{"total":104,"rows":[{"id":"2209.15003","title":"Compositional Semantic Parsing with Large Language Models","created":"2022-09-29","cited_by_count":95,"area":null},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2310.14735","title":"Unleashing the potential of prompt engineering for large language models","created":"2023-10-23","cited_by_count":72,"area":null},{"id":"2201.08531","title":"Black-box Prompt Learning for Pre-trained Language Models","created":"2022-01-21","cited_by_count":70,"area":null},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69,"area":null},{"id":"2311.13647","title":"Language Model Inversion","created":"2023-11-22","cited_by_count":68,"area":null},{"id":"2401.12255","title":"Instructional Fingerprinting of Large Language Models","created":"2024-01-21","cited_by_count":68,"area":null},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58,"area":null},{"id":"2103.10013","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","created":"2021-03-18","cited_by_count":53,"area":null},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2101.03453","title":"BERT & Family Eat Word Salad: Experiments with Text Understanding","created":"2021-01-10","cited_by_count":44,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2403.09539","title":"Logits of API-Protected LLMs Leak Proprietary Information","created":"2024-03-14","cited_by_count":40,"area":null},{"id":"2105.13880","title":"Knowledge Inheritance for Pre-trained Language Models","created":"2021-05-28","cited_by_count":38,"area":null},{"id":"2109.01165","title":"Black-Box Attacks on Sequential Recommenders via Data-Free Model Extraction","created":"2021-09-01","cited_by_count":37,"area":null},{"id":"2209.06506","title":"Order-Disorder: Imitation Adversarial Attacks for Black-box Neural Ranking Models","created":"2022-09-14","cited_by_count":37,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2305.18339","title":"A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutions","created":"2023-05-25","cited_by_count":35,"area":null},{"id":"2205.06504","title":"DualCF: Efficient Model Extraction Attack from Counterfactual Explanations","created":"2022-05-13","cited_by_count":32,"area":null},{"id":"2405.17067","title":"Tokenization Matters! Degrading Large Language Models through Challenging Their Tokenization","created":"2024-05-27","cited_by_count":32,"area":null},{"id":"2201.07513","title":"Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders","created":"2022-01-19","cited_by_count":31,"area":null},{"id":"2206.05483","title":"Bilateral Dependency Optimization: Defending Against Model-inversion Attacks","created":"2022-06-11","cited_by_count":30,"area":null},{"id":"2310.01424","title":"Identifying and Mitigating Privacy Risks Stemming from Language Models: A Survey","created":"2023-09-27","cited_by_count":30,"area":null},{"id":"2409.14457","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","created":"2024-09-22","cited_by_count":26,"area":null},{"id":"2406.10280","title":"Transferable Embedding Inversion Attack: Uncovering Privacy Risks in Text Embeddings without Model Queries","created":"2024-06-12","cited_by_count":25,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2309.10544","title":"Model Leeching: An Extraction Attack Targeting LLMs","created":"2023-09-19","cited_by_count":22,"area":null},{"id":"2201.09243","title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work","created":"2022-01-23","cited_by_count":21,"area":null},{"id":"2206.14157","title":"How to Steer Your Adversary: Targeted and Efficient Model Stealing Defenses with Gradient Redirection","created":"2022-06-28","cited_by_count":21,"area":null},{"id":"2312.05386","title":"Model Extraction Attacks Revisited","created":"2023-12-08","cited_by_count":21,"area":null},{"id":"2102.01065","title":"Do Question Answering Modeling Improvements Hold Across Benchmarks?","created":"2021-02-01","cited_by_count":20,"area":null},{"id":"2303.04729","title":"Stealing the Decoding Algorithms of Language Models","created":"2023-03-08","cited_by_count":19,"area":null},{"id":"2506.22521","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","created":"2025-06-26","cited_by_count":19,"area":null},{"id":"2108.13873","title":"Student Surpasses Teacher: Imitation Attack for Black-Box NLP APIs","created":"2021-08-29","cited_by_count":18,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2305.08702","title":"Recyclable