{"total":96,"rows":[{"id":"2206.00719","title":"Dataset Distillation using Neural Feature Regression","created":"2022-06-01","cited_by_count":177,"area":null},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81,"area":null},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2108.04417","title":"Privacy-Preserving Machine Learning: Methods, Challenges and Directions","created":"2021-08-10","cited_by_count":58,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2110.08760","title":"Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implications","created":"2021-10-17","cited_by_count":52,"area":null},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2104.12669","title":"Exploiting Explanations for Model Inversion Attacks","created":"2021-04-26","cited_by_count":49,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2410.22235","title":"Auditing $f$-Differential Privacy in One Run","created":"2024-10-29","cited_by_count":30,"area":null},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2308.16375","title":"A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applications","created":"2023-08-31","cited_by_count":22,"area":null},{"id":"2307.16273","title":"zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training","created":"2023-07-30","cited_by_count":20,"area":null},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2304.02782","title":"FACE-AUDITOR: Data Auditing in Facial Recognition Systems","created":"2023-04-05","cited_by_count":16,"area":null},{"id":"2407.15100","title":"A General Framework for Data-Use Auditing of ML Models","created":"2024-07-21","cited_by_count":16,"area":null},{"id":"2208.08270","title":"On the Privacy Effect of Data Enhancement via the Lens of Memorization","created":"2022-08-17","cited_by_count":15,"area":null},{"id":"2208.10134","title":"Machine Learning with Confidential Computing: A Systematization of Knowledge","created":"2022-08-22","cited_by_count":15,"area":null},{"id":"2111.04394","title":"Get a Model! Model Hijacking Attack Against Machine Learning Models","created":"2021-11-08","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2101.02656","title":"Adversarial Machine Learning for 5G Communications Security","created":"2021-01-07","cited_by_count":12,"area":null},{"id":"2205.04525","title":"Towards a multi-stakeholder value-based assessment framework for algorithmic systems","created":"2022-05-09","cited_by_count":12,"area":null},{"id":"2105.03875","title":"Bounding Information Leakage in Machine Learning","created":"2021-05-09","cited_by_count":11,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2411.01583","title":"Trustworthy Federated Learning: Privacy, Security, and Beyond","created":"2024-11-03","cited_by_count":11,"area":null},{"id":"2112.02230","title":"SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning","created":"2021-12-04","cited_by_count":10,"area":null},{"id":"2101.03042","title":"Towards a Robust and Trustworthy Machine Learning System Development: An Engineering Perspective","created":"2021-01-08","cited_by_count":9,"area":null},{"id":"2112.12998","title":"DP-UTIL: Comprehensive Utility Analysis of Differential Privacy in Machine Learning","created":"2021-12-24","cited_by_count":8,"area":null},{"id":"2208.05969","title":"Safety and Performance, Why not Both? Bi-Objective Optimized Model Compression toward AI Software Deployment","created":"2022-08-11","cited_by_count":8,"area":null},{"id":"2402.09299","title":"Trained Without My Consent: Detecting Code Inclusion In Language Models Trained on Code","created":"2024-02-14","cited_by_count":8,"area":null},{"id":"2208.08662","title":"Private, Efficient, and Accurate: Protecting Models Trained by Multi-party Learning with Differential Privacy","created":"2022-08-18","cited_by_count":7,"area":null},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2404.00673","title":"A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasures","created":"2024-03-31","cited_by_count":6,"area":null},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2107.12173","title":"Membership Inference Attack and Defense for Wireless Signal Classifiers with Deep