{"total":110,"rows":[{"id":"2206.07758","title":"Reconstructing Training Data from Trained Neural Networks","created":"2022-06-15","cited_by_count":133,"area":null},{"id":"2302.04460","title":"Bag of Tricks for Training Data Extraction from Language Models","created":"2023-02-09","cited_by_count":70,"area":null},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2305.16157","title":"Training Data Extraction From Pre-trained Language Models: A Survey","created":"2023-05-25","cited_by_count":45,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2202.06924","title":"Do Gradient Inversion Attacks Make Federated Learning Unsafe?","created":"2022-02-14","cited_by_count":44,"area":null},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38,"area":null},{"id":"2201.07513","title":"Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders","created":"2022-01-19","cited_by_count":31,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2209.10505","title":"Text Revealer: Private Text Reconstruction via Model Inversion Attacks against Transformers","created":"2022-09-21","cited_by_count":31,"area":null},{"id":"2310.01424","title":"Identifying and Mitigating Privacy Risks Stemming from Language Models: A Survey","created":"2023-09-27","cited_by_count":30,"area":null},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2205.08443","title":"On the (In)security of Peer-to-Peer Decentralized Machine Learning","created":"2022-05-17","cited_by_count":23,"area":null},{"id":"2209.14987","title":"No Free Lunch in \"Privacy for Free: How does Dataset Condensation Help Privacy\"","created":"2022-09-29","cited_by_count":23,"area":null},{"id":"2306.16064","title":"Federated Generative Learning with Foundation Models","created":"2023-06-28","cited_by_count":23,"area":null},{"id":"2307.10655","title":"A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency","created":"2023-07-20","cited_by_count":21,"area":null},{"id":"2311.05808","title":"Scale-MIA: A Scalable Model Inversion Attack against Secure Federated Learning via Latent Space Reconstruction","created":"2023-11-10","cited_by_count":21,"area":null},{"id":"2307.16273","title":"zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training","created":"2023-07-30","cited_by_count":20,"area":null},{"id":"2203.09566","title":"Leveraging Adversarial Examples to Quantify Membership Information Leakage","created":"2022-03-17","cited_by_count":19,"area":null},{"id":"2207.13766","title":"Label-Only Membership Inference Attack against Node-Level Graph Neural Networks","created":"2022-07-27","cited_by_count":19,"area":null},{"id":"2112.13178","title":"Gradient Leakage Attack Resilient Deep Learning","created":"2021-12-25","cited_by_count":18,"area":null},{"id":"2407.15100","title":"A General Framework for Data-Use Auditing of ML Models","created":"2024-07-21","cited_by_count":16,"area":null},{"id":"2208.08270","title":"On the Privacy Effect of Data Enhancement via the Lens of Memorization","created":"2022-08-17","cited_by_count":15,"area":null},{"id":"2404.05779","title":"Data Readiness for AI: A 360-Degree Survey","created":"2024-04-08","cited_by_count":15,"area":null},{"id":"2410.16618","title":"SoK: Dataset Copyright Auditing in Machine Learning Systems","created":"2024-10-22","cited_by_count":15,"area":null},{"id":"2305.05900","title":"DPMLBench: Holistic Evaluation of Differentially Private Machine Learning","created":"2023-05-10","cited_by_count":13,"area":null},{"id":"2105.03875","title":"Bounding Information Leakage in Machine Learning","created":"2021-05-09","cited_by_count":11,"area":null},{"id":"2202.13351","title":"Split HE: Fast Secure Inference Combining Split Learning and Homomorphic Encryption","created":"2022-02-27","cited_by_count":11,"area":null},{"id":"2305.16202","title":"DP-SGD Without Clipping: The Lipschitz Neural Network Way","created":"2023-05-25","cited_by_count":11,"area":null},{"id":"2112.02230","title":"SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning","created":"2021-12-04","cited_by_count":10,"area":null},{"id":"2302.09813","title":"Audit to Forget: A Unified Method to Revoke Patients' Private Data in Intelligent Healthcare","created":"2023-02-20","cited_by_count":9,"area":null},{"id":"2306.05093","title":"Investigating the Effect of Misalignment on Membership Privacy in the White-box Setting","created":"2023-06-08","cited_by_count":9,"area":null},{"id":"2406.19256","title":"AI Data Readiness Inspector (AIDRIN) for Quantitative Assessment of Data Readiness for AI","created":"2024-06-27","cited_by_count":9,"area":null},{"id":"2109.03675","title":"EMA: Auditing Data Removal from Trained Models","created":"2021-09-08","cited_by_count":8,"area":null},{"id":"2208.05969","title":"Safety