{"total":141,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248,"area":"safety"},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234,"area":null},{"id":"2304.04934","title":"Model Sparsity Can Simplify Machine Unlearning","created":"2023-04-11","cited_by_count":214,"area":"safety"},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194,"area":null},{"id":"2404.18239","title":"SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning","created":"2024-04-28","cited_by_count":104,"area":"safety"},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78,"area":"safety"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2108.11023","title":"EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning","created":"2021-08-25","cited_by_count":73,"area":"safety"},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2212.01539","title":"Exploring the Limits of Differentially Private Deep Learning with Group-wise Clipping","created":"2022-12-03","cited_by_count":52,"area":null},{"id":"2302.09923","title":"Prompt Stealing Attacks Against Text-to-Image Generation Models","created":"2023-02-20","cited_by_count":51,"area":null},{"id":"2202.03335","title":"Membership Inference Attacks and Defenses in Neural Network Pruning","created":"2022-02-07","cited_by_count":45,"area":"safety"},{"id":"2409.19732","title":"Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement","created":"2024-09-29","cited_by_count":45,"area":"safety"},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2409.01380","title":"Membership Inference Attacks Against In-Context Learning","created":"2024-09-02","cited_by_count":43,"area":"safety"},{"id":"2309.05610","title":"Privacy Side Channels in Machine Learning Systems","created":"2023-09-11","cited_by_count":40,"area":null},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38,"area":null},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2209.06997","title":"M^4I: Multi-modal Models Membership Inference","created":"2022-09-15","cited_by_count":34,"area":"safety"},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2209.10117","title":"A Comprehensive Survey on Trustworthy Recommender Systems","created":"2022-09-21","cited_by_count":32,"area":null},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2407.12344","title":"The Better Angels of Machine Personality: How Personality Relates to LLM Safety","created":"2024-07-17","cited_by_count":21,"area":null},{"id":"2205.13680","title":"Membership Inference Attack Using Self Influence Functions","created":"2022-05-26","cited_by_count":20,"area":"safety"},{"id":"2203.09566","title":"Leveraging Adversarial Examples to Quantify Membership Information Leakage","created":"2022-03-17","cited_by_count":19,"area":null},{"id":"2404.12922","title":"Is Retain Set All You Need in Machine Unlearning? Restoring Performance of Unlearned Models with Out-Of-Distribution Images","created":"2024-04-19","cited_by_count":18,"area":"safety"},{"id":"2209.08615","title":"Membership Inference Attacks and Generalization: A Causal Perspective","created":"2022-09-18","cited_by_count":17,"area":"safety"},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2208.08270","title":"On the Privacy Effect of Data Enhancement via the Lens of Memorization","created":"2022-08-17","cited_by_count":15,"area":null},{"id":"2107.08176","title":"Automatic Fairness Testing of Neural Classifiers through Adversarial Sampling","created":"2021-07-17","cited_by_count":14,"area":null},{"id":"2312.02052","title":"DUCK: Distance-based Unlearning via Centroid Kinematics","created":"2023-12-04","cited_by_count":13,"area":"safety"},{"id":"2402.09225","title":"Is My Data in Your AI? Membership Inference Test (MINT) applied to Face Biometrics","created":"2024-02-14","cited_by_count":13,"area":"safety"},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2101.02656","title":"Adversarial Machine Learning for 5G Communications Security","created":"2021-01-07","cited_by_count":12,"area":null},{"id":"2207.01991","title":"Conflicting Interactions Among Protection Mechanisms for Machine