{"total":197,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2206.00719","title":"Dataset Distillation using Neural Feature Regression","created":"2022-06-01","cited_by_count":177,"area":null},{"id":"2111.08440","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","created":"2021-11-15","cited_by_count":147,"area":"safety"},{"id":"2201.05629","title":"Zero-Shot Machine Unlearning","created":"2022-01-14","cited_by_count":133,"area":"safety"},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2208.14933","title":"Membership Inference Attacks by Exploiting Loss Trajectory","created":"2022-08-31","cited_by_count":101,"area":"safety"},{"id":"2311.06062","title":"Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibration","created":"2023-11-10","cited_by_count":98,"area":"safety"},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81,"area":null},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78,"area":"safety"},{"id":"2108.11023","title":"EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning","created":"2021-08-25","cited_by_count":73,"area":"safety"},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2108.04417","title":"Privacy-Preserving Machine Learning: Methods, Challenges and Directions","created":"2021-08-10","cited_by_count":58,"area":null},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57,"area":"safety"},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2110.08760","title":"Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implications","created":"2021-10-17","cited_by_count":52,"area":null},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2104.12669","title":"Exploiting Explanations for Model Inversion Attacks","created":"2021-04-26","cited_by_count":49,"area":null},{"id":"2202.03335","title":"Membership Inference Attacks and Defenses in Neural Network Pruning","created":"2022-02-07","cited_by_count":45,"area":"safety"},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2310.00108","title":"Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot Study","created":"2023-09-29","cited_by_count":38,"area":"safety"},{"id":"2207.05801","title":"RelaxLoss: Defending Membership Inference Attacks without Losing Utility","created":"2022-07-12","cited_by_count":37,"area":"safety"},{"id":"2502.18943","title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models","created":"2025-02-26","cited_by_count":37,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2411.10512","title":"On the Privacy Risk of In-context Learning","created":"2024-11-15","cited_by_count":32,"area":"safety"},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2410.22235","title":"Auditing $f$-Differential Privacy in One Run","created":"2024-10-29","cited_by_count":30,"area":null},{"id":"2307.01610","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction","created":"2023-07-04","cited_by_count":29,"area":"safety"},{"id":"2203.06580","title":"One Parameter Defense -- Defending against Data Inference Attacks via Differential Privacy","created":"2022-03-13","cited_by_count":27,"area":"safety"},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2403.09562","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","created":"2024-03-14","cited_by_count":23,"area":"safety"},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2308.16375","title":"A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applications","created":"2023-08-31","cited_by_count":22,"area":null},{"id":"2205.13680","title":"Membership Inference Attack Using Self Influence Functions","created":"2022-05-26","cited_by_count":20,"area":"safety"},{"id":"2307.16273","title":"zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training","created":"2023-07-30","cited_by_count":20,"area":null},{"id":"2209.08615","title":"Membership Inference Attacks and Generalization: A Causal Perspective","created":"2022-09-18","cited_by_count":17,"area":"safety"},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2304.02782","title":"FACE-AUDITOR: Data Auditing in Facial Recognition Systems","created":"2023-04-05","cited_by_count":16,"area":null},{"id":"2407.15100","title":"A General Framework for Data-Use Auditing of ML Models","created":"2024-07-21","cited_by_count":16,"area":null},{"id":"2208.08270","title":"On the Privacy Effect of Data Enhancement via the Lens of Memorization","created":"2022-08-17","cited_by_count":15,"area":null},{"id":"2208.10134","title":"Machine Learning with Confidential Computing: A Systematization of Knowledge","created":"2022-08-22","cited_by_count":15,"area":null},{"id":"2212.00612","title":"Purifier: Defending Data Inference Attacks via Transforming Confidence Scores","created":"2022-12-01","cited_by_count":15,"area":"safety"},{"id":"2406.06186","title":"A Survey on Machine Unlearning: Techniques and New Emerged Privacy Risks","created":"2024-06-10","cited_by_count":15,"area":"safety"},{"id":"2111.04394","title":"Get a Model! Model Hijacking Attack Against Machine Learning Models","created":"2021-11-08","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2405.16978","title":"OSLO: One-Shot Label-Only Membership Inference Attacks","created":"2024-05-27","cited_by_count":13,"area":"safety"},{"id":"2101.02656","title":"Adversarial Machine Learning for 5G Communications Security","created":"2021-01-07","cited_by_count":12,"area":null},{"id":"2205.04525","title":"Towards a multi-stakeholder value-based assessment framework for algorithmic systems","created":"2022-05-09","cited_by_count":12,"area":null},{"id":"2206.12401","title":"Debiasing Learning for Membership