{"total":163,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2109.13398","title":"Unrolling SGD: Understanding Factors Influencing Machine Unlearning","created":"2021-09-27","cited_by_count":279,"area":"safety"},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248,"area":"safety"},{"id":"2304.04934","title":"Model Sparsity Can Simplify Machine Unlearning","created":"2023-04-11","cited_by_count":214,"area":"safety"},{"id":"2111.08440","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","created":"2021-11-15","cited_by_count":147,"area":"safety"},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2208.14933","title":"Membership Inference Attacks by Exploiting Loss Trajectory","created":"2022-08-31","cited_by_count":101,"area":"safety"},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2201.06640","title":"Towards Adversarial Evaluations for Inexact Machine Unlearning","created":"2022-01-17","cited_by_count":84,"area":"safety"},{"id":"2108.11023","title":"EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning","created":"2021-08-25","cited_by_count":73,"area":"safety"},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2309.06746","title":"DP-Forward: Fine-tuning and Inference on Language Models with Differential Privacy in Forward Pass","created":"2023-09-13","cited_by_count":67,"area":"safety"},{"id":"2307.03694","title":"Scalable Membership Inference Attacks via Quantile Regression","created":"2023-07-07","cited_by_count":65,"area":"safety"},{"id":"2404.03233","title":"Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning","created":"2024-04-04","cited_by_count":48,"area":"safety"},{"id":"2202.03335","title":"Membership Inference Attacks and Defenses in Neural Network Pruning","created":"2022-02-07","cited_by_count":45,"area":"safety"},{"id":"2409.19732","title":"Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement","created":"2024-09-29","cited_by_count":45,"area":"safety"},{"id":"2403.07362","title":"Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning","created":"2024-03-12","cited_by_count":44,"area":"safety"},{"id":"2409.01380","title":"Membership Inference Attacks Against In-Context Learning","created":"2024-09-02","cited_by_count":43,"area":"safety"},{"id":"2210.10750","title":"Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queries","created":"2022-10-19","cited_by_count":40,"area":"safety"},{"id":"2310.00108","title":"Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot Study","created":"2023-09-29","cited_by_count":38,"area":"safety"},{"id":"2207.05801","title":"RelaxLoss: Defending Membership Inference Attacks without Losing Utility","created":"2022-07-12","cited_by_count":37,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2209.06997","title":"M^4I: Multi-modal Models Membership Inference","created":"2022-09-15","cited_by_count":34,"area":"safety"},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2307.01610","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction","created":"2023-07-04","cited_by_count":29,"area":"safety"},{"id":"2503.23751","title":"Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks","created":"2025-03-31","cited_by_count":28,"area":"safety"},{"id":"2305.13257","title":"Watermarking Text Data on Large Language Models for Dataset Copyright","created":"2023-05-22","cited_by_count":27,"area":"safety"},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2105.02866","title":"Membership Inference Attacks on Deep Regression Models for Neuroimaging","created":"2021-05-06","cited_by_count":22,"area":"safety"},{"id":"2310.18574","title":"Breaking the Trilemma of Privacy, Utility, Efficiency via Controllable Machine Unlearning","created":"2023-10-28","cited_by_count":22,"area":"safety"},{"id":"2409.00426","title":"Is Difficulty Calibration All We Need? Towards More Practical Membership Inference Attacks","created":"2024-08-31","cited_by_count":21,"area":"safety"},{"id":"2205.13680","title":"Membership Inference Attack Using Self Influence Functions","created":"2022-05-26","cited_by_count":20,"area":"safety"},{"id":"2404.12922","title":"Is Retain Set All You Need in Machine Unlearning? Restoring Performance of Unlearned Models with Out-Of-Distribution Images","created":"2024-04-19","cited_by_count":18,"area":"safety"},{"id":"2503.06991","title":"Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocols","created":"2025-03-10","cited_by_count":18,"area":"safety"},{"id":"2209.08615","title":"Membership Inference Attacks and Generalization: A Causal Perspective","created":"2022-09-18","cited_by_count":17,"area":"safety"},{"id":"2302.12685","title":"Active Membership Inference Attack under Local Differential Privacy in Federated