{"total":112,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2301.13188","title":"Extracting Training Data from Diffusion Models","created":"2023-01-30","cited_by_count":732,"area":"diffusion"},{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2203.03929","title":"Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks","created":"2022-03-08","cited_by_count":175,"area":"safety"},{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2111.08440","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","created":"2021-11-15","cited_by_count":147,"area":"safety"},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2305.15594","title":"Flocks of Stochastic Parrots: Differentially Private Prompt Learning for Large Language Models","created":"2023-05-24","cited_by_count":83,"area":null},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78,"area":"safety"},{"id":"2406.16201","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","created":"2024-06-23","cited_by_count":69,"area":"safety"},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2108.06504","title":"LinkTeller: Recovering Private Edges from Graph Neural Networks via Influence Analysis","created":"2021-08-14","cited_by_count":65,"area":null},{"id":"2307.03694","title":"Scalable Membership Inference Attacks via Quantile Regression","created":"2023-07-07","cited_by_count":65,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2209.01292","title":"Are Attribute Inference Attacks Just Imputation?","created":"2022-09-02","cited_by_count":49,"area":null},{"id":"2205.12506","title":"Memorization in NLP Fine-tuning Methods","created":"2022-05-25","cited_by_count":45,"area":null},{"id":"2310.18362","title":"SoK: Memorization in General-Purpose Large Language Models","created":"2023-10-24","cited_by_count":37,"area":null},{"id":"2312.08207","title":"Black-box Membership Inference Attacks against Fine-tuned Diffusion Models","created":"2023-12-13","cited_by_count":35,"area":"diffusion"},{"id":"2106.12576","title":"DP-SGD vs PATE: Which Has Less Disparate Impact on Model Accuracy?","created":"2021-06-22","cited_by_count":33,"area":null},{"id":"2303.03446","title":"Students Parrot Their Teachers: Membership Inference on Model Distillation","created":"2023-03-06","cited_by_count":33,"area":"safety"},{"id":"2411.10512","title":"On the Privacy Risk of In-context Learning","created":"2024-11-15","cited_by_count":32,"area":"safety"},{"id":"2103.07101","title":"On the (In)Feasibility of Attribute Inference Attacks on Machine Learning Models","created":"2021-03-12","cited_by_count":31,"area":"safety"},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2307.01610","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction","created":"2023-07-04","cited_by_count":29,"area":"safety"},{"id":"2112.06872","title":"Efficient Differentially Private Secure Aggregation for Federated Learning via Hardness of Learning with Errors","created":"2021-12-13","cited_by_count":25,"area":null},{"id":"2406.01333","title":"Probing Language Models for Pre-training Data Detection","created":"2024-06-03","cited_by_count":25,"area":null},{"id":"2202.03460","title":"Deletion Inference, Reconstruction, and Compliance in Machine (Un)Learning","created":"2022-02-07","cited_by_count":24,"area":"safety"},{"id":"2403.09562","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","created":"2024-03-14","cited_by_count":23,"area":"safety"},{"id":"2105.02866","title":"Membership Inference Attacks on Deep Regression Models for Neuroimaging","created":"2021-05-06","cited_by_count":22,"area":"safety"},{"id":"2206.03317","title":"Subject Membership Inference Attacks in Federated Learning","created":"2022-06-07","cited_by_count":20,"area":"safety"},{"id":"2307.16273","title":"zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training","created":"2023-07-30","cited_by_count":20,"area":null},{"id":"2312.05140","title":"Membership Inference Attacks on Diffusion Models via Quantile Regression","created":"2023-12-08","cited_by_count":17,"area":"diffusion"},{"id":"2202.12232","title":"Bounding Membership Inference","created":"2022-02-24","cited_by_count":15,"area":"safety"},{"id":"2208.08270","title":"On the Privacy Effect of Data Enhancement via the Lens of Memorization","created":"2022-08-17","cited_by_count":15,"area":null},{"id":"2507.06969","title":"Unifying Re-Identification, Attribute Inference, and Data Reconstruction Risks in Differential