{"total":81,"rows":[{"id":"2305.15717","title":"The False Promise of Imitating Proprietary LLMs","created":"2023-05-25","cited_by_count":263,"area":"synth"},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58,"area":null},{"id":"2105.07381","title":"Undistillable: Making A Nasty Teacher That CANNOT teach students","created":"2021-05-16","cited_by_count":36,"area":"distill"},{"id":"2209.09024","title":"Dataset Inference for Self-Supervised Models","created":"2022-09-16","cited_by_count":36,"area":null},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35,"area":null},{"id":"2107.08909","title":"MEGEX: Data-Free Model Extraction Attack against Gradient-Based Explainable AI","created":"2021-07-19","cited_by_count":35,"area":null},{"id":"2510.09263","title":"SynthID-Image: Image watermarking at internet scale","created":"2025-10-10","cited_by_count":31,"area":null},{"id":"2105.00623","title":"Black-Box Dissector: Towards Erasing-based Hard-Label Model Stealing Attack","created":"2021-05-03","cited_by_count":25,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2205.07890","title":"On the Difficulty of Defending Self-Supervised Learning against Model Extraction","created":"2022-05-16","cited_by_count":22,"area":null},{"id":"2201.09243","title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work","created":"2022-01-23","cited_by_count":21,"area":null},{"id":"2206.14157","title":"How to Steer Your Adversary: Targeted and Efficient Model Stealing Defenses with Gradient Redirection","created":"2022-06-28","cited_by_count":21,"area":null},{"id":"2310.07152","title":"No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device ML","created":"2023-10-11","cited_by_count":21,"area":null},{"id":"2312.05386","title":"Model Extraction Attacks Revisited","created":"2023-12-08","cited_by_count":21,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2410.04490","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","created":"2024-10-06","cited_by_count":14,"area":null},{"id":"2202.12506","title":"On the Effectiveness of Dataset Watermarking in Adversarial Settings","created":"2022-02-25","cited_by_count":12,"area":null},{"id":"2207.01991","title":"Conflicting Interactions Among Protection Mechanisms for Machine Learning Models","created":"2022-07-05","cited_by_count":12,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2212.05428","title":"ezDPS: An Efficient and Zero-Knowledge Machine Learning Inference Pipeline","created":"2022-12-11","cited_by_count":10,"area":null},{"id":"2308.00958","title":"Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attacks","created":"2023-08-02","cited_by_count":10,"area":null},{"id":"2310.08565","title":"Security Considerations in AI-Robotics: A Survey of Current Methods, Challenges, and Opportunities","created":"2023-10-12","cited_by_count":9,"area":null},{"id":"2407.01251","title":"QUEEN: Query Unlearning against Model Extraction","created":"2024-07-01","cited_by_count":9,"area":"safety"},{"id":"2411.07536","title":"Model Stealing for Any Low-Rank Language Model","created":"2024-11-12","cited_by_count":9,"area":null},{"id":"2210.13631","title":"On the Robustness of Dataset Inference","created":"2022-10-24","cited_by_count":8,"area":null},{"id":"2506.02362","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","created":"2025-06-03","cited_by_count":8,"area":null},{"id":"2208.08662","title":"Private, Efficient, and Accurate: Protecting Models Trained by Multi-party Learning with Differential Privacy","created":"2022-08-18","cited_by_count":7,"area":null},{"id":"2303.18178","title":"Robust and IP-Protecting Vertical Federated Learning against Unexpected Quitting of Parties","created":"2023-03-28","cited_by_count":7,"area":null},{"id":"2405.02365","title":"ModelShield: Adaptive and Robust Watermark against Model Extraction Attack","created":"2024-05-03","cited_by_count":7,"area":"safety"},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2209.08443","title":"HAPI: A Large-scale Longitudinal Dataset of Commercial ML API Predictions","created":"2022-09-18","cited_by_count":6,"area":null},{"id":"2501.01090","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","created":"2025-01-02","cited_by_count":6,"area":null},{"id":"2302.11982","title":"A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2406.18540","title":"Fully Exploiting Every Real Sample: SuperPixel Sample Gradient Model Stealing","created":"2024-05-18","cited_by_count":5,"area":null},{"id":"2502.20924","title":"Decoder Gradient Shield: Provable and High-Fidelity Prevention of Gradient-Based Box-Free Watermark Removal","created":"2025-02-28","cited_by_count":5,"area":null},{"id":"2602.20419","title":"CREDIT: Certified Ownership Verification of Deep Neural Networks Against Model Extraction Attacks","created":"2026-02-23","cited_by_count":5,"area":null},{"id":"2110.03175","title":"Fingerprinting Multi-exit Deep Neural Network Models via Inference Time","created":"2021-10-07","cited_by_count":4,"area":null},{"id":"2310.01959","title":"Beyond Labeling Oracles: What does it mean to steal ML models?","created":"2023-10-03","cited_by_count":4,"area":null},{"id":"2104.12623","title":"Good Artists Copy, Great Artists Steal: Model Extraction Attacks Against Image Translation Models","created":"2021-04-26","cited_by_count":3,"area":null},{"id":"2106.11424","title":"HODA: Hardness-Oriented Detection of Model Extraction Attacks","created":"2021-06-21","cited_by_count":3,"area":null},{"id":"2203.10923","title":"TinyMLOps: Operational Challenges for Widespread