Learning Models","created":"2022-07-05","cited_by_count":12,"area":null},{"id":"2104.08273","title":"Membership Inference Attacks on Knowledge Graphs","created":"2021-04-16","cited_by_count":11,"area":"safety"},{"id":"2105.03875","title":"Bounding Information Leakage in Machine Learning","created":"2021-05-09","cited_by_count":11,"area":null},{"id":"2305.16202","title":"DP-SGD Without Clipping: The Lipschitz Neural Network Way","created":"2023-05-25","cited_by_count":11,"area":null},{"id":"2105.05381","title":"Accuracy-Privacy Trade-off in Deep Ensemble: A Membership Inference Perspective","created":"2021-05-12","cited_by_count":10,"area":"safety"},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2207.12535","title":"Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning","created":"2022-07-25","cited_by_count":10,"area":"safety"},{"id":"2407.17710","title":"Revisiting Machine Unlearning with Dimensional Alignment","created":"2024-07-25","cited_by_count":10,"area":"safety"},{"id":"2302.09813","title":"Audit to Forget: A Unified Method to Revoke Patients' Private Data in Intelligent Healthcare","created":"2023-02-20","cited_by_count":9,"area":null},{"id":"2507.18302","title":"LoRA-Leak: Membership Inference Attacks Against LoRA Fine-tuned Language Models","created":"2025-07-24","cited_by_count":9,"area":"safety"},{"id":"2210.13631","title":"On the Robustness of Dataset Inference","created":"2022-10-24","cited_by_count":8,"area":null},{"id":"2211.15918","title":"Similarity Distribution based Membership Inference Attack on Person Re-identification","created":"2022-11-29","cited_by_count":8,"area":"safety"},{"id":"2306.13965","title":"Boosting Model Inversion Attacks with Adversarial Examples","created":"2023-06-24","cited_by_count":8,"area":null},{"id":"2310.13291","title":"Assessing Privacy Risks in Language Models: A Case Study on Summarization Tasks","created":"2023-10-20","cited_by_count":8,"area":null},{"id":"2202.10546","title":"Privacy Leakage of Adversarial Training Models in Federated Learning Systems","created":"2022-02-21","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2111.01363","title":"Knowledge Cross-Distillation for Membership Privacy","created":"2021-11-02","cited_by_count":6,"area":"safety"},{"id":"2201.02265","title":"Learning to be adversarially robust and differentially private","created":"2022-01-06","cited_by_count":6,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2209.06529","title":"Data Privacy and Trustworthy Machine Learning","created":"2022-09-14","cited_by_count":6,"area":null},{"id":"2211.08942","title":"Differentially Private Optimizers Can Learn Adversarially Robust Models","created":"2022-11-16","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2501.11577","title":"Rethinking Membership Inference Attacks Against Transfer Learning","created":"2025-01-20","cited_by_count":6,"area":"safety"},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2505.08576","title":"MUBox: A Critical Evaluation Framework of Deep Machine Unlearning","created":"2025-05-13","cited_by_count":6,"area":"safety"},{"id":"2107.12173","title":"Membership Inference Attack and Defense for Wireless Signal Classifiers with Deep Learning","created":"2021-07-22","cited_by_count":5,"area":null},{"id":"2406.07314","title":"Rethinking the impact of noisy labels in graph classification: A utility and privacy perspective","created":"2024-06-11","cited_by_count":5,"area":null},{"id":"2407.02747","title":"Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvature","created":"2024-07-03","cited_by_count":5,"area":"safety"},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2410.03833","title":"Understanding Fine-tuning in Approximate Unlearning: A Theoretical Perspective","created":"2024-10-04","cited_by_count":5,"area":"safety"},{"id":"2504.07170","title":"Trustworthy AI Must Account for Interactions","created":"2025-04-09","cited_by_count":5,"area":null},{"id":"2105.01401","title":"A Review of Confidentiality Threats Against Embedded Neural Network