Privacy","created":"2025-07-09","cited_by_count":15,"area":null},{"id":"2405.03636","title":"The Federation Strikes Back: A Survey of Federated Learning Privacy Attacks, Defenses, Applications, and Policy Landscape","created":"2024-05-06","cited_by_count":13,"area":null},{"id":"2302.06676","title":"Netflix and Forget: Efficient and Exact Machine Unlearning from Bi-linear Recommendations","created":"2023-02-13","cited_by_count":12,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2408.05131","title":"Range Membership Inference Attacks","created":"2024-08-09","cited_by_count":12,"area":"safety"},{"id":"2105.03875","title":"Bounding Information Leakage in Machine Learning","created":"2021-05-09","cited_by_count":11,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2112.02230","title":"SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning","created":"2021-12-04","cited_by_count":10,"area":null},{"id":"2406.08918","title":"Beyond the Calibration Point: Mechanism Comparison in Differential Privacy","created":"2024-06-13","cited_by_count":9,"area":null},{"id":"2112.12998","title":"DP-UTIL: Comprehensive Utility Analysis of Differential Privacy in Machine Learning","created":"2021-12-24","cited_by_count":8,"area":null},{"id":"2205.06369","title":"How to Combine Membership-Inference Attacks on Multiple Updated Models","created":"2022-05-12","cited_by_count":8,"area":"safety"},{"id":"2210.11049","title":"How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers","created":"2022-10-20","cited_by_count":8,"area":null},{"id":"2407.02191","title":"Attack-Aware Noise Calibration for Differential Privacy","created":"2024-07-02","cited_by_count":8,"area":null},{"id":"2501.03941","title":"Synthetic Data Privacy Metrics","created":"2025-01-07","cited_by_count":8,"area":null},{"id":"2207.10802","title":"Combing for Credentials: Active Pattern Extraction from Smart Reply","created":"2022-07-14","cited_by_count":7,"area":null},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2505.22860","title":"Permissioned LLMs: Enforcing Access Control in Large Language Models","created":"2025-05-28","cited_by_count":7,"area":null},{"id":"2203.00915","title":"MIAShield: Defending Membership Inference Attacks via Preemptive Exclusion of Members","created":"2022-03-02","cited_by_count":6,"area":"safety"},{"id":"2501.11577","title":"Rethinking Membership Inference Attacks Against Transfer Learning","created":"2025-01-20","cited_by_count":6,"area":"safety"},{"id":"2506.05126","title":"Membership Inference Attacks on Sequence Models","created":"2025-06-05","cited_by_count":6,"area":"safety"},{"id":"2507.21412","title":"Cascading and Proxy Membership Inference Attacks","created":"2025-07-29","cited_by_count":6,"area":"safety"},{"id":"2109.12550","title":"MixNN: Protection of Federated Learning Against Inference Attacks by Mixing Neural Network Layers","created":"2021-09-26","cited_by_count":5,"area":null},{"id":"2110.07435","title":"Adaptive Differentially Private Empirical Risk Minimization","created":"2021-10-14","cited_by_count":5,"area":null},{"id":"2407.02747","title":"Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvature","created":"2024-07-03","cited_by_count":5,"area":"safety"},{"id":"2409.14513","title":"Order of Magnitude Speedups for LLM Membership Inference","created":"2024-09-22","cited_by_count":5,"area":"safety"},{"id":"2202.05089","title":"Backpropagation Clipping for Deep Learning with Differential Privacy","created":"2022-02-10","cited_by_count":4,"area":null},{"id":"2203.02080","title":"An Efficient Subpopulation-based Membership Inference Attack","created":"2022-03-04","cited_by_count":4,"area":"safety"},{"id":"2208.11669","title":"Towards Sparsified Federated Neuroimaging Models via Weight Pruning","created":"2022-08-24","cited_by_count":4,"area":null},{"id":"2211.11434","title":"Privacy in Practice: Private COVID-19 Detection in X-Ray Images (Extended Version)","created":"2022-11-21","cited_by_count":4,"area":null},{"id":"2303.03648","title":"Can Membership Inferencing be Refuted?","created":"2023-03-07","cited_by_count":4,"area":"safety"},{"id":"2402.10686","title":"On the Impact of Uncertainty and Calibration on Likelihood-Ratio Membership Inference Attacks","created":"2024-02-16","cited_by_count":4,"area":"safety"},{"id":"2606.09401","title":"Benchmarking Empirical Privacy Protection for Adaptations of Large Language Models","created":"2026-06-08","cited_by_count":4,"area":null},{"id":"2212.02701","title":"On