Edge AI Adoption","created":"2022-03-21","cited_by_count":3,"area":null},{"id":"2306.11338","title":"FDINet: Protecting against DNN Model Extraction via Feature Distortion Index","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2405.07004","title":"Stealthy Imitation: Reward-guided Environment-free Policy Stealing","created":"2024-05-11","cited_by_count":3,"area":"alignment"},{"id":"2411.09945","title":"TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models","created":"2024-11-15","cited_by_count":3,"area":null},{"id":"2507.00012","title":"Towards Undistillable Models by Minimizing Conditional Mutual Information","created":"2025-06-13","cited_by_count":3,"area":"distill"},{"id":"2606.15810","title":"Let Them Steal: Trapping Large Language Model Extraction Attacks with Knowledge Honeypot","created":"2026-06-14","cited_by_count":3,"area":null},{"id":"2102.05104","title":"\"What's in the box?!\": Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models","created":"2021-02-09","cited_by_count":2,"area":null},{"id":"2209.04547","title":"Defend Data Poisoning Attacks on Voice Authentication","created":"2022-09-09","cited_by_count":2,"area":"safety"},{"id":"2307.01292","title":"Pareto-Secure Machine Learning (PSML): Fingerprinting and Securing Inference Serving Systems","created":"2023-07-03","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2503.00065","title":"ADAGE: Active Defenses Against GNN Extraction","created":"2025-02-27","cited_by_count":2,"area":null},{"id":"2103.06797","title":"BODAME: Bilevel Optimization for Defense Against Model Extraction","created":"2021-03-11","cited_by_count":1,"area":null},{"id":"2309.01838","title":"Efficient Defense Against Model Stealing Attacks on Convolutional Neural Networks","created":"2023-09-04","cited_by_count":1,"area":null},{"id":"2312.15036","title":"SODA: Protecting Proprietary Information in On-Device Machine Learning Models","created":"2023-12-22","cited_by_count":1,"area":null},{"id":"2502.15567","title":"Model Privacy: A Unified Framework for Understanding Model Stealing Attacks and Defenses","created":"2025-02-21","cited_by_count":1,"area":null},{"id":"2503.12497","title":"D-ADD: An Effective Plug-In for Defending Against Model Stealing","created":"2025-03-16","cited_by_count":1,"area":null},{"id":"2503.18081","title":"Model-Guardian: Protecting against Data-Free Model Stealing Using Gradient Representations and Deceptive Predictions","created":"2025-03-23","cited_by_count":1,"area":null},{"id":"2601.11952","title":"Decoder Gradient Shields: A Family of Provable and High-Fidelity Methods Against Gradient-Based Box-Free Watermark Removal","created":"2026-01-17","cited_by_count":1,"area":null},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2605.18829","title":"Lossless Anti-Distillation Sampling","created":"2026-05-12","cited_by_count":1,"area":null},{"id":"2204.00292","title":"Preventing Distillation-based Attacks on Neural Network IP","created":"2022-04-01","cited_by_count":0,"area":null},{"id":"2206.11480","title":"A Framework for Understanding Model Extraction Attack and Defense","created":"2022-06-23","cited_by_count":0,"area":null},{"id":"2312.10943","title":"Model Stealing Attack against Graph Classification with Authenticity, Uncertainty and Diversity","created":"2023-12-18","cited_by_count":0,"area":null},{"id":"2312.11571","title":"Model Stealing Attack against Recommender System","created":"2023-12-18","cited_by_count":0,"area":null},{"id":"2411.13047","title":"Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors","created":"2024-11-20","cited_by_count":0,"area":"safety"},{"id":"2501.09328","title":"Neural Honeytrace: Plug&Play Watermarking Framework against Model Extraction Attacks","created":"2025-01-16","cited_by_count":0,"area":"safety"},{"id":"2503.06188","title":"Attackers Can Do Better: Over- and Understated Factors of Model Stealing Attacks","created":"2025-03-08","cited_by_count":0,"area":null},{"id":"2506.19464","title":"Assessing Risk of Stealing Proprietary Models for Medical Imaging Tasks","created":"2025-06-24","cited_by_count":0,"area":null},{"id":"2509.16546","title":"Train to Defend: First Defense Against Cryptanalytic Neural Network Parameter Extraction Attacks","created":"2025-09-20","cited_by_count":0,"area":null},{"id":"2511.01377","title":"Protecting the Neural Networks against FGSM Attack Using Machine Unlearning","created":"2025-11-03","cited_by_count":0,"area":"safety"},{"id":"2511.07170","title":"On Stealing Graph Neural Network Models","created":"2025-11-10","cited_by_count":0,"area":null},{"id":"2512.23948","title":"DivQAT: Enhancing Robustness of Quantized Convolutional Neural Networks against Model Extraction Attacks","created":"2025-12-30","cited_by_count":0,"area":null},{"id":"2606.11698","title":"T2S: A Rehearsal-Based Approach for Extraction-Resistant Model Watermarking","created":"2026-06-10","cited_by_count":0,"area":"safety"},{"id":"2607.15467","title":"ADS-C: Antidistillation Sampling for Classification","created":"2026-07-16","cited_by_count":0,"area":"distill"},{"id":"2608.01023","title":"Caliber: Cross-Architecture Extraction-Cost Control for Score-Returning APIs","created":"2026-08-02","cited_by_count":0,"area":null},{"id":"2608.11495","title":"Defending against Model Extraction for GNNs with Model Reprogramming","created":"2026-08-11","cited_by_count":0,"area":null},{"id":"2609.40034","title":"Efficient Active Auditing of Multi-Group Fairness with Bias Probes","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}