{"total":98,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2111.08440","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","created":"2021-11-15","cited_by_count":147,"area":"safety"},{"id":"2201.05629","title":"Zero-Shot Machine Unlearning","created":"2022-01-14","cited_by_count":133,"area":"safety"},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2208.14933","title":"Membership Inference Attacks by Exploiting Loss Trajectory","created":"2022-08-31","cited_by_count":101,"area":"safety"},{"id":"2311.06062","title":"Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibration","created":"2023-11-10","cited_by_count":98,"area":"safety"},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78,"area":"safety"},{"id":"2108.11023","title":"EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning","created":"2021-08-25","cited_by_count":73,"area":"safety"},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57,"area":"safety"},{"id":"2202.03335","title":"Membership Inference Attacks and Defenses in Neural Network Pruning","created":"2022-02-07","cited_by_count":45,"area":"safety"},{"id":"2310.00108","title":"Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot Study","created":"2023-09-29","cited_by_count":38,"area":"safety"},{"id":"2207.05801","title":"RelaxLoss: Defending Membership Inference Attacks without Losing Utility","created":"2022-07-12","cited_by_count":37,"area":"safety"},{"id":"2502.18943","title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models","created":"2025-02-26","cited_by_count":37,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2411.10512","title":"On the Privacy Risk of In-context Learning","created":"2024-11-15","cited_by_count":32,"area":"safety"},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2307.01610","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction","created":"2023-07-04","cited_by_count":29,"area":"safety"},{"id":"2203.06580","title":"One Parameter Defense -- Defending against Data Inference Attacks via Differential Privacy","created":"2022-03-13","cited_by_count":27,"area":"safety"},{"id":"2403.09562","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","created":"2024-03-14","cited_by_count":23,"area":"safety"},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2205.13680","title":"Membership Inference Attack Using Self Influence Functions","created":"2022-05-26","cited_by_count":20,"area":"safety"},{"id":"2209.08615","title":"Membership Inference Attacks and Generalization: A Causal Perspective","created":"2022-09-18","cited_by_count":17,"area":"safety"},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2212.00612","title":"Purifier: Defending Data Inference Attacks via Transforming Confidence Scores","created":"2022-12-01","cited_by_count":15,"area":"safety"},{"id":"2406.06186","title":"A Survey on Machine Unlearning: Techniques and New Emerged Privacy Risks","created":"2024-06-10","cited_by_count":15,"area":"safety"},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2405.16978","title":"OSLO: One-Shot Label-Only Membership Inference Attacks","created":"2024-05-27","cited_by_count":13,"area":"safety"},{"id":"2206.12401","title":"Debiasing Learning for Membership Inference Attacks Against Recommender Systems","created":"2022-06-24","cited_by_count":12,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2403.08481","title":"SoK: Reducing the Vulnerability of Fine-tuned Language Models to Membership Inference Attacks","created":"2024-03-13","cited_by_count":11,"area":"safety"},{"id":"2506.13972","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2105.05381","title":"Accuracy-Privacy Trade-off in Deep Ensemble: A Membership Inference Perspective","created":"2021-05-12","cited_by_count":10,"area":"safety"},{"id":"2207.12535","title":"Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning","created":"2022-07-25","cited_by_count":10,"area":"safety"},{"id":"2103.03078","title":"Defending Medical Image Diagnostics against Privacy Attacks using Generative Methods","created":"2021-03-04","cited_by_count":9,"area":"safety"},{"id":"2404.02462","title":"A Unified Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2024-04-03","cited_by_count":9,"area":"safety"},{"id":"2205.06369","title":"How to Combine Membership-Inference Attacks on Multiple Updated Models","created":"2022-05-12","cited_by_count":8,"area":"safety"},{"id":"2310.11970","title":"Quantifying Privacy Risks of Prompts in Visual Prompt Learning","created":"2023-10-18","cited_by_count":8,"area":"safety"},{"id":"2506.15115","title":"Towards