Learning","created":"2021-07-22","cited_by_count":5,"area":null},{"id":"2202.02242","title":"Dikaios: Privacy Auditing of Algorithmic Fairness via Attribute Inference Attacks","created":"2022-02-04","cited_by_count":5,"area":null},{"id":"2209.01688","title":"On the Privacy Risks of Cell-Based NAS Architectures","created":"2022-09-04","cited_by_count":5,"area":null},{"id":"2307.02984","title":"A Privacy-Preserving Walk in the Latent Space of Generative Models for Medical Applications","created":"2023-07-06","cited_by_count":5,"area":null},{"id":"2501.15718","title":"CENSOR: Defense Against Gradient Inversion via Orthogonal Subspace Bayesian Sampling","created":"2025-01-27","cited_by_count":5,"area":null},{"id":"2105.01401","title":"A Review of Confidentiality Threats Against Embedded Neural Network Models","created":"2021-05-04","cited_by_count":4,"area":null},{"id":"2105.06300","title":"Privacy Inference Attacks and Defenses in Cloud-based Deep Neural Network: A Survey","created":"2021-05-13","cited_by_count":4,"area":null},{"id":"2109.09023","title":"Anti-Neuron Watermarking: Protecting Personal Data Against Unauthorized Neural Networks","created":"2021-09-18","cited_by_count":4,"area":null},{"id":"2203.06555","title":"Label-only Model Inversion Attack: The Attack that Requires the Least Information","created":"2022-03-13","cited_by_count":4,"area":null},{"id":"2205.06506","title":"Collaborative Drug Discovery: Inference-level Data Protection Perspective","created":"2022-05-13","cited_by_count":4,"area":null},{"id":"2207.02337","title":"Federated and Transfer Learning: A Survey on Adversaries and Defense Mechanisms","created":"2022-07-05","cited_by_count":4,"area":null},{"id":"2309.17192","title":"A Survey of Incremental Transfer Learning: Combining Peer-to-Peer Federated Learning and Domain Incremental Learning for Multicenter Collaboration","created":"2023-09-29","cited_by_count":4,"area":null},{"id":"2405.19272","title":"Differentially Private Clustered Federated Learning","created":"2024-05-29","cited_by_count":4,"area":null},{"id":"2408.16913","title":"Analyzing Inference Privacy Risks Through Gradients in Machine Learning","created":"2024-08-29","cited_by_count":4,"area":null},{"id":"2501.10985","title":"GRID: Protecting Training Graph from Link Stealing Attacks on GNN Models","created":"2025-01-19","cited_by_count":4,"area":null},{"id":"2110.03369","title":"The Connection between Out-of-Distribution Generalization and Privacy of ML Models","created":"2021-10-07","cited_by_count":3,"area":null},{"id":"2303.13727","title":"A Survey on Secure and Private Federated Learning Using Blockchain: Theory and Application in Resource-constrained Computing","created":"2023-03-24","cited_by_count":3,"area":null},{"id":"2306.00687","title":"Adversarial Robustness in Unsupervised Machine Learning: A Systematic Review","created":"2023-06-01","cited_by_count":3,"area":null},{"id":"2306.02488","title":"Adversary for Social Good: Leveraging Adversarial Attacks to Protect Personal Attribute Privacy","created":"2023-06-04","cited_by_count":3,"area":null},{"id":"2407.16164","title":"Representation Magnitude has a Liability to Privacy Vulnerability","created":"2024-07-23","cited_by_count":3,"area":null},{"id":"2409.15868","title":"Privacy Evaluation Benchmarks for NLP Models","created":"2024-09-24","cited_by_count":3,"area":null},{"id":"2409.19413","title":"Membership Privacy Evaluation in Deep Spiking Neural Networks","created":"2024-09-28","cited_by_count":3,"area":null},{"id":"2509.14608","title":"Enterprise AI Must Enforce Participant-Aware Access Control","created":"2025-09-18","cited_by_count":3,"area":null},{"id":"2101.05855","title":"Preserving Privacy in Personalized Models for Distributed Mobile Services","created":"2021-01-14","cited_by_count":2,"area":null},{"id":"2310.00488","title":"Membership Privacy Risks of Sharpness Aware Minimization","created":"2023-09-30","cited_by_count":2,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2411.02099","title":"Differentially Private Integrated Decision Gradients (IDG-DP) for Radar-based Human Activity Recognition","created":"2024-11-04","cited_by_count":2,"area":null},{"id":"2505.02828","title":"Privacy