{"total":40,"rows":[{"id":"2304.05197","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","created":"2023-04-11","cited_by_count":333,"area":"safety"},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2407.06460","title":"MUSE: Machine Unlearning Six-Way Evaluation for Language Models","created":"2024-07-08","cited_by_count":261,"area":"safety"},{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2203.03929","title":"Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks","created":"2022-03-08","cited_by_count":175,"area":"safety"},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2108.11023","title":"EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning","created":"2021-08-25","cited_by_count":73,"area":"safety"},{"id":"2309.06746","title":"DP-Forward: Fine-tuning and Inference on Language Models with Differential Privacy in Forward Pass","created":"2023-09-13","cited_by_count":67,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2106.11384","title":"Membership Inference on Word Embedding and Beyond","created":"2021-06-21","cited_by_count":35,"area":"safety"},{"id":"2209.06997","title":"M^4I: Multi-modal Models Membership Inference","created":"2022-09-15","cited_by_count":34,"area":"safety"},{"id":"2305.13257","title":"Watermarking Text Data on Large Language Models for Dataset Copyright","created":"2023-05-22","cited_by_count":27,"area":"safety"},{"id":"2111.05113","title":"Membership Inference Attacks Against Self-supervised Speech Models","created":"2021-11-09","cited_by_count":16,"area":"safety"},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2408.11749","title":"Against All Odds: Overcoming Typology, Script, and Language Confusion in Multilingual Embedding Inversion Attacks","created":"2024-08-21","cited_by_count":10,"area":"safety"},{"id":"2308.13904","title":"LMSanitator: Defending Prompt-Tuning Against Task-Agnostic Backdoors","created":"2023-08-26","cited_by_count":9,"area":"safety"},{"id":"2404.02462","title":"A Unified Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2024-04-03","cited_by_count":9,"area":"safety"},{"id":"2312.07200","title":"Code Membership Inference for Detecting Unauthorized Data Use in Code Pre-trained Language Models","created":"2023-12-12","cited_by_count":8,"area":"safety"},{"id":"2310.07219","title":"Improved Membership Inference Attacks Against Language Classification Models","created":"2023-10-11","cited_by_count":7,"area":"safety"},{"id":"2111.01363","title":"Knowledge Cross-Distillation for Membership Privacy","created":"2021-11-02","cited_by_count":6,"area":"safety"},{"id":"2505.14112","title":"Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2310.13786","title":"Fundamental Limits of Membership Inference Attacks on Machine Learning Models","created":"2023-10-20","cited_by_count":5,"area":"safety"},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2401.00996","title":"Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment","created":"2024-01-02","cited_by_count":4,"area":"safety"},{"id":"2307.06123","title":"SoK: Comparing Different Membership Inference Attacks with a Comprehensive Benchmark","created":"2023-07-12","cited_by_count":3,"area":"safety"},{"id":"2502.06567","title":"Membership Inference Risks in Quantized Models: A Theoretical and Empirical Study","created":"2025-02-10","cited_by_count":3,"area":"safety"},{"id":"2506.05743","title":"When Better Features Mean Greater Risks: The Performance-Privacy Trade-Off in Contrastive Learning","created":"2025-06-06","cited_by_count":3,"area":"safety"},{"id":"2211.02245","title":"Unintended Memorization and Timing Attacks in Named Entity Recognition Models","created":"2022-11-04","cited_by_count":2,"area":"safety"},{"id":"2405.08134","title":"Many-Shot Regurgitation (MSR) Prompting","created":"2024-05-13","cited_by_count":2,"area":"safety"},{"id":"2507.01693","title":"GPT, But Backwards: Exactly Inverting Language Model Outputs","created":"2025-07-02","cited_by_count":2,"area":"safety"},{"id":"2403.04451","title":"Membership Inference Attacks and Privacy in Topic Modeling","created":"2024-03-07","cited_by_count":1,"area":"safety"},{"id":"2505.10351","title":"A Unified and Scalable Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2025-05-15","cited_by_count":1,"area":"safety"},{"id":"2605.23175","title":"Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection","created":"2026-05-22","cited_by_count":1,"area":"safety"},{"id":"2606.09189","title":"Pretrained, Frozen, Still Leaking: Auditing Cross-Encoder Attribute Transfer in EEG Foundation Models","created":"2026-06-08","cited_by_count":1,"area":"safety"},{"id":"2512.02786","title":"FiMMIA: scaling semantic perturbation-based membership inference across modalities","created":"2025-12-02","cited_by_count":0,"area":"safety"},{"id":"2605.06423","title":"Pop Quiz Attack: Black-box Membership Inference Attacks Against Large Language Models","created":"2026-05-07","cited_by_count":0,"area":"safety"}],"next_cursor":null}