Reliable Forgetting: A Survey on Machine Unlearning Verification","created":"2025-06-18","cited_by_count":8,"area":"safety"},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2508.09603","title":"The Surprising Effectiveness of Membership Inference with Simple N-Gram Coverage","created":"2025-08-13","cited_by_count":7,"area":"safety"},{"id":"2111.01363","title":"Knowledge Cross-Distillation for Membership Privacy","created":"2021-11-02","cited_by_count":6,"area":"safety"},{"id":"2111.05528","title":"Lightweight machine unlearning in neural network","created":"2021-11-10","cited_by_count":6,"area":"safety"},{"id":"2203.00915","title":"MIAShield: Defending Membership Inference Attacks via Preemptive Exclusion of Members","created":"2022-03-02","cited_by_count":6,"area":"safety"},{"id":"2402.05453","title":"Mitigating Privacy Risk in Membership Inference by Convex-Concave Loss","created":"2024-02-08","cited_by_count":6,"area":"safety"},{"id":"2501.11577","title":"Rethinking Membership Inference Attacks Against Transfer Learning","created":"2025-01-20","cited_by_count":6,"area":"safety"},{"id":"2110.05524","title":"Generalization Techniques Empirically Outperform Differential Privacy against Membership Inference","created":"2021-10-11","cited_by_count":5,"area":"safety"},{"id":"2502.10450","title":"Trustworthy AI: Safety, Bias, and Privacy -- A Survey","created":"2025-02-11","cited_by_count":5,"area":"safety"},{"id":"2303.03648","title":"Can Membership Inferencing be Refuted?","created":"2023-03-07","cited_by_count":4,"area":"safety"},{"id":"2310.12665","title":"SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models","created":"2023-10-19","cited_by_count":4,"area":"safety"},{"id":"2401.00996","title":"Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment","created":"2024-01-02","cited_by_count":4,"area":"safety"},{"id":"2402.10686","title":"On the Impact of Uncertainty and Calibration on Likelihood-Ratio Membership Inference Attacks","created":"2024-02-16","cited_by_count":4,"area":"safety"},{"id":"2404.17674","title":"Center-Based Relaxed Learning Against Membership Inference Attacks","created":"2024-04-26","cited_by_count":4,"area":"safety"},{"id":"2410.06814","title":"Defending Membership Inference Attacks via Privacy-aware Sparsity Tuning","created":"2024-10-09","cited_by_count":4,"area":"safety"},{"id":"2202.05469","title":"Privacy-preserving Generative Framework Against Membership Inference Attacks","created":"2022-02-11","cited_by_count":3,"area":"safety"},{"id":"2206.05565","title":"NeuGuard: Lightweight Neuron-Guided Defense against Membership Inference Attacks","created":"2022-06-11","cited_by_count":3,"area":"safety"},{"id":"2307.06123","title":"SoK: Comparing Different Membership Inference Attacks with a Comprehensive Benchmark","created":"2023-07-12","cited_by_count":3,"area":"safety"},{"id":"2502.09396","title":"A hierarchical approach for assessing the vulnerability of tree-based classification models to membership inference attack","created":"2025-02-13","cited_by_count":3,"area":"safety"},{"id":"2510.05699","title":"Membership Inference Attacks on Tokenizers of Large Language Models","created":"2025-10-07","cited_by_count":3,"area":"safety"},{"id":"2210.16258","title":"On the Vulnerability of Data Points under Multiple Membership Inference Attacks and Target Models","created":"2022-10-28","cited_by_count":2,"area":"safety"},{"id":"2408.06825","title":"Membership Inference Attack Against Masked Image Modeling","created":"2024-08-13","cited_by_count":2,"area":"safety"},{"id":"2503.07482","title":"How does Bayesian Sampling help Membership Inference Attacks?","created":"2025-03-10","cited_by_count":2,"area":"safety"},{"id":"2511.16792","title":"Membership Inference Attacks Beyond Overfitting","created":"2025-11-20","cited_by_count":2,"area":"safety"},{"id":"2605.01129","title":"Revisiting Privacy Leakage in Machine Unlearning: Membership Inference Beyond the Forgotten Set","created":"2026-05-01","cited_by_count":2,"area":"safety"},{"id":"2212.01688","title":"LDL: A Defense for Label-Based Membership Inference Attacks","created":"2022-12-03","cited_by_count":1,"area":"safety"},{"id":"2306.04109","title":"Membership inference attack with relative decision boundary distance","created":"2023-06-07","cited_by_count":1,"area":"safety"},{"id":"2401.13719","title":"Inference Attacks Against Face Recognition Model without Classification Layers","created":"2024-01-24","cited_by_count":1,"area":"safety"},{"id":"2402.01114","title":"Double-Dip: Thwarting Label-Only Membership Inference Attacks with Transfer Learning and Randomization","created":"2024-02-02","cited_by_count":1,"area":"safety"},{"id":"2404.07139","title":"Towards a Game-theoretic Understanding of Explanation-based Membership Inference Attacks","created":"2024-04-10","cited_by_count":1,"area":"safety"},{"id":"2404.16851","title":"EdgeLeakage: Membership Information Leakage in Distributed Edge Intelligence Systems","created":"2024-03-08","cited_by_count":1,"area":"safety"},{"id":"2409.13004","title":"Data Poisoning and Leakage Analysis in Federated Learning","created":"2024-09-19","cited_by_count":1,"area":"safety"},{"id":"2501.02182","title":"AdaMixup: A Dynamic Defense Framework for Membership Inference Attack Mitigation","created":"2025-01-04","cited_by_count":1,"area":"safety"},{"id":"2505.10351","title":"A Unified and Scalable Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2025-05-15","cited_by_count":1,"area":"safety"},{"id":"2505.13362","title":"Dynamic Probabilistic Noise Injection for Membership Inference Defense","created":"2025-05-19","cited_by_count":1,"area":"safety"},{"id":"2601.06866","title":"United We Defend: Collaborative Membership Inference Defenses in Federated Learning","created":"2026-01-11","cited_by_count":1,"area":"safety"},{"id":"2601.15874","title":"SoK: Challenges in Tabular Membership Inference Attacks","created":"2026-01-22","cited_by_count":1,"area":"safety"},{"id":"2602.03611","title":"Explanations Leak: Membership Inference with Differential Privacy and Active Learning Defense","created":"2026-02-03","cited_by_count":1,"area":"safety"},{"id":"2202.02278","title":"LTU Attacker for Membership Inference","created":"2022-02-04","cited_by_count":0,"area":"safety"},{"id":"2310.12063","title":"Black-Box Training Data Identification in GANs via Detector Networks","created":"2023-10-18","cited_by_count":0,"area":"safety"},{"id":"2406.07917","title":"Graph Transductive Defense: a Two-Stage Defense for Graph Membership Inference Attacks","created":"2024-06-12","cited_by_count":0,"area":"safety"},{"id":"2411.03363","title":"TDDBench: A Benchmark for Training data detection","created":"2024-11-05","cited_by_count":0,"area":"safety"},{"id":"2411.03914","title":"Game-Theoretic Machine Unlearning: Mitigating Extra Privacy Leakage","created":"2024-11-06","cited_by_count":0,"area":"safety"},{"id":"2412.07575","title":"Defending Against Neural Network Model Inversion Attacks via Data Poisoning","created":"2024-12-10","cited_by_count":0,"area":"safety"},{"id":"2501.06686","title":"Modeling Neural Networks with Privacy Using Neural Stochastic Differential Equations","created":"2025-01-12","cited_by_count":0,"area":"safety"},{"id":"2504.21042","title":"What's Pulling the Strings? Evaluating Integrity and Attribution in AI Training and Inference through Concept Shift","created":"2025-04-28","cited_by_count":0,"area":"safety"},{"id":"2505.07149","title":"AugMixCloak: A Defense against Membership Inference Attacks via Image Transformation","created":"2025-05-11","cited_by_count":0,"area":"safety"},{"id":"2512.08291","title":"Exposing and Defending Membership Leakage in Vulnerability Prediction Models","created":"2025-12-09","cited_by_count":0,"area":"safety"},{"id":"2601.20885","title":"What Hard Tokens Reveal: Exploiting Low-confidence Tokens for Membership Inference Attacks against Large Language Models","created":"2026-01-27","cited_by_count":0,"area":"safety"},{"id":"2602.05748","title":"LeakBoost: Perceptual-Loss-Based Membership Inference Attack","created":"2026-02-05","cited_by_count":0,"area":"safety"},{"id":"2602.12943","title":"Neighborhood Blending: A Lightweight Inference-Time Defense Against Membership Inference Attacks","created":"2026-02-13","cited_by_count":0,"area":"safety"},{"id":"2602.18934","title":"LoMime: Query-Efficient Membership Inference using Model Extraction in Label-Only Settings","created":"2026-02-21","cited_by_count":0,"area":"safety"},{"id":"2604.02780","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","created":"2026-04-03","cited_by_count":0,"area":"safety"},{"id":"2606.23030","title":"Have You Ever Seen Them? Entity-level Membership Inference through Interrogating Large Language Models","created":"2026-06-22","cited_by_count":0,"area":"safety"},{"id":"2610.18486","title":"SoK: Rethinking Membership Inference in Tabular Machine Learning","created":"2026-10-13","cited_by_count":0,"area":"safety"}],"next_cursor":null}