Learning","created":"2023-02-24","cited_by_count":17,"area":"safety"},{"id":"2402.09477","title":"PANORAMIA: Privacy Auditing of Machine Learning Models without Retraining","created":"2024-02-12","cited_by_count":17,"area":"safety"},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2406.07687","title":"Adversarial Machine Unlearning","created":"2024-06-11","cited_by_count":16,"area":"safety"},{"id":"2502.19726","title":"Tokens for Learning, Tokens for Unlearning: Mitigating Membership Inference Attacks in Large Language Models via Dual-Purpose Training","created":"2025-02-27","cited_by_count":15,"area":"safety"},{"id":"2309.07983","title":"SLMIA-SR: Speaker-Level Membership Inference Attacks against Speaker Recognition Systems","created":"2023-09-14","cited_by_count":14,"area":"safety"},{"id":"2312.02052","title":"DUCK: Distance-based Unlearning via Centroid Kinematics","created":"2023-12-04","cited_by_count":13,"area":"safety"},{"id":"2402.09225","title":"Is My Data in Your AI? Membership Inference Test (MINT) applied to Face Biometrics","created":"2024-02-14","cited_by_count":13,"area":"safety"},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2402.06289","title":"FedMIA: An Effective Membership Inference Attack Exploiting \"All for One\" Principle in Federated Learning","created":"2024-02-09","cited_by_count":12,"area":"safety"},{"id":"2104.08273","title":"Membership Inference Attacks on Knowledge Graphs","created":"2021-04-16","cited_by_count":11,"area":"safety"},{"id":"2310.00222","title":"Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learning","created":"2023-09-30","cited_by_count":11,"area":"safety"},{"id":"2404.14296","title":"Does Your Neural Code Completion Model Use My Code? A Membership Inference Approach","created":"2024-04-22","cited_by_count":11,"area":"safety"},{"id":"2405.15495","title":"Towards Natural Machine Unlearning","created":"2024-05-24","cited_by_count":11,"area":"safety"},{"id":"2506.13972","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2111.09076","title":"To Trust or Not To Trust Prediction Scores for Membership Inference Attacks","created":"2021-11-17","cited_by_count":10,"area":"safety"},{"id":"2207.12535","title":"Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning","created":"2022-07-25","cited_by_count":10,"area":"safety"},{"id":"2404.02462","title":"A Unified Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2024-04-03","cited_by_count":9,"area":"safety"},{"id":"2406.07698","title":"Label Smoothing Improves Machine Unlearning","created":"2024-06-11","cited_by_count":9,"area":"safety"},{"id":"2506.13009","title":"Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective","created":"2025-06-16","cited_by_count":9,"area":"safety"},{"id":"2205.06369","title":"How to Combine Membership-Inference Attacks on Multiple Updated Models","created":"2022-05-12","cited_by_count":8,"area":"safety"},{"id":"2205.06986","title":"Evaluating Membership Inference Through Adversarial Robustness","created":"2022-05-14","cited_by_count":8,"area":"safety"},{"id":"2310.11970","title":"Quantifying Privacy Risks of Prompts in Visual Prompt Learning","created":"2023-10-18","cited_by_count":8,"area":"safety"},{"id":"2212.01082","title":"Membership Inference Attacks Against Semantic Segmentation Models","created":"2022-12-02","cited_by_count":7,"area":"safety"},{"id":"2402.06674","title":"Impact of Dataset Properties on Membership Inference Vulnerability of Deep Transfer Learning","created":"2024-02-07","cited_by_count":7,"area":"safety"},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2606.14748","title":"Is My Vision-Language Data in Your AI? Membership Inference Test (MINT) Demo 2","created":"2026-06-05","cited_by_count":7,"area":"safety"},{"id":"2111.01363","title":"Knowledge Cross-Distillation for Membership Privacy","created":"2021-11-02","cited_by_count":6,"area":"safety"},{"id":"2203.00915","title":"MIAShield: Defending Membership Inference Attacks via Preemptive Exclusion of Members","created":"2022-03-02","cited_by_count":6,"area":"safety"},{"id":"2402.05453","title":"Mitigating Privacy Risk in Membership Inference by Convex-Concave Loss","created":"2024-02-08","cited_by_count":6,"area":"safety"},{"id":"2405.07018","title":"Shadow-Free Membership Inference Attacks: Recommender Systems Are More Vulnerable Than You Thought","created":"2024-05-11","cited_by_count":6,"area":"safety"},{"id":"2412.16780","title":"Forget Vectors at Play: Universal Input Perturbations Driving Machine Unlearning in Image Classification","created":"2024-12-21","cited_by_count":6,"area":"safety"},{"id":"2501.11577","title":"Rethinking Membership Inference Attacks Against Transfer