{"total":175,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2310.16789","title":"Detecting Pretraining Data from Large Language Models","created":"2023-10-25","cited_by_count":387,"area":null},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248,"area":"safety"},{"id":"2108.11577","title":"Machine Unlearning of Features and Labels","created":"2021-08-26","cited_by_count":229,"area":"safety"},{"id":"2111.08440","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","created":"2021-11-15","cited_by_count":147,"area":"safety"},{"id":"2206.10469","title":"The Privacy Onion Effect: Memorization is Relative","created":"2022-06-21","cited_by_count":136,"area":null},{"id":"2104.10706","title":"Dataset Inference: Ownership Resolution in Machine Learning","created":"2021-04-21","cited_by_count":116,"area":"safety"},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2208.14933","title":"Membership Inference Attacks by Exploiting Loss Trajectory","created":"2022-08-31","cited_by_count":101,"area":"safety"},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2402.18649","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","created":"2024-02-28","cited_by_count":77,"area":null},{"id":"2203.07618","title":"Do Language Models Plagiarize?","created":"2022-03-15","cited_by_count":73,"area":null},{"id":"2302.04460","title":"Bag of Tricks for Training Data Extraction from Language Models","created":"2023-02-09","cited_by_count":70,"area":null},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2406.15968","title":"ReCaLL: Membership Inference via Relative Conditional Log-Likelihoods","created":"2024-06-23","cited_by_count":64,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57,"area":"safety"},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2110.08760","title":"Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implications","created":"2021-10-17","cited_by_count":52,"area":null},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2112.03476","title":"Defending against Model Stealing via Verifying Embedded External Features","created":"2021-12-07","cited_by_count":46,"area":null},{"id":"2202.03335","title":"Membership Inference Attacks and Defenses in Neural Network Pruning","created":"2022-02-07","cited_by_count":45,"area":"safety"},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2409.01380","title":"Membership Inference Attacks Against In-Context Learning","created":"2024-09-02","cited_by_count":43,"area":"safety"},{"id":"2210.10750","title":"Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queries","created":"2022-10-19","cited_by_count":40,"area":"safety"},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38,"area":null},{"id":"2310.00108","title":"Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot Study","created":"2023-09-29","cited_by_count":38,"area":"safety"},{"id":"2502.18943","title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models","created":"2025-02-26","cited_by_count":37,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2107.10171","title":"Leave-one-out Unfairness","created":"2021-07-21","cited_by_count":36,"area":null},{"id":"2106.11384","title":"Membership Inference on Word Embedding and Beyond","created":"2021-06-21","cited_by_count":35,"area":"safety"},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2111.07608","title":"Property Inference Attacks Against GANs","created":"2021-11-15","cited_by_count":33,"area":"safety"},{"id":"2411.02902","title":"Membership Inference Attacks against Large Vision-Language Models","created":"2024-11-05","cited_by_count":33,"area":"mllm"},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2410.22235","title":"Auditing $f$-Differential Privacy in One Run","created":"2024-10-29","cited_by_count":30,"area":null},{"id":"2307.01610","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction","created":"2023-07-04","cited_by_count":29,"area":"safety"},{"id":"2306.10308","title":"Achilles' Heels: Vulnerable Record Identification in Synthetic Data Publishing","created":"2023-06-17","cited_by_count":28,"area":null},{"id":"2202.05189","title":"Understanding Rare Spurious Correlations in Neural Networks","created":"2022-02-10","cited_by_count":27,"area":null},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2306.14123","title":"Privacy and Fairness in Federated Learning: on the Perspective of Trade-off","created":"2023-06-25","cited_by_count":26,"area":null},{"id":"2210.09126","title":"Verifiable and Provably Secure Machine Unlearning","created":"2022-10-17","cited_by_count":25,"area":"safety"},{"id":"2406.01333","title":"Probing Language Models for Pre-training Data Detection","created":"2024-06-03","cited_by_count":25,"area":null},{"id":"2111.08230","title":"Selective Ensembles for Consistent Predictions","created":"2021-11-16","cited_by_count":23,"area":null},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2105.02866","title":"Membership Inference Attacks on Deep Regression Models for Neuroimaging","created":"2021-05-06","cited_by_count":22,"area":"safety"},{"id":"2108.12318","title":"CAPE: Context-Aware Private Embeddings for Private Language Learning","created":"2021-08-27","cited_by_count":22,"area":null},{"id":"2310.19410","title":"Generated Distributions Are All You Need for Membership Inference Attacks Against Generative Models","created":"2023-10-30","cited_by_count":22,"area":"diffusion"},{"id":"2208.02820","title":"MOVE: Effective and Harmless Ownership Verification via Embedded External Features","created":"2022-08-04","cited_by_count":21,"area":null},{"id":"2307.10655","title":"A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency","created":"2023-07-20","cited_by_count":21,"area":null},{"id":"2310.07152","title":"No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device ML","created":"2023-10-11","cited_by_count":21,"area":null},{"id":"2409.00426","title":"Is Difficulty Calibration All We Need? Towards More Practical Membership Inference Attacks","created":"2024-08-31","cited_by_count":21,"area":"safety"},{"id":"2205.13680","title":"Membership Inference Attack Using Self Influence