the Discredibility of Membership Inference Attacks","created":"2022-12-06","cited_by_count":3,"area":"safety"},{"id":"2307.06123","title":"SoK: Comparing Different Membership Inference Attacks with a Comprehensive Benchmark","created":"2023-07-12","cited_by_count":3,"area":"safety"},{"id":"2311.09355","title":"Privacy Threats in Stable Diffusion Models","created":"2023-11-15","cited_by_count":3,"area":"diffusion"},{"id":"2509.06796","title":"Imitative Membership Inference Attack","created":"2025-09-08","cited_by_count":3,"area":"safety"},{"id":"2603.07567","title":"Revisiting the LiRA Membership Inference Attack Under Realistic Assumptions","created":"2026-03-08","cited_by_count":3,"area":"safety"},{"id":"2103.02913","title":"Quantifying identifiability to choose and audit $\\epsilon$ in differentially private deep learning","created":"2021-03-04","cited_by_count":2,"area":null},{"id":"2210.16258","title":"On the Vulnerability of Data Points under Multiple Membership Inference Attacks and Target Models","created":"2022-10-28","cited_by_count":2,"area":"safety"},{"id":"2307.11280","title":"Epsilon*: Privacy Metric for Machine Learning Models","created":"2023-07-21","cited_by_count":2,"area":null},{"id":"2309.11022","title":"Information Leakage from Data Updates in Machine Learning Models","created":"2023-09-20","cited_by_count":2,"area":null},{"id":"2310.08015","title":"Why Train More? Effective and Efficient Membership Inference via Memorization","created":"2023-10-12","cited_by_count":2,"area":"safety"},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2311.17750","title":"Privacy and Accuracy Implications of Model Complexity and Integration in Heterogeneous Federated Learning","created":"2023-11-29","cited_by_count":2,"area":null},{"id":"2401.04929","title":"Learning-Based Difficulty Calibration for Enhanced Membership Inference Attacks","created":"2024-01-10","cited_by_count":2,"area":"safety"},{"id":"2405.01207","title":"Improving Membership Inference in ASR Model Auditing with Perturbed Loss Features","created":"2024-05-02","cited_by_count":2,"area":"safety"},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2410.09947","title":"Efficient Federated Unlearning under Plausible Deniability","created":"2024-10-13","cited_by_count":2,"area":"safety"},{"id":"2510.10625","title":"ImpMIA: Leveraging Implicit Bias for Membership Inference Attack","created":"2025-10-12","cited_by_count":2,"area":"safety"},{"id":"2212.01688","title":"LDL: A Defense for Label-Based Membership Inference Attacks","created":"2022-12-03","cited_by_count":1,"area":"safety"},{"id":"2306.04109","title":"Membership inference attack with relative decision boundary distance","created":"2023-06-07","cited_by_count":1,"area":"safety"},{"id":"2307.05193","title":"Membership Inference Attacks on DNNs using Adversarial Perturbations","created":"2023-07-11","cited_by_count":1,"area":"safety"},{"id":"2311.03075","title":"SoK: Memorisation in machine learning","created":"2023-11-06","cited_by_count":1,"area":null},{"id":"2402.01114","title":"Double-Dip: Thwarting Label-Only Membership Inference Attacks with Transfer Learning and Randomization","created":"2024-02-02","cited_by_count":1,"area":"safety"},{"id":"2405.15140","title":"Better Membership Inference Privacy Measurement through Discrepancy","created":"2024-05-24","cited_by_count":1,"area":"safety"},{"id":"2407.17663","title":"Explaining the Model, Protecting Your Data: Revealing and Mitigating the Data Privacy Risks of Post-Hoc Model Explanations via Membership Inference","created":"2024-07-24","cited_by_count":1,"area":"safety"},{"id":"2507.23291","title":"Evaluating the Dynamics of Membership Privacy in Deep Learning","created":"2025-07-31","cited_by_count":1,"area":"safety"},{"id":"2601.15874","title":"SoK: Challenges in Tabular Membership Inference Attacks","created":"2026-01-22","cited_by_count":1,"area":"safety"},{"id":"2202.02278","title":"LTU Attacker for Membership Inference","created":"2022-02-04","cited_by_count":0,"area":"safety"},{"id":"2405.15423","title":"Lost in the Averages: A New Specific Setup to Evaluate Membership Inference Attacks Against Machine Learning Models","created":"2024-05-24","cited_by_count":0,"area":"safety"},{"id":"2411.03363","title":"TDDBench: A Benchmark for Training data detection","created":"2024-11-05","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}