Tuning for Continual Pre-training","created":"2023-05-15","cited_by_count":17,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2304.08566","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","created":"2023-04-17","cited_by_count":16,"area":null},{"id":"2501.16750","title":"HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns","created":"2025-01-28","cited_by_count":14,"area":null},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2201.07406","title":"Fooling MOSS Detection with Pretrained Language Models","created":"2022-01-19","cited_by_count":12,"area":null},{"id":"2205.10364","title":"Learning to Reverse DNNs from AI Programs Automatically","created":"2022-05-20","cited_by_count":12,"area":null},{"id":"2403.01472","title":"WARDEN: Multi-Directional Backdoor Watermarks for Embedding-as-a-Service Copyright Protection","created":"2024-03-03","cited_by_count":12,"area":null},{"id":"2109.10104","title":"InvBERT: Reconstructing Text from Contextualized Word Embeddings by inverting the BERT pipeline","created":"2021-09-21","cited_by_count":11,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2104.05921","title":"Thief, Beware of What Get You There: Towards Understanding Model Extraction Attack","created":"2021-04-13","cited_by_count":9,"area":null},{"id":"2101.02069","title":"Model Extraction and Defenses on Generative Adversarial Networks","created":"2021-01-06","cited_by_count":8,"area":null},{"id":"2105.10909","title":"Killing One Bird with Two Stones: Model Extraction and Attribute Inference Attacks against BERT-based APIs","created":"2021-05-23","cited_by_count":8,"area":null},{"id":"2603.01919","title":"Real Money, Fake Models: Deceptive Model Claims in Shadow APIs","created":"2026-03-02","cited_by_count":8,"area":null},{"id":"2409.04459","title":"WET: Overcoming Paraphrasing Vulnerabilities in Embeddings-as-a-Service with Linear Transformation Watermarks","created":"2024-08-29","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2212.10522","title":"Transformers Go for the LOLs: Generating (Humourous) Titles from Scientific Abstracts End-to-End","created":"2022-12-20","cited_by_count":6,"area":null},{"id":"2310.14047","title":"MeaeQ: Mount Model Extraction Attacks with Efficient Queries","created":"2023-10-21","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2204.09852","title":"The Risks of Machine Learning Systems","created":"2022-04-21","cited_by_count":5,"area":null},{"id":"2302.11982","title":"A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2311.15936","title":"Towards Responsible Governance of Biological Design Tools","created":"2023-11-27","cited_by_count":5,"area":null},{"id":"2409.02718","title":"\"Yes, My LoRD.\" Guiding Language Model Extraction with Locality Reinforced Distillation","created":"2024-09-04","cited_by_count":5,"area":null},{"id":"2502.02438","title":"Medical Multimodal Model Stealing Attacks via Adversarial Domain Alignment","created":"2025-02-04","cited_by_count":5,"area":null},{"id":"2510.12950","title":"An Investigation of Memorization Risk in Healthcare Foundation Models","created":"2025-10-14","cited_by_count":5,"area":null},{"id":"2209.04022","title":"Privacy of Autonomous Vehicles: Risks, Protection Methods, and Future Directions","created":"2022-09-08","cited_by_count":4,"area":null},{"id":"2310.01959","title":"Beyond Labeling Oracles: What does it mean to steal ML models?","created":"2023-10-03","cited_by_count":4,"area":null},{"id":"2511.13329","title":"RegionMarker: A Region-Triggered Semantic Watermarking Framework for Embedding-as-a-Service Copyright Protection","created":"2025-11-17","cited_by_count":4,"area":null},{"id":"2104.12623","title":"Good Artists Copy, Great Artists Steal: Model Extraction Attacks Against Image Translation Models","created":"2021-04-26","cited_by_count":3,"area":null},{"id":"2106.11424","title":"HODA: Hardness-Oriented Detection of Model Extraction Attacks","created":"2021-06-21","cited_by_count":3,"area":null},{"id":"2211.06716","title":"PriMask: Cascadable and Collusion-Resilient Data Masking for Mobile Cloud Inference","created":"2022-11-12","cited_by_count":3,"area":null},{"id":"2304.03388","title":"InferNet: Exploiting Aggregate GPU Profiles as Side-Channel for DNN Architecture Inference","created":"2023-04-06","cited_by_count":3,"area":null},{"id":"2306.11338","title":"FDINet: Protecting against DNN Model Extraction via Feature Distortion