{"total":197,"rows":[{"id":"2104.07586","title":"See through Gradients: Image Batch Recovery via GradInversion","created":"2021-04-15","cited_by_count":326,"area":null},{"id":"2201.04845","title":"Reconstructing Training Data with Informed Adversaries","created":"2022-01-13","cited_by_count":148,"area":null},{"id":"2206.07758","title":"Reconstructing Training Data from Trained Neural Networks","created":"2022-06-15","cited_by_count":133,"area":null},{"id":"2307.01881","title":"ProPILE: Probing Privacy Leakage in Large Language Models","created":"2023-07-04","cited_by_count":129,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2210.17546","title":"Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacy","created":"2022-10-31","cited_by_count":100,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2201.10787","title":"Variational Model Inversion Attacks","created":"2022-01-26","cited_by_count":75,"area":null},{"id":"2201.12179","title":"Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks","created":"2022-01-28","cited_by_count":60,"area":null},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58,"area":null},{"id":"2203.01925","title":"Label-Only Model Inversion Attacks via Boundary Repulsion","created":"2022-03-03","cited_by_count":56,"area":null},{"id":"2108.09033","title":"UnSplit: Data-Oblivious Model Inversion, Model Stealing, and Label Inference Attacks Against Split Learning","created":"2021-08-20","cited_by_count":52,"area":null},{"id":"2106.02820","title":"GraphMI: Extracting Private Graph Data from Graph Neural Networks","created":"2021-06-05","cited_by_count":50,"area":null},{"id":"2104.12669","title":"Exploiting Explanations for Model Inversion Attacks","created":"2021-04-26","cited_by_count":49,"area":null},{"id":"2209.01292","title":"Are Attribute Inference Attacks Just Imputation?","created":"2022-09-02","cited_by_count":49,"area":null},{"id":"2201.12383","title":"Bounding Training Data Reconstruction in Private (Deep) Learning","created":"2022-01-28","cited_by_count":46,"area":null},{"id":"2305.16157","title":"Training Data Extraction From Pre-trained Language Models: A Survey","created":"2023-05-25","cited_by_count":45,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2201.09370","title":"Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Models","created":"2022-01-23","cited_by_count":43,"area":null},{"id":"2206.04055","title":"Gradient Obfuscation Gives a False Sense of Security in Federated Learning","created":"2022-06-08","cited_by_count":39,"area":null},{"id":"2304.01669","title":"Re-thinking Model Inversion Attacks Against Deep Neural Networks","created":"2023-04-04","cited_by_count":39,"area":null},{"id":"2307.02106","title":"SoK: Privacy-Preserving Data Synthesis","created":"2023-07-05","cited_by_count":38,"area":null},{"id":"2105.00529","title":"GRNN: Generative Regression Neural Network -- A Data Leakage Attack for Federated Learning","created":"2021-05-02","cited_by_count":36,"area":null},{"id":"2304.04625","title":"Reinforcement Learning-Based Black-Box Model Inversion Attacks","created":"2023-04-10","cited_by_count":33,"area":null},{"id":"2103.11109","title":"DataLens: Scalable Privacy Preserving Training via Gradient Compression and Aggregation","created":"2021-03-20","cited_by_count":31,"area":null},{"id":"2209.10505","title":"Text Revealer: Private Text Reconstruction via Model Inversion Attacks against Transformers","created":"2022-09-21","cited_by_count":31,"area":null},{"id":"2206.05483","title":"Bilateral Dependency Optimization: Defending Against Model-inversion Attacks","created":"2022-06-11","cited_by_count":30,"area":null},{"id":"2402.04013","title":"Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses","created":"2024-02-06","cited_by_count":30,"area":null},{"id":"2104.05743","title":"Practical Defences Against Model Inversion Attacks for Split Neural Networks","created":"2021-04-12","cited_by_count":29,"area":null},{"id":"2302.09814","title":"Pseudo Label-Guided Model Inversion Attack via Conditional Generative Adversarial Network","created":"2023-02-20","cited_by_count":28,"area":null},{"id":"2209.07807","title":"Model Inversion Attacks against Graph Neural Networks","created":"2022-09-16","cited_by_count":26,"area":null},{"id":"2306.14123","title":"Privacy and Fairness in Federated Learning: on the Perspective of Trade-off","created":"2023-06-25","cited_by_count":26,"area":null},{"id":"2110.09714","title":"Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information","created":"2021-10-19","cited_by_count":25,"area":null},{"id":"2108.12318","title":"CAPE: Context-Aware Private Embeddings for Private Language Learning","created":"2021-08-27","cited_by_count":22,"area":null},{"id":"2204.08467","title":"IOP-FL: Inside-Outside Personalization for Federated Medical Image Segmentation","created":"2022-04-16","cited_by_count":22,"area":null},{"id":"2303.17046","title":"Have