and Performance, Why not Both? Bi-Objective Optimized Model Compression toward AI Software Deployment","created":"2022-08-11","cited_by_count":8,"area":null},{"id":"2210.11049","title":"How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers","created":"2022-10-20","cited_by_count":8,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2202.02817","title":"BEAS: Blockchain Enabled Asynchronous & Secure Federated Machine Learning","created":"2022-02-06","cited_by_count":7,"area":null},{"id":"2407.07926","title":"Synthetic Data: Revisiting the Privacy-Utility Trade-off","created":"2024-07-09","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2407.09324","title":"Provable Privacy Advantages of Decentralized Federated Learning via Distributed Optimization","created":"2024-07-12","cited_by_count":6,"area":null},{"id":"2107.12173","title":"Membership Inference Attack and Defense for Wireless Signal Classifiers with Deep Learning","created":"2021-07-22","cited_by_count":5,"area":null},{"id":"2109.12550","title":"MixNN: Protection of Federated Learning Against Inference Attacks by Mixing Neural Network Layers","created":"2021-09-26","cited_by_count":5,"area":null},{"id":"2202.02242","title":"Dikaios: Privacy Auditing of Algorithmic Fairness via Attribute Inference Attacks","created":"2022-02-04","cited_by_count":5,"area":null},{"id":"2411.06613","title":"Are Neuromorphic Architectures Inherently Privacy-preserving? An Exploratory Study","created":"2024-11-10","cited_by_count":5,"area":null},{"id":"2411.15796","title":"Data Lineage Inference: Uncovering Privacy Vulnerabilities of Dataset Pruning","created":"2024-11-24","cited_by_count":5,"area":null},{"id":"2508.21146","title":"Privacy Auditing Synthetic Data Release through Local Likelihood Attacks","created":"2025-08-28","cited_by_count":5,"area":null},{"id":"2105.01401","title":"A Review of Confidentiality Threats Against Embedded Neural Network Models","created":"2021-05-04","cited_by_count":4,"area":null},{"id":"2206.05209","title":"Hierarchical Federated Learning with Privacy","created":"2022-06-10","cited_by_count":4,"area":null},{"id":"2408.16913","title":"Analyzing Inference Privacy Risks Through Gradients in Machine Learning","created":"2024-08-29","cited_by_count":4,"area":null},{"id":"2501.10985","title":"GRID: Protecting Training Graph from Link Stealing Attacks on GNN Models","created":"2025-01-19","cited_by_count":4,"area":null},{"id":"2503.07505","title":"From Centralized to Decentralized Federated Learning: Theoretical Insights, Privacy Preservation, and Robustness Challenges","created":"2025-03-10","cited_by_count":4,"area":null},{"id":"2507.18365","title":"RecPS: Privacy Risk Scoring for Recommender Systems","created":"2025-07-24","cited_by_count":4,"area":null},{"id":"2110.03369","title":"The Connection between Out-of-Distribution Generalization and Privacy of ML Models","created":"2021-10-07","cited_by_count":3,"area":null},{"id":"2407.16164","title":"Representation Magnitude has a Liability to Privacy Vulnerability","created":"2024-07-23","cited_by_count":3,"area":null},{"id":"2409.15868","title":"Privacy Evaluation Benchmarks for NLP Models","created":"2024-09-24","cited_by_count":3,"area":null},{"id":"2409.19413","title":"Membership Privacy Evaluation in Deep Spiking Neural Networks","created":"2024-09-28","cited_by_count":3,"area":null},{"id":"2409.19417","title":"Subject Data Auditing via Source Inference Attack in Cross-Silo Federated Learning","created":"2024-09-28","cited_by_count":3,"area":null},{"id":"2411.09945","title":"TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models","created":"2024-11-15","cited_by_count":3,"area":null},{"id":"2506.04453","title":"Gradient Inversion Attacks on Parameter-Efficient Fine-Tuning","created":"2025-06-04","cited_by_count":3,"area":null},{"id":"2507.16872","title":"CompLeak: Deep Learning Model Compression Exacerbates Privacy Leakage","created":"2025-07-22","cited_by_count":3,"area":null},{"id":"2601.01966","title":"Refinement Provenance Inference: Detecting LLM-Refined Training Prompts from Model Behavior","created":"2026-01-05","cited_by_count":3,"area":null},{"id":"2212.10628","title":"Holistic risk assessment of inference attacks in machine learning","created":"2022-12-15","cited_by_count":2,"area":null},{"id":"2309.04515","title":"Privacy Preserving Federated Learning with Convolutional Variational Bottlenecks","created":"2023-09-08","cited_by_count":2,"area":null},{"id":"2310.00488","title":"Membership Privacy Risks of Sharpness Aware Minimization","created":"2023-09-30","cited_by_count":2,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2409.05657","title":"Adversarial Attacks on Data