Index","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2402.02144","title":"Probing Critical Learning Dynamics of PLMs for Hate Speech Detection","created":"2024-02-03","cited_by_count":3,"area":null},{"id":"2405.12295","title":"Efficient Model-Stealing Attacks Against Inductive Graph Neural Networks","created":"2024-05-20","cited_by_count":3,"area":null},{"id":"2406.11667","title":"Is Efficient PAC Learning Possible with an Oracle That Responds 'Yes' or 'No'?","created":"2024-06-17","cited_by_count":3,"area":null},{"id":"2606.05725","title":"An Embarrassingly Simple Detector for Model Extraction Attacks in Large Language Model API Traffic","created":"2026-06-04","cited_by_count":3,"area":null},{"id":"2606.15810","title":"Let Them Steal: Trapping Large Language Model Extraction Attacks with Knowledge Honeypot","created":"2026-06-14","cited_by_count":3,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2502.18077","title":"Examining the Threat Landscape: Foundation Models and Model Stealing","created":"2025-02-25","cited_by_count":2,"area":null},{"id":"2512.16439","title":"From Essence to Defense: Adaptive Semantic-aware Watermarking for Embedding-as-a-Service Copyright Protection","created":"2025-12-18","cited_by_count":2,"area":null},{"id":"2103.06797","title":"BODAME: Bilevel Optimization for Defense Against Model Extraction","created":"2021-03-11","cited_by_count":1,"area":null},{"id":"2109.14857","title":"First to Possess His Statistics: Data-Free Model Extraction Attack on Tabular Data","created":"2021-09-30","cited_by_count":1,"area":null},{"id":"2202.00008","title":"MEGA: Model Stealing via Collaborative Generator-Substitute Networks","created":"2022-01-31","cited_by_count":1,"area":null},{"id":"2310.12112","title":"A Cautionary Tale: On the Role of Reference Data in Empirical Privacy Defenses","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2404.03348","title":"Knowledge Distillation-Based Model Extraction Attack using GAN-based Private Counterfactual Explanations","created":"2024-04-04","cited_by_count":1,"area":null},{"id":"2605.18829","title":"Lossless Anti-Distillation Sampling","created":"2026-05-12","cited_by_count":1,"area":null},{"id":"2108.07147","title":"On the Importance of Encrypting Deep Features","created":"2021-08-16","cited_by_count":0,"area":null},{"id":"2207.09539","title":"Revealing Secrets From Pre-trained Models","created":"2022-07-19","cited_by_count":0,"area":null},{"id":"2211.16044","title":"Model Extraction Attack against Self-supervised Speech Models","created":"2022-11-29","cited_by_count":0,"area":null},{"id":"2302.14615","title":"Randomized Kaczmarz in Adversarial Distributed Setting","created":"2023-02-24","cited_by_count":0,"area":null},{"id":"2312.05738","title":"FedReverse: Multiparty Reversible Deep Neural Network Watermarking","created":"2023-12-10","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2401.16055","title":"Stolen Subwords: Importance of Vocabularies for Machine Translation Model Stealing","created":"2024-01-29","cited_by_count":0,"area":null},{"id":"2402.11953","title":"Stealing the Invisible: Unveiling Pre-Trained CNN Models through Adversarial Examples and Timing Side-Channels","created":"2024-02-19","cited_by_count":0,"area":null},{"id":"2411.09359","title":"Your Semantic-Independent Watermark is Fragile: A Semantic Perturbation Attack against EaaS Watermark","created":"2024-11-14","cited_by_count":0,"area":null},{"id":"2503.06188","title":"Attackers Can Do Better: Over- and Understated Factors of Model Stealing Attacks","created":"2025-03-08","cited_by_count":0,"area":null},{"id":"2506.05867","title":"Stealix: Model Stealing via Prompt Evolution","created":"2025-06-06","cited_by_count":0,"area":null},{"id":"2508.21654","title":"I Stolenly Swear That I Am Up to (No) Good: Design and Evaluation of Model Stealing Attacks","created":"2025-08-29","cited_by_count":0,"area":null},{"id":"2512.23948","title":"DivQAT: Enhancing Robustness of Quantized Convolutional Neural Networks against Model Extraction Attacks","created":"2025-12-30","cited_by_count":0,"area":null},{"id":"2604.11344","title":"Geometry-Aware Localized Watermarking for Copyright Protection in Embedding-as-a-Service","created":"2026-04-13","cited_by_count":0,"area":null},{"id":"2605.05360","title":"COPYCOP: Ownership Verification for Graph Neural Networks","created":"2026-05-06","cited_by_count":0,"area":null}],"next_cursor":"100"}