Learning","created":"2025-01-20","cited_by_count":6,"area":"safety"},{"id":"2504.15827","title":"DualOptim: Enhancing Efficacy and Stability in Machine Unlearning with Dual Optimizers","created":"2025-04-22","cited_by_count":6,"area":"safety"},{"id":"2505.08576","title":"MUBox: A Critical Evaluation Framework of Deep Machine Unlearning","created":"2025-05-13","cited_by_count":6,"area":"safety"},{"id":"2505.15178","title":"A Unified Gradient-based Framework for Task-agnostic Continual Learning-Unlearning","created":"2025-05-21","cited_by_count":6,"area":"safety"},{"id":"2507.21412","title":"Cascading and Proxy Membership Inference Attacks","created":"2025-07-29","cited_by_count":6,"area":"safety"},{"id":"2110.05524","title":"Generalization Techniques Empirically Outperform Differential Privacy against Membership Inference","created":"2021-10-11","cited_by_count":5,"area":"safety"},{"id":"2205.06469","title":"l-Leaks: Membership Inference Attacks with Logits","created":"2022-05-13","cited_by_count":5,"area":"safety"},{"id":"2404.11577","title":"A Reliable Cryptographic Framework for Empirical Machine Unlearning Evaluation","created":"2024-04-17","cited_by_count":5,"area":"safety"},{"id":"2407.02747","title":"Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvature","created":"2024-07-03","cited_by_count":5,"area":"safety"},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2303.03648","title":"Can Membership Inferencing be Refuted?","created":"2023-03-07","cited_by_count":4,"area":"safety"},{"id":"2310.12665","title":"SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models","created":"2023-10-19","cited_by_count":4,"area":"safety"},{"id":"2401.00996","title":"Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment","created":"2024-01-02","cited_by_count":4,"area":"safety"},{"id":"2402.10686","title":"On the Impact of Uncertainty and Calibration on Likelihood-Ratio Membership Inference Attacks","created":"2024-02-16","cited_by_count":4,"area":"safety"},{"id":"2404.17674","title":"Center-Based Relaxed Learning Against Membership Inference Attacks","created":"2024-04-26","cited_by_count":4,"area":"safety"},{"id":"2405.15316","title":"Decaf: Data Distribution Decompose Attack against Federated Learning","created":"2024-05-24","cited_by_count":4,"area":"safety"},{"id":"2410.06814","title":"Defending Membership Inference Attacks via Privacy-aware Sparsity Tuning","created":"2024-10-09","cited_by_count":4,"area":"safety"},{"id":"2503.22413","title":"Instance-Level Data-Use Auditing of Visual ML Models","created":"2025-03-28","cited_by_count":4,"area":"safety"},{"id":"2510.13451","title":"Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts","created":"2025-10-15","cited_by_count":4,"area":"safety"},{"id":"2512.18035","title":"Towards Benchmarking Privacy Vulnerabilities in Selective Forgetting with Large Language Models","created":"2025-12-19","cited_by_count":4,"area":"safety"},{"id":"2109.03975","title":"Membership Inference Attacks Against Temporally Correlated Data in Deep Reinforcement Learning","created":"2021-09-08","cited_by_count":3,"area":"safety"},{"id":"2202.05469","title":"Privacy-preserving Generative Framework Against Membership Inference Attacks","created":"2022-02-11","cited_by_count":3,"area":"safety"},{"id":"2206.05565","title":"NeuGuard: Lightweight Neuron-Guided Defense against Membership Inference Attacks","created":"2022-06-11","cited_by_count":3,"area":"safety"},{"id":"2212.02701","title":"On the Discredibility of Membership Inference Attacks","created":"2022-12-06","cited_by_count":3,"area":"safety"},{"id":"2307.06123","title":"SoK: Comparing Different Membership Inference Attacks with a Comprehensive Benchmark","created":"2023-07-12","cited_by_count":3,"area":"safety"},{"id":"2410.08557","title":"MUSO: Achieving Exact Machine Unlearning in Over-Parameterized Regimes","created":"2024-10-11","cited_by_count":3,"area":"safety"},{"id":"2502.09974","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","created":"2025-02-14","cited_by_count":3,"area":"safety"},{"id":"2506.05743","title":"When Better Features Mean Greater Risks: The Performance-Privacy Trade-Off in Contrastive Learning","created":"2025-06-06","cited_by_count":3,"area":"safety"},{"id":"2509.06796","title":"Imitative Membership Inference Attack","created":"2025-09-08","cited_by_count":3,"area":"safety"},{"id":"2509.07879","title":"Active Membership Inference Test (aMINT): Enhancing Model Auditability with Multi-Task Learning","created":"2025-09-09","cited_by_count":3,"area":"safety"},{"id":"2509.11080","title":"Membership Inference Attacks on Recommender System: A Survey","created":"2025-09-14","cited_by_count":3,"area":"safety"}],"next_cursor":"100"}