Attribution","created":"2024-09-09","cited_by_count":2,"area":null},{"id":"2409.07415","title":"SoK: Security and Privacy Risks of Healthcare AI","created":"2024-09-11","cited_by_count":2,"area":null},{"id":"2410.21491","title":"Trustworthiness of Stochastic Gradient Descent in Distributed Learning","created":"2024-10-28","cited_by_count":2,"area":null},{"id":"2306.08929","title":"Inferring Communities of Interest in Collaborative Learning-based Recommender Systems","created":"2023-06-15","cited_by_count":1,"area":null},{"id":"2307.03118","title":"Quantum Solutions to the Privacy vs. Utility Tradeoff","created":"2023-07-06","cited_by_count":1,"area":null},{"id":"2310.12112","title":"A Cautionary Tale: On the Role of Reference Data in Empirical Privacy Defenses","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2311.03075","title":"SoK: Memorisation in machine learning","created":"2023-11-06","cited_by_count":1,"area":null},{"id":"2403.08880","title":"REFRESH: Responsible and Efficient Feature Reselection Guided by SHAP Values","created":"2024-03-13","cited_by_count":1,"area":null},{"id":"2404.00696","title":"Privacy Re-identification Attacks on Tabular GANs","created":"2024-03-31","cited_by_count":1,"area":null},{"id":"2411.07070","title":"On Active Privacy Auditing in Supervised Fine-tuning for White-Box Language Models","created":"2024-11-11","cited_by_count":1,"area":null},{"id":"2411.16763","title":"Hide in Plain Sight: Clean-Label Backdoor for Auditing Membership Inference","created":"2024-11-24","cited_by_count":1,"area":null},{"id":"2412.05767","title":"DeMem: Privacy-Enhanced Robust Adversarial Learning via De-Memorization","created":"2024-12-08","cited_by_count":1,"area":null},{"id":"2412.11951","title":"The Impact of Generalization Techniques on the Interplay Among Privacy, Utility, and Fairness in Image Classification","created":"2024-12-16","cited_by_count":1,"area":null},{"id":"2506.19360","title":"SoK: Can Synthetic Images Replace Real Data? A Survey of Utility and Privacy of Synthetic Image Generation","created":"2025-06-24","cited_by_count":1,"area":null},{"id":"2510.09717","title":"Provable Training Data Identification for Large Language Models","created":"2025-10-10","cited_by_count":1,"area":null},{"id":"2512.14439","title":"VICTOR: Dataset Copyright Auditing in Video Recognition Systems","created":"2025-12-16","cited_by_count":1,"area":null},{"id":"2601.03429","title":"DeepLeak: Privacy Enhancing Hardening of Model Explanations Against Membership Leakage","created":"2026-01-06","cited_by_count":1,"area":null},{"id":"2601.12922","title":"Your Privacy Depends on Others: Collusion Vulnerabilities in Individual Differential Privacy","created":"2026-01-19","cited_by_count":1,"area":null},{"id":"2602.02296","title":"Decoupling Generalizability and Membership Privacy Risks in Neural Networks","created":"2026-02-02","cited_by_count":1,"area":null},{"id":"2603.10969","title":"TOSSS: a CVE-based Software Security Benchmark for Large Language Models","created":"2026-03-11","cited_by_count":1,"area":null},{"id":"2605.24420","title":"Batch Normalization Amplifies Memorization and Privacy Risks","created":"2026-05-23","cited_by_count":1,"area":null},{"id":"2609.04382","title":"Privacy Failure in Split-LLM Training, The Returned Gradient Nullifies the Decoys","created":"2026-09-03","cited_by_count":1,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2406.00249","title":"Privacy Challenges in Meta-Learning: An Investigation on Model-Agnostic Meta-Learning","created":"2024-06-01","cited_by_count":0,"area":null},{"id":"2407.00719","title":"A Whole-Process Certifiably Robust Aggregation Method Against Backdoor Attacks in Federated Learning","created":"2024-06-30","cited_by_count":0,"area":null},{"id":"2408.01431","title":"Building an Ethical and Trustworthy Biomedical AI Ecosystem for the Translational and Clinical Integration of Foundational Models","created":"2024-07-18","cited_by_count":0,"area":null},{"id":"2408.12119","title":"Understanding Data Reconstruction Leakage in Federated Learning from a Theoretical Perspective","created":"2024-08-22","cited_by_count":0,"area":null},{"id":"2503.06021","title":"FedEM: A Privacy-Preserving Framework for Concurrent Utility Preservation in Federated Learning","created":"2025-03-08","cited_by_count":0,"area":null},{"id":"2505.19823","title":"LAPA-based Dynamic Privacy Optimization for Wireless Federated Learning in Heterogeneous Environments","created":"2025-05-26","cited_by_count":0,"area":null},{"id":"2508.09186","title":"RL-MoE: An Image-Based Privacy Preserving Approach In Intelligent Transportation System","created":"2025-08-07","cited_by_count":0,"area":null}],"next_cursor":"100"}