Inference Attacks Against Recommender Systems","created":"2022-06-24","cited_by_count":12,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2105.03875","title":"Bounding Information Leakage in Machine Learning","created":"2021-05-09","cited_by_count":11,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2403.08481","title":"SoK: Reducing the Vulnerability of Fine-tuned Language Models to Membership Inference Attacks","created":"2024-03-13","cited_by_count":11,"area":"safety"},{"id":"2411.01583","title":"Trustworthy Federated Learning: Privacy, Security, and Beyond","created":"2024-11-03","cited_by_count":11,"area":null},{"id":"2506.13972","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2105.05381","title":"Accuracy-Privacy Trade-off in Deep Ensemble: A Membership Inference Perspective","created":"2021-05-12","cited_by_count":10,"area":"safety"},{"id":"2112.02230","title":"SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning","created":"2021-12-04","cited_by_count":10,"area":null},{"id":"2207.12535","title":"Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning","created":"2022-07-25","cited_by_count":10,"area":"safety"},{"id":"2101.03042","title":"Towards a Robust and Trustworthy Machine Learning System Development: An Engineering Perspective","created":"2021-01-08","cited_by_count":9,"area":null},{"id":"2103.03078","title":"Defending Medical Image Diagnostics against Privacy Attacks using Generative Methods","created":"2021-03-04","cited_by_count":9,"area":"safety"},{"id":"2404.02462","title":"A Unified Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2024-04-03","cited_by_count":9,"area":"safety"},{"id":"2112.12998","title":"DP-UTIL: Comprehensive Utility Analysis of Differential Privacy in Machine Learning","created":"2021-12-24","cited_by_count":8,"area":null},{"id":"2205.06369","title":"How to Combine Membership-Inference Attacks on Multiple Updated Models","created":"2022-05-12","cited_by_count":8,"area":"safety"},{"id":"2208.05969","title":"Safety and Performance, Why not Both? Bi-Objective Optimized Model Compression toward AI Software Deployment","created":"2022-08-11","cited_by_count":8,"area":null},{"id":"2310.11970","title":"Quantifying Privacy Risks of Prompts in Visual Prompt Learning","created":"2023-10-18","cited_by_count":8,"area":"safety"},{"id":"2402.09299","title":"Trained Without My Consent: Detecting Code Inclusion In Language Models Trained on Code","created":"2024-02-14","cited_by_count":8,"area":null},{"id":"2506.15115","title":"Towards Reliable Forgetting: A Survey on Machine Unlearning Verification","created":"2025-06-18","cited_by_count":8,"area":"safety"},{"id":"2208.08662","title":"Private, Efficient, and Accurate: Protecting Models Trained by Multi-party Learning with Differential Privacy","created":"2022-08-18","cited_by_count":7,"area":null},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2508.09603","title":"The Surprising Effectiveness of Membership Inference with Simple N-Gram Coverage","created":"2025-08-13","cited_by_count":7,"area":"safety"},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2111.01363","title":"Knowledge Cross-Distillation for Membership Privacy","created":"2021-11-02","cited_by_count":6,"area":"safety"},{"id":"2111.05528","title":"Lightweight machine unlearning in neural network","created":"2021-11-10","cited_by_count":6,"area":"safety"},{"id":"2203.00915","title":"MIAShield: Defending Membership Inference Attacks via Preemptive Exclusion of Members","created":"2022-03-02","cited_by_count":6,"area":"safety"},{"id":"2402.05453","title":"Mitigating Privacy Risk in Membership Inference by Convex-Concave Loss","created":"2024-02-08","cited_by_count":6,"area":"safety"},{"id":"2404.00673","title":"A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasures","created":"2024-03-31","cited_by_count":6,"area":null},{"id":"2501.11577","title":"Rethinking Membership Inference Attacks Against Transfer Learning","created":"2025-01-20","cited_by_count":6,"area":"safety"},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2107.12173","title":"Membership Inference Attack and Defense for Wireless Signal Classifiers with Deep Learning","created":"2021-07-22","cited_by_count":5,"area":null},{"id":"2110.05524","title":"Generalization Techniques Empirically Outperform Differential Privacy against Membership Inference","created":"2021-10-11","cited_by_count":5,"area":"safety"},{"id":"2202.02242","title":"Dikaios: Privacy Auditing of Algorithmic Fairness via Attribute Inference Attacks","created":"2022-02-04","cited_by_count":5,"area":null},{"id":"2209.01688","title":"On the Privacy Risks of Cell-Based NAS Architectures","created":"2022-09-04","cited_by_count":5,"area":null},{"id":"2307.02984","title":"A Privacy-Preserving Walk in the Latent Space of Generative Models for Medical Applications","created":"2023-07-06","cited_by_count":5,"area":null},{"id":"2501.15718","title":"CENSOR: Defense Against Gradient Inversion via Orthogonal Subspace Bayesian Sampling","created":"2025-01-27","cited_by_count":5,"area":null},{"id":"2502.10450","title":"Trustworthy AI: Safety, Bias, and Privacy -- A Survey","created":"2025-02-11","cited_by_count":5,"area":"safety"},{"id":"2105.01401","title":"A Review of Confidentiality Threats Against Embedded Neural Network Models","created":"2021-05-04","cited_by_count":4,"area":null},{"id":"2105.06300","title":"Privacy Inference Attacks and Defenses in Cloud-based Deep Neural Network: A Survey","created":"2021-05-13","cited_by_count":4,"area":null}],"next_cursor":"100"}