{"total":76,"rows":[{"id":"2103.14991","title":"Graph Unlearning","created":"2021-03-27","cited_by_count":138,"area":"safety"},{"id":"2102.06387","title":"The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregation","created":"2021-02-12","cited_by_count":128,"area":null},{"id":"2104.10706","title":"Dataset Inference: Ownership Resolution in Machine Learning","created":"2021-04-21","cited_by_count":116,"area":"safety"},{"id":"2211.12814","title":"Vertical Federated Learning: Concepts, Advances and Challenges","created":"2022-11-23","cited_by_count":108,"area":null},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2302.07225","title":"Bounding Training Data Reconstruction in DP-SGD","created":"2023-02-14","cited_by_count":46,"area":"safety"},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2402.12959","title":"Prompt Stealing Attacks Against Large Language Models","created":"2024-02-20","cited_by_count":40,"area":null},{"id":"2106.05937","title":"Fair Normalizing Flows","created":"2021-06-10","cited_by_count":38,"area":null},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2307.08925","title":"Integration of Large Language Models and Federated Learning","created":"2023-07-18","cited_by_count":31,"area":null},{"id":"2105.12049","title":"Honest-but-Curious Nets: Sensitive Attributes of Private Inputs Can Be Secretly Coded into the Classifiers' Outputs","created":"2021-05-25","cited_by_count":18,"area":null},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2208.09967","title":"Inferring Sensitive Attributes from Model Explanations","created":"2022-08-21","cited_by_count":15,"area":null},{"id":"2212.00612","title":"Purifier: Defending Data Inference Attacks via Transforming Confidence Scores","created":"2022-12-01","cited_by_count":15,"area":"safety"},{"id":"2405.20681","title":"No Free Lunch Theorem for Privacy-Preserving LLM Inference","created":"2024-05-31","cited_by_count":13,"area":null},{"id":"2205.10228","title":"You Don't Know My Favorite Color: Preventing Dialogue Representations from Revealing Speakers' Private Personas","created":"2022-04-26","cited_by_count":11,"area":null},{"id":"2302.08466","title":"Marich: A Query-efficient Distributionally Equivalent Model Extraction Attack using Public Data","created":"2023-02-16","cited_by_count":11,"area":null},{"id":"2204.04440","title":"Are Two Heads the Same as One? Identifying Disparate Treatment in Fair Neural Networks","created":"2022-04-09","cited_by_count":10,"area":null},{"id":"2207.12535","title":"Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning","created":"2022-07-25","cited_by_count":10,"area":"safety"},{"id":"2108.02707","title":"Fairness Properties of Face Recognition and Obfuscation Systems","created":"2021-08-05","cited_by_count":9,"area":null},{"id":"2211.10209","title":"On the Alignment of Group Fairness with Attribute Privacy","created":"2022-11-18","cited_by_count":9,"area":null},{"id":"2302.02162","title":"AUTOLYCUS: Exploiting Explainable AI (XAI) for Model Extraction Attacks against Interpretable Models","created":"2023-02-04","cited_by_count":9,"area":null},{"id":"2210.11049","title":"How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers","created":"2022-10-20","cited_by_count":8,"area":null},{"id":"2302.10701","title":"Scalable Infomin Learning","created":"2023-02-21","cited_by_count":8,"area":null},{"id":"2310.09827","title":"VFLAIR: A Research Library and Benchmark for Vertical Federated Learning","created":"2023-10-15","cited_by_count":8,"area":null},{"id":"2212.04371","title":"Skellam Mixture Mechanism: a Novel Approach to Federated Learning with Differential Privacy","created":"2022-12-08","cited_by_count":7,"area":null},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2404.00673","title":"A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasures","created":"2024-03-31","cited_by_count":6,"area":null},{"id":"2104.11413","title":"Unsupervised Information Obfuscation for Split Inference of Neural Networks","created":"2021-04-23","cited_by_count":5,"area":null},{"id":"2109.12550","title":"MixNN: Protection of Federated Learning Against Inference Attacks by Mixing Neural Network Layers","created":"2021-09-26","cited_by_count":5,"area":null},{"id":"2202.02242","title":"Dikaios: Privacy Auditing of Algorithmic Fairness via Attribute Inference Attacks","created":"2022-02-04","cited_by_count":5,"area":null},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2109.09023","title":"Anti-Neuron Watermarking: Protecting Personal Data Against Unauthorized Neural Networks","created":"2021-09-18","cited_by_count":4,"area":null},{"id":"2408.16913","title":"Analyzing Inference Privacy Risks Through Gradients in Machine Learning","created":"2024-08-29","cited_by_count":4,"area":null},{"id":"2110.03369","title":"The Connection between Out-of-Distribution Generalization and Privacy of ML Models","created":"2021-10-07","cited_by_count":3,"area":null},{"id":"2211.06716","title":"PriMask: Cascadable and Collusion-Resilient Data Masking for Mobile Cloud Inference","created":"2022-11-12","cited_by_count":3,"area":null},{"id":"2307.06123","title":"SoK: Comparing Different Membership Inference Attacks with a Comprehensive Benchmark","created":"2023-07-12","cited_by_count":3,"area":"safety"},{"id":"2310.13384","title":"Salted Inference: Enhancing Privacy while Maintaining Efficiency of Split Inference in Mobile Computing","created":"2023-10-20","cited_by_count":3,"area":null},{"id":"2409.15868","title":"Privacy Evaluation Benchmarks for NLP Models","created":"2024-09-24","cited_by_count":3,"area":null},{"id":"2409.19417","title":"Subject Data Auditing via Source Inference Attack in Cross-Silo Federated Learning","created":"2024-09-28","cited_by_count":3,"area":null},{"id":"2501.09320","title":"Cooperative Decentralized Backdoor Attacks on Vertical Federated Learning","created":"2025-01-16","cited_by_count":3,"area":null},{"id":"2209.13883","title":"MLink: Linking Black-Box Models from Multiple Domains for Collaborative Inference","created":"2022-09-28","cited_by_count":2,"area":null},{"id":"2212.10628","title":"Holistic risk assessment of inference attacks in machine learning","created":"2022-12-15","cited_by_count":2,"area":null},{"id":"2310.04015","title":"Anonymous Learning via Look-Alike Clustering: A Precise Analysis of Model Generalization","created":"2023-10-06","cited_by_count":2,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2402.12235","title":"The Fundamental Limits of Least-Privilege Learning","created":"2024-02-19","cited_by_count":2,"area":null},{"id":"2511.19536","title":"AttackPilot: Autonomous Inference Attacks Against ML Services With LLM-Based Agents","created":"2025-11-24","cited_by_count":2,"area":"agents"},{"id":"2105.03958","title":"Towards Explainable, Privacy-Preserved Human-Motion Affect Recognition","created":"2021-05-09","cited_by_count":1,"area":null},{"id":"2205.08821","title":"Lessons Learned: Defending Against Property Inference Attacks","created":"2022-05-18","cited_by_count":1,"area":"safety"},{"id":"2210.01864","title":"Recycling Scraps: Improving Private Learning by Leveraging Intermediate Checkpoints","created":"2022-10-04","cited_by_count":1,"area":null},{"id":"2306.04109","title":"Membership inference attack with relative decision boundary distance","created":"2023-06-07","cited_by_count":1,"area":"safety"},{"id":"2506.23296","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","created":"2025-06-29","cited_by_count":1,"area":null},{"id":"2512.18888","title":"Localising Shortcut Learning in Pixel Space via Ordinal Scoring Correlations for Attribution Representations (OSCAR)","created":"2025-12-21","cited_by_count":1,"area":null},{"id":"2601.06866","title":"United We Defend: Collaborative Membership Inference Defenses in Federated Learning","created":"2026-01-11","cited_by_count":1,"area":"safety"},{"id":"2203.12192","title":"Learning to Censor by Noisy Sampling","created":"2022-03-23","cited_by_count":0,"area":null},{"id":"2212.04223","title":"Vicious Classifiers: Assessing Inference-time Data Reconstruction Risk in Edge Computing","created":"2022-12-08","cited_by_count":0,"area":null},{"id":"2303.09067","title":"Secret-Keeping in Question Answering","created":"2023-03-16","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2406.01708","title":"SnatchML: Hijacking ML models without Training Access","created":"2024-06-03","cited_by_count":0,"area":null},{"id":"2409.03796","title":"Protecting Activity Sensing Data Privacy Using Hierarchical Information Dissociation","created":"2024-09-04","cited_by_count":0,"area":null},{"id":"2505.11740","title":"Simple and Effective Specialized Representations for Fair Classifiers","created":"2025-05-16","cited_by_count":0,"area":null},{"id":"2505.14323","title":"Securing Transfer-Learned Networks with Reverse Homomorphic Encryption","created":"2025-05-20","cited_by_count":0,"area":null},{"id":"2505.21792","title":"Multimodal Federated Learning: A Survey through the Lens of Different FL Paradigms","created":"2025-05-27","cited_by_count":0,"area":null},{"id":"2506.16460","title":"Black-Box Privacy Attacks on Shared Representations in Multitask Learning","created":"2025-06-19","cited_by_count":0,"area":null},{"id":"2510.06026","title":"Emergent AI Surveillance: Overlearned Person Re-Identification and Its Mitigation in Law Enforcement Context","created":"2025-10-07","cited_by_count":0,"area":null},{"id":"2601.09460","title":"SoK: Enhancing Cryptographic Collaborative Learning with Differential Privacy","created":"2026-01-14","cited_by_count":0,"area":null},{"id":"2601.13122","title":"Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forward","created":"2026-01-19","cited_by_count":0,"area":null},{"id":"2605.08343","title":"Private Vertical Federated Inference for Time-Series","created":"2026-05-08","cited_by_count":0,"area":null},{"id":"2605.22373","title":"Boundary-targeted Membership Inference Attacks on Safety Classifiers","created":"2026-05-21","cited_by_count":0,"area":"safety"},{"id":"2610.20494","title":"Quantifying privacy risks in foundation model representations of brain MRI","created":"2026-10-14","cited_by_count":0,"area":null}],"next_cursor":null}