Models","created":"2021-05-04","cited_by_count":4,"area":null},{"id":"2105.06300","title":"Privacy Inference Attacks and Defenses in Cloud-based Deep Neural Network: A Survey","created":"2021-05-13","cited_by_count":4,"area":null},{"id":"2110.03991","title":"Combining Differential Privacy and Byzantine Resilience in Distributed SGD","created":"2021-10-08","cited_by_count":4,"area":null},{"id":"2203.06555","title":"Label-only Model Inversion Attack: The Attack that Requires the Least Information","created":"2022-03-13","cited_by_count":4,"area":null},{"id":"2204.06297","title":"Enabling Synthetic Data adoption in regulated domains","created":"2022-04-13","cited_by_count":4,"area":null},{"id":"2308.10422","title":"Split Unlearning","created":"2023-08-21","cited_by_count":4,"area":"safety"},{"id":"2310.10659","title":"Exploiting Machine Unlearning for Backdoor Attacks in Deep Learning System","created":"2023-09-12","cited_by_count":4,"area":null},{"id":"2310.12665","title":"SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models","created":"2023-10-19","cited_by_count":4,"area":"safety"},{"id":"2410.21346","title":"Towards Trustworthy Machine Learning in Production: An Overview of the Robustness in MLOps Approach","created":"2024-10-28","cited_by_count":4,"area":null},{"id":"2501.10985","title":"GRID: Protecting Training Graph from Link Stealing Attacks on GNN Models","created":"2025-01-19","cited_by_count":4,"area":null},{"id":"2505.10859","title":"Exploring Nonlinear Pathway in Parameter Space for Machine Unlearning","created":"2025-05-16","cited_by_count":4,"area":"safety"},{"id":"2509.16391","title":"CoUn: Empowering Machine Unlearning via Contrastive Learning","created":"2025-09-19","cited_by_count":4,"area":"safety"},{"id":"2601.18110","title":"AttenMIA: LLM Membership Inference Attack through Attention Signals","created":"2026-01-26","cited_by_count":4,"area":"safety"},{"id":"2202.05469","title":"Privacy-preserving Generative Framework Against Membership Inference Attacks","created":"2022-02-11","cited_by_count":3,"area":"safety"},{"id":"2206.05565","title":"NeuGuard: Lightweight Neuron-Guided Defense against Membership Inference Attacks","created":"2022-06-11","cited_by_count":3,"area":"safety"},{"id":"2206.07164","title":"Edge Security: Challenges and Issues","created":"2022-06-14","cited_by_count":3,"area":null},{"id":"2212.02701","title":"On the Discredibility of Membership Inference Attacks","created":"2022-12-06","cited_by_count":3,"area":"safety"},{"id":"2408.10647","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","created":"2024-08-20","cited_by_count":3,"area":null},{"id":"2410.08557","title":"MUSO: Achieving Exact Machine Unlearning in Over-Parameterized Regimes","created":"2024-10-11","cited_by_count":3,"area":"safety"},{"id":"2412.11066","title":"Learning Robust and Privacy-Preserving Representations via Information Theory","created":"2024-12-15","cited_by_count":3,"area":null},{"id":"2501.19403","title":"Tackling Fake Forgetting through Uncertainty Quantification","created":"2025-01-31","cited_by_count":3,"area":"safety"},{"id":"2508.17233","title":"Module-Aware Parameter-Efficient Machine Unlearning on Transformers","created":"2025-08-24","cited_by_count":3,"area":"safety"},{"id":"2601.18650","title":"FaLW: A Forgetting-aware Loss Reweighting for Long-tailed Unlearning","created":"2026-01-26","cited_by_count":3,"area":"safety"},{"id":"2207.13572","title":"Membership Inference Attacks via Adversarial Examples","created":"2022-07-27","cited_by_count":2,"area":"safety"},{"id":"2402.06864","title":"Discriminative Adversarial Unlearning","created":"2024-02-10","cited_by_count":2,"area":"safety"},{"id":"2405.14020","title":"Unlearning Information Bottleneck: Machine Unlearning of Systematic Patterns and Biases","created":"2024-05-22","cited_by_count":2,"area":"safety"},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2408.07587","title":"FedQUIT: On-Device Federated Unlearning via a Quasi-Competent Virtual Teacher","created":"2024-08-14","cited_by_count":2,"area":"safety"}],"next_cursor":"100"}