it your way: Individualized Privacy Assignment for DP-SGD","created":"2023-03-29","cited_by_count":21,"area":null},{"id":"2307.10655","title":"A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency","created":"2023-07-20","cited_by_count":21,"area":null},{"id":"2310.19342","title":"Label-Only Model Inversion Attacks via Knowledge Transfer","created":"2023-10-30","cited_by_count":21,"area":null},{"id":"2104.13061","title":"Property Inference Attacks on Convolutional Neural Networks: Influence and Implications of Target Model's Complexity","created":"2021-04-27","cited_by_count":19,"area":null},{"id":"2209.07341","title":"Does CLIP Know My Face?","created":"2022-09-15","cited_by_count":19,"area":null},{"id":"2407.13863","title":"A Closer Look at GAN Priors: Exploiting Intermediate Features for Enhanced Model Inversion Attacks","created":"2024-07-18","cited_by_count":18,"area":null},{"id":"2106.06326","title":"TOHAN: A One-step Approach towards Few-shot Hypothesis Adaptation","created":"2021-06-11","cited_by_count":17,"area":null},{"id":"2306.09104","title":"On Strengthening and Defending Graph Reconstruction Attack with Markov Chain Approximation","created":"2023-06-15","cited_by_count":16,"area":null},{"id":"2106.03785","title":"Generative Adversarial Networks: A Survey Towards Private and Secure Applications","created":"2021-06-07","cited_by_count":15,"area":null},{"id":"2110.03681","title":"Neural Tangent Kernel Empowered Federated Learning","created":"2021-10-07","cited_by_count":15,"area":null},{"id":"2403.12329","title":"FedFisher: Leveraging Fisher Information for One-Shot Federated Learning","created":"2024-03-19","cited_by_count":15,"area":null},{"id":"2111.04394","title":"Get a Model! Model Hijacking Attack Against Machine Learning Models","created":"2021-11-08","cited_by_count":14,"area":null},{"id":"2306.00419","title":"Challenges and Remedies to Privacy and Security in AIGC: Exploring the Potential of Privacy Computing, Blockchain, and Beyond","created":"2023-06-01","cited_by_count":14,"area":null},{"id":"2103.15753","title":"Privacy and Trust Redefined in Federated Machine Learning","created":"2021-03-29","cited_by_count":13,"area":null},{"id":"2208.13141","title":"Federated Learning of Large Models at the Edge via Principal Sub-Model Training","created":"2022-08-28","cited_by_count":13,"area":null},{"id":"2310.06549","title":"Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks","created":"2023-10-10","cited_by_count":13,"area":null},{"id":"2202.02575","title":"Differentially Private Graph Classification with GNNs","created":"2022-02-05","cited_by_count":12,"area":null},{"id":"2309.16398","title":"Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Survey","created":"2023-09-28","cited_by_count":12,"area":null},{"id":"2405.05588","title":"Model Inversion Robustness: Can Transfer Learning Help?","created":"2024-05-09","cited_by_count":12,"area":null},{"id":"2105.09673","title":"An Exact Poly-Time Membership-Queries Algorithm for Extraction a three-Layer ReLU Network","created":"2021-05-20","cited_by_count":11,"area":null},{"id":"2107.09786","title":"Communication and Computation Reduction for Split Learning using Asynchronous Training","created":"2021-07-20","cited_by_count":11,"area":null},{"id":"2304.04639","title":"EKILA: Synthetic Media Provenance and Attribution for Generative Art","created":"2023-04-10","cited_by_count":11,"area":null},{"id":"2306.03235","title":"Information Flow Control in Machine Learning through Modular Model Architecture","created":"2023-06-05","cited_by_count":11,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2103.01496","title":"DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing","created":"2021-03-02","cited_by_count":10,"area":null},{"id":"2108.10147","title":"Spatio-Temporal Split Learning for Privacy-Preserving Medical Platforms: Case Studies with COVID-19 CT, X-Ray, and Cholesterol Data","created":"2021-08-20","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2204.00106","title":"A Survey of Robust 3D Object Detection Methods in Point Clouds","created":"2022-03-31","cited_by_count":10,"area":null},{"id":"2208.01700","title":"Differentially Private Vertical Federated Clustering","created":"2022-08-02","cited_by_count":10,"area":null},{"id":"2209.03175","title":"On the utility and protection of optimization with differential privacy and classic regularization techniques","created":"2022-09-07","cited_by_count":10,"area":null},{"id":"2302.03884","title":"DIFF2: Differential Private Optimization via Gradient Differences for Nonconvex Distributed Learning","created":"2023-02-08","cited_by_count":10,"area":null},{"id":"2303.11183","title":"Architecture, Dataset and Model-Scale Agnostic Data-free Meta-Learning","created":"2023-03-20","cited_by_count":10,"area":null},{"id":"2106.13208","title":"Handling Data Heterogeneity with Generative