{"total":41,"rows":[{"id":"2201.08135","title":"Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challenges","created":"2022-01-20","cited_by_count":84,"area":null},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2109.06024","title":"Formalizing and Estimating Distribution Inference Risks","created":"2021-09-13","cited_by_count":43,"area":null},{"id":"2310.18362","title":"SoK: Memorization in General-Purpose Large Language Models","created":"2023-10-24","cited_by_count":37,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2302.10637","title":"A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacy","created":"2023-02-21","cited_by_count":24,"area":null},{"id":"2209.01100","title":"Group Property Inference Attacks Against Graph Neural Networks","created":"2022-09-02","cited_by_count":21,"area":null},{"id":"2307.10655","title":"A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency","created":"2023-07-20","cited_by_count":21,"area":null},{"id":"2209.08541","title":"Distribution inference risks: Identifying and mitigating sources of leakage","created":"2022-09-18","cited_by_count":17,"area":null},{"id":"2208.09967","title":"Inferring Sensitive Attributes from Model Explanations","created":"2022-08-21","cited_by_count":15,"area":null},{"id":"2212.07591","title":"Dissecting Distribution Inference","created":"2022-12-15","cited_by_count":15,"area":null},{"id":"2407.06754","title":"Threats and Defenses in Federated Learning Life Cycle: A Comprehensive Survey and Challenges","created":"2024-07-09","cited_by_count":15,"area":null},{"id":"2407.16607","title":"Data Mixture Inference: What do BPE Tokenizers Reveal about their Training Data?","created":"2024-07-23","cited_by_count":13,"area":null},{"id":"2207.08367","title":"Protecting Global Properties of Datasets with Distribution Privacy Mechanisms","created":"2022-07-18","cited_by_count":11,"area":null},{"id":"2206.04591","title":"Privacy Leakage in Text Classification: A Data Extraction Approach","created":"2022-06-09","cited_by_count":10,"area":null},{"id":"2303.11643","title":"Manipulating Transfer Learning for Property Inference","created":"2023-03-21","cited_by_count":8,"area":null},{"id":"2510.27055","title":"Detecting Data Contamination in LLMs via In-Context Learning","created":"2025-10-30","cited_by_count":8,"area":null},{"id":"2112.08806","title":"Correlation inference attacks against machine learning models","created":"2021-12-16","cited_by_count":7,"area":null},{"id":"2207.10802","title":"Combing for Credentials: Active Pattern Extraction from Smart Reply","created":"2022-07-14","cited_by_count":7,"area":null},{"id":"2303.02014","title":"Summary Statistic Privacy in Data Sharing","created":"2023-03-03","cited_by_count":6,"area":null},{"id":"2306.13789","title":"Deconstructing Classifiers: Towards A Data Reconstruction Attack Against Text Classification Models","created":"2023-06-23","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2404.00673","title":"A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasures","created":"2024-03-31","cited_by_count":6,"area":null},{"id":"2205.09986","title":"SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning","created":"2022-05-20","cited_by_count":5,"area":null},{"id":"2308.09552","title":"Attesting Distributional Properties of Training Data for Machine Learning","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2303.15563","title":"Privacy-preserving machine learning for healthcare: open challenges and future perspectives","created":"2023-03-27","cited_by_count":4,"area":null},{"id":"2506.10364","title":"Can We Infer Confidential Properties of Training Data from LLMs?","created":"2025-06-12","cited_by_count":4,"area":null},{"id":"2201.08786","title":"FedComm: Federated Learning as a Medium for Covert Communication","created":"2022-01-21","cited_by_count":3,"area":null},{"id":"2409.19417","title":"Subject Data Auditing via Source Inference Attack in Cross-Silo Federated Learning","created":"2024-09-28","cited_by_count":3,"area":null},{"id":"2411.03663","title":"Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approach","created":"2024-11-06","cited_by_count":3,"area":null},{"id":"2508.11848","title":"Adversarial Robustness in Distributed Quantum Machine Learning","created":"2025-08-16","cited_by_count":2,"area":null},{"id":"2211.04157","title":"Inferring Class Label Distribution of Training Data from Classifiers: An Accuracy-Augmented Meta-Classifier Attack","created":"2022-11-08","cited_by_count":1,"area":null},{"id":"2401.10859","title":"Ensembler: Protect Collaborative Inference Privacy from Model Inversion Attack via Selective Ensemble","created":"2024-01