"2506.17353","title":"Differentiation-Based Extraction of Proprietary Data from Fine-Tuned LLMs","created":"2025-06-20","cited_by_count":6,"area":"alignment"},{"id":"2205.06469","title":"l-Leaks: Membership Inference Attacks with Logits","created":"2022-05-13","cited_by_count":5,"area":"safety"},{"id":"2304.12845","title":"(Local) Differential Privacy has NO Disparate Impact on Fairness","created":"2023-04-25","cited_by_count":5,"area":null},{"id":"2311.06231","title":"Learning Human Action Recognition Representations Without Real Humans","created":"2023-11-10","cited_by_count":5,"area":null},{"id":"2404.16847","title":"State-of-the-Art Approaches to Enhancing Privacy Preservation of Machine Learning Datasets: A Survey","created":"2024-02-25","cited_by_count":5,"area":null},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2103.08987","title":"SoK: Privacy-Preserving Collaborative Tree-based Model Learning","created":"2021-03-16","cited_by_count":4,"area":null},{"id":"2111.03308","title":"Confidential Machine Learning Computation in Untrusted Environments: A Systems Security Perspective","created":"2021-11-05","cited_by_count":4,"area":null},{"id":"2203.06555","title":"Label-only Model Inversion Attack: The Attack that Requires the Least Information","created":"2022-03-13","cited_by_count":4,"area":null},{"id":"2203.06570","title":"Model Inversion Attack against Transfer Learning: Inverting a Model without Accessing It","created":"2022-03-13","cited_by_count":4,"area":null},{"id":"2205.06506","title":"Collaborative Drug Discovery: Inference-level Data Protection Perspective","created":"2022-05-13","cited_by_count":4,"area":null},{"id":"2211.01656","title":"GRAIMATTER Green Paper: Recommendations for disclosure control of trained Machine Learning (ML) models from Trusted Research Environments (TREs)","created":"2022-11-03","cited_by_count":4,"area":null},{"id":"2301.03206","title":"Introducing Model Inversion Attacks on Automatic Speaker Recognition","created":"2023-01-09","cited_by_count":4,"area":null},{"id":"2306.06399","title":"Personalized Graph Federated Learning with Differential Privacy","created":"2023-06-10","cited_by_count":4,"area":null},{"id":"2404.17674","title":"Center-Based Relaxed Learning Against Membership Inference Attacks","created":"2024-04-26","cited_by_count":4,"area":"safety"},{"id":"2408.16913","title":"Analyzing Inference Privacy Risks Through Gradients in Machine Learning","created":"2024-08-29","cited_by_count":4,"area":null},{"id":"2501.10985","title":"GRID: Protecting Training Graph from Link Stealing Attacks on GNN Models","created":"2025-01-19","cited_by_count":4,"area":null},{"id":"2510.13451","title":"Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts","created":"2025-10-15","cited_by_count":4,"area":"safety"},{"id":"2206.05565","title":"NeuGuard: Lightweight Neuron-Guided Defense against Membership Inference Attacks","created":"2022-06-11","cited_by_count":3,"area":"safety"},{"id":"2307.06123","title":"SoK: Comparing Different Membership Inference Attacks with a Comprehensive Benchmark","created":"2023-07-12","cited_by_count":3,"area":"safety"},{"id":"2308.00553","title":"FLAIRS: FPGA-Accelerated Inference-Resistant & Secure Federated Learning","created":"2023-08-01","cited_by_count":3,"area":"safety"},{"id":"2402.18970","title":"PrivatEyes: Appearance-based Gaze Estimation Using Federated Secure Multi-Party Computation","created":"2024-02-29","cited_by_count":3,"area":null},{"id":"2405.05784","title":"Link Stealing Attacks Against Inductive Graph Neural Networks","created":"2024-05-09","cited_by_count":3,"area":null},{"id":"2411.14516","title":"Memory Backdoor Attacks on Neural Networks","created":"2024-11-21","cited_by_count":3,"area":null},{"id":"2502.09396","title":"A hierarchical approach for assessing the vulnerability of tree-based classification models to membership inference attack","created":"2025-02-13","cited_by_count":3,"area":"safety"},{"id":"2503.00062","title":"CRFU: Compressive Representation Forgetting Against Privacy Leakage on Machine Unlearning","created":"2025-02-27","cited_by_count":3,"area":"safety"},{"id":"2106.14577","title":"Privacy-Preserving Image Acquisition Using Trainable Optical Kernel","created":"2021-06-28","cited_by_count":2,"area":null},{"id":"2205.01556","title":"Privacy Amplification via Random Participation in Federated Learning","created":"2022-05-03","cited_by_count":2,"area":null},{"id":"2211.02245","title":"Unintended Memorization and Timing Attacks in Named Entity Recognition Models","created":"2022-11-04","cited_by_count":2,"area":"safety"},{"id":"2211.13416","title":"Data Origin Inference in Machine Learning","created":"2022-11-24","cited_by_count":2,"area":null},{"id":"2309.11022","title":"Information Leakage from Data Updates in Machine Learning Models","created":"2023-09-20","cited_by_count":2,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2205.12718","title":"DPSNN: A Differentially Private Spiking Neural Network with Temporal Enhanced Pooling","created":"2022-05-24","cited_by_count":1,"area":null},{"id":"2211.04157","title":"Inferring Class Label Distribution of Training Data from Classifiers: An Accuracy-Augmented Meta-Classifier Attack","created":"2022-11-08","cited_by_count":1,"area":null},{"id":"2306.03600","title":"Avoid Adversarial Adaption in Federated Learning by Multi-Metric Investigations","created":"2023-06-06","cited_by_count":1,"area":"safety"},{"id":"2310.12112","title":"A Cautionary Tale: On the Role of Reference Data in Empirical Privacy Defenses","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2404.13860","title":"Distributional Black-Box Model Inversion Attack with Multi-Agent Reinforcement Learning","created":"2024-04-22","cited_by_count":1,"area":null},{"id":"2509.06264","title":"PLRV-O: Advancing Differentially Private Deep Learning via Privacy Loss Random Variable Optimization","created":"2025-09-08","cited_by_count":1,"area":null}],"next_cursor":"100"}