Replay in Collaborative Learning for Medical Imaging","created":"2021-06-24","cited_by_count":9,"area":null},{"id":"2302.02162","title":"AUTOLYCUS: Exploiting Explainable AI (XAI) for Model Extraction Attacks against Interpretable Models","created":"2023-02-04","cited_by_count":9,"area":null},{"id":"2305.03355","title":"A Comprehensive Study on Dataset Distillation: Performance, Privacy, Robustness and Fairness","created":"2023-05-05","cited_by_count":9,"area":null},{"id":"2307.10981","title":"PATROL: Privacy-Oriented Pruning for Collaborative Inference Against Model Inversion Attacks","created":"2023-07-20","cited_by_count":9,"area":null},{"id":"2311.16065","title":"A Survey on Vulnerability of Federated Learning: A Learning Algorithm Perspective","created":"2023-11-27","cited_by_count":9,"area":null},{"id":"2107.06304","title":"Privacy Vulnerability of Split Computing to Data-Free Model Inversion Attacks","created":"2021-07-13","cited_by_count":8,"area":null},{"id":"2109.03675","title":"EMA: Auditing Data Removal from Trained Models","created":"2021-09-08","cited_by_count":8,"area":null},{"id":"2203.14936","title":"FedVLN: Privacy-preserving Federated Vision-and-Language Navigation","created":"2022-03-28","cited_by_count":8,"area":null},{"id":"2306.13965","title":"Boosting Model Inversion Attacks with Adversarial Examples","created":"2023-06-24","cited_by_count":8,"area":null},{"id":"2505.01177","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2203.00481","title":"Beyond Gradients: Exploiting Adversarial Priors in Model Inversion Attacks","created":"2022-03-01","cited_by_count":7,"area":null},{"id":"2207.12263","title":"SecretGen: Privacy Recovery on Pre-Trained Models via Distribution Discrimination","created":"2022-07-25","cited_by_count":7,"area":null},{"id":"2304.11436","title":"Breaching FedMD: Image Recovery via Paired-Logits Inversion Attack","created":"2023-04-22","cited_by_count":7,"area":null},{"id":"2309.00013","title":"Model Inversion Attack via Dynamic Memory Learning","created":"2023-08-24","cited_by_count":7,"area":null},{"id":"2310.10427","title":"DANAA: Towards transferable attacks with double adversarial neuron attribution","created":"2023-10-16","cited_by_count":7,"area":null},{"id":"2402.00906","title":"BrainLeaks: On the Privacy-Preserving Properties of Neuromorphic Architectures against Model Inversion Attacks","created":"2024-02-01","cited_by_count":7,"area":null},{"id":"2405.20657","title":"DORY: Deliberative Prompt Recovery for LLM","created":"2024-05-31","cited_by_count":7,"area":null},{"id":"2508.11716","title":"Privacy-Aware Detection of Fake Identity Documents: Methodology, Benchmark, and Improved Algorithms (FakeIDet2)","created":"2025-08-14","cited_by_count":7,"area":null},{"id":"2106.06927","title":"Inverting Adversarially Robust Networks for Image Synthesis","created":"2021-06-13","cited_by_count":6,"area":null},{"id":"2203.08979","title":"Speaker Information Can Guide Models to Better Inductive Biases: A Case Study On Predicting Code-Switching","created":"2022-03-16","cited_by_count":6,"area":null},{"id":"2204.04950","title":"Commonality in Natural Images Rescues GANs: Pretraining GANs with Generic and Privacy-free Synthetic Data","created":"2022-04-11","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2404.00673","title":"A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasures","created":"2024-03-31","cited_by_count":6,"area":null},{"id":"2407.09324","title":"Provable Privacy Advantages of Decentralized Federated Learning via Distributed Optimization","created":"2024-07-12","cited_by_count":6,"area":null},{"id":"2503.00383","title":"Theoretical Insights in Model Inversion Robustness and Conditional Entropy Maximization for Collaborative Inference Systems","created":"2025-03-01","cited_by_count":6,"area":null},{"id":"2111.03702","title":"Reconstructing Training Data from Diverse ML Models by Ensemble Inversion","created":"2021-11-05","cited_by_count":5,"area":null},{"id":"2308.09490","title":"Balancing Transparency and Risk: The Security and Privacy Risks of Open-Source Machine Learning Models","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2308.11027","title":"Split Learning for Distributed Collaborative Training of Deep Learning Models in Health Informatics","created":"2023-08-21","cited_by_count":5,"area":null},{"id":"2410.05159","title":"MIBench: A Comprehensive Framework for Benchmarking Model Inversion Attack and Defense","created":"2024-10-07","cited_by_count":5,"area":null},{"id":"2411.08460","title":"Trap-MID: Trapdoor-based Defense against Model Inversion Attacks","created":"2024-11-13","cited_by_count":5,"area":null},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2203.06555","title":"Label-only Model Inversion Attack: The Attack that Requires the Least Information","created":"2022-03-13","cited_by_count":4,"area":null}],"next_cursor":"100"}