Functions","created":"2022-05-26","cited_by_count":20,"area":"safety"},{"id":"2502.14921","title":"The Canary's Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text","created":"2025-02-19","cited_by_count":18,"area":"synth"},{"id":"2209.08615","title":"Membership Inference Attacks and Generalization: A Causal Perspective","created":"2022-09-18","cited_by_count":17,"area":"safety"},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2208.08270","title":"On the Privacy Effect of Data Enhancement via the Lens of Memorization","created":"2022-08-17","cited_by_count":15,"area":null},{"id":"2406.03880","title":"Memorization in deep learning: A survey","created":"2024-06-06","cited_by_count":15,"area":null},{"id":"2410.16618","title":"SoK: Dataset Copyright Auditing in Machine Learning Systems","created":"2024-10-22","cited_by_count":15,"area":null},{"id":"2202.01243","title":"Parameters or Privacy: A Provable Tradeoff Between Overparameterization and Membership Inference","created":"2022-02-02","cited_by_count":14,"area":"safety"},{"id":"2306.01181","title":"TMI! Finetuned Models Leak Private Information from their Pretraining Data","created":"2023-06-01","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2402.09225","title":"Is My Data in Your AI? Membership Inference Test (MINT) applied to Face Biometrics","created":"2024-02-14","cited_by_count":13,"area":"safety"},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2405.16978","title":"OSLO: One-Shot Label-Only Membership Inference Attacks","created":"2024-05-27","cited_by_count":13,"area":"safety"},{"id":"2101.02656","title":"Adversarial Machine Learning for 5G Communications Security","created":"2021-01-07","cited_by_count":12,"area":null},{"id":"2204.09391","title":"You Are What You Write: Preserving Privacy in the Era of Large Language Models","created":"2022-04-20","cited_by_count":12,"area":null},{"id":"2309.16398","title":"Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Survey","created":"2023-09-28","cited_by_count":12,"area":null},{"id":"2503.04036","title":"Robust Data Watermarking in Language Models by Injecting Fictitious Knowledge","created":"2025-03-06","cited_by_count":12,"area":"safety"},{"id":"2104.08273","title":"Membership Inference Attacks on Knowledge Graphs","created":"2021-04-16","cited_by_count":11,"area":"safety"},{"id":"2105.03875","title":"Bounding Information Leakage in Machine Learning","created":"2021-05-09","cited_by_count":11,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2305.12100","title":"How Spurious Features Are Memorized: Precise Analysis for Random and NTK Features","created":"2023-05-20","cited_by_count":11,"area":null},{"id":"2410.06186","title":"The Last Iterate Advantage: Empirical Auditing and Principled Heuristic Analysis of Differentially Private SGD","created":"2024-10-08","cited_by_count":11,"area":null},{"id":"2105.05381","title":"Accuracy-Privacy Trade-off in Deep Ensemble: A Membership Inference Perspective","created":"2021-05-12","cited_by_count":10,"area":"safety"},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2112.02230","title":"SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning","created":"2021-12-04","cited_by_count":10,"area":null},{"id":"2206.04591","title":"Privacy Leakage in Text Classification: A Data Extraction Approach","created":"2022-06-09","cited_by_count":10,"area":null},{"id":"2207.12535","title":"Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning","created":"2022-07-25","cited_by_count":10,"area":"safety"},{"id":"2202.04856","title":"PPA: Preference Profiling Attack Against Federated Learning","created":"2022-02-10","cited_by_count":9,"area":null},{"id":"2302.09813","title":"Audit to Forget: A Unified Method to Revoke Patients' Private Data in Intelligent Healthcare","created":"2023-02-20","cited_by_count":9,"area":null},{"id":"2306.05093","title":"Investigating the Effect of Misalignment on Membership Privacy in the White-box Setting","created":"2023-06-08","cited_by_count":9,"area":null},{"id":"2406.07698","title":"Label Smoothing Improves Machine Unlearning","created":"2024-06-11","cited_by_count":9,"area":"safety"},{"id":"2504.19274","title":"TeleSparse: Practical Privacy-Preserving Verification of Deep Neural Networks","created":"2025-04-27","cited_by_count":9,"area":null},{"id":"2507.18302","title":"LoRA-Leak: Membership Inference Attacks Against LoRA Fine-tuned Language Models","created":"2025-07-24","cited_by_count":9,"area":"safety"},{"id":"2102.03314","title":"On Utility and Privacy in Synthetic Genomic Data","created":"2021-02-05","cited_by_count":8,"area":"safety"},{"id":"2205.06369","title":"How to Combine Membership-Inference Attacks on Multiple Updated Models","created":"2022-05-12","cited_by_count":8,"area":"safety"},{"id":"2205.06986","title":"Evaluating Membership Inference Through Adversarial Robustness","created":"2022-05-14","cited_by_count":8,"area":"safety"},{"id":"2310.11970","title":"Quantifying Privacy Risks of Prompts in Visual Prompt Learning","created":"2023-10-18","cited_by_count":8,"area":"safety"},{"id":"2402.09299","title":"Trained Without My Consent: Detecting Code Inclusion In Language Models Trained on Code","created":"2024-02-14","cited_by_count":8,"area":null},{"id":"2405.14517","title":"TUNI: A Textual Unimodal Detector for Identity Inference in CLIP Models","created":"2024-05-23","cited_by_count":8,"area":null},{"id":"2604.00419","title":"G-Drift MIA: Membership Inference via Gradient-Induced Feature Drift in LLMs","created":"2026-04-01","cited_by_count":8,"area":"safety"},{"id":"2101.05405","title":"Training Data Leakage Analysis in Language Models","created":"2021-01-14","cited_by_count":7,"area":null},{"id":"2207.10802","title":"Combing for Credentials: Active Pattern Extraction from Smart Reply","created":"2022-07-14","cited_by_count":7,"area":null},{"id":"2207.12263","title":"SecretGen: Privacy Recovery on Pre-Trained Models via Distribution Discrimination","created":"2022-07-25","cited_by_count":7,"area":null},{"id":"2210.01075","title":"Decompiling x86 Deep Neural Network Executables","created":"2022-10-03","cited_by_count":7,"area":null}],"next_cursor":"100"}