Risks and Preservation Methods in Explainable Artificial Intelligence: A Scoping Review","created":"2025-05-05","cited_by_count":2,"area":null},{"id":"2508.13730","title":"On the Security and Privacy of Federated Learning: A Survey with Attacks, Defenses, Frameworks, Applications, and Future Directions","created":"2025-08-19","cited_by_count":2,"area":null},{"id":"2202.02902","title":"Redactor: A Data-centric and Individualized Defense Against Inference Attacks","created":"2022-02-07","cited_by_count":1,"area":null},{"id":"2305.05869","title":"Finding Meaningful Distributions of ML Black-boxes under Forensic Investigation","created":"2023-05-10","cited_by_count":1,"area":null},{"id":"2305.15697","title":"Privacy Protectability: An Information-theoretical Approach","created":"2023-05-25","cited_by_count":1,"area":null},{"id":"2310.12112","title":"A Cautionary Tale: On the Role of Reference Data in Empirical Privacy Defenses","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2404.00696","title":"Privacy Re-identification Attacks on Tabular GANs","created":"2024-03-31","cited_by_count":1,"area":null},{"id":"2411.07070","title":"On Active Privacy Auditing in Supervised Fine-tuning for White-Box Language Models","created":"2024-11-11","cited_by_count":1,"area":null},{"id":"2411.16763","title":"Hide in Plain Sight: Clean-Label Backdoor for Auditing Membership Inference","created":"2024-11-24","cited_by_count":1,"area":null},{"id":"2507.04528","title":"Towards integration of Privacy Enhancing Technologies in Explainable Artificial Intelligence","created":"2025-07-06","cited_by_count":1,"area":null},{"id":"2602.02296","title":"Decoupling Generalizability and Membership Privacy Risks in Neural Networks","created":"2026-02-02","cited_by_count":1,"area":null},{"id":"2605.07674","title":"Differentially Private Auditing Under Strategic Response","created":"2026-05-08","cited_by_count":1,"area":null},{"id":"2112.07850","title":"HyObscure: Hybrid Obscuring for Privacy-Preserving Data Publishing","created":"2021-12-15","cited_by_count":0,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2402.00896","title":"Privacy and Security Implications of Cloud-Based AI Services : A Survey","created":"2024-01-31","cited_by_count":0,"area":null},{"id":"2403.16004","title":"A Federated Parameter Aggregation Method for Node Classification Tasks with Different Graph Network Structures","created":"2024-03-24","cited_by_count":0,"area":null},{"id":"2501.08236","title":"Privacy-Preserving Model and Preprocessing Verification for Machine Learning","created":"2025-01-14","cited_by_count":0,"area":null},{"id":"2510.19371","title":"AegisRF: Adversarial Perturbations Guided with Sensitivity for Protecting Intellectual Property of Neural Radiance Fields","created":"2025-10-22","cited_by_count":0,"area":null},{"id":"2512.12840","title":"PRIVEE: Privacy-Preserving Vertical Federated Learning Against Feature Inference Attacks","created":"2025-12-14","cited_by_count":0,"area":null},{"id":"2602.06110","title":"Private and interpretable clinical prediction with quantum-inspired tensor train models","created":"2026-02-05","cited_by_count":0,"area":null},{"id":"2603.13186","title":"Learnability and Privacy Vulnerability are Entangled in a Few Critical Weights","created":"2026-03-13","cited_by_count":0,"area":null},{"id":"2606.10595","title":"From Data Heterogeneity to Convergence: A Data-Centric Review of Federated Learning","created":"2026-06-09","cited_by_count":0,"area":null},{"id":"2606.24774","title":"Revealing Training Data Exposure in Vision Language Large Models via Parameter Gradients","created":"2026-06-23","cited_by_count":0,"area":null},{"id":"2607.02903","title":"TIER: Trajectory-Invariant Explanation Regularization for Membership Privacy","created":"2026-07-03","cited_by_count":0,"area":null},{"id":"2607.02932","title":"PromptPET: Privacy-Utility Optimized Prompt Obfuscation","created":"2026-07-03","cited_by_count":0,"area":null},{"id":"2609.10627","title":"SoK: Privacy Attacks on Machine Learning via Explainable AI","created":"2026-09-09","cited_by_count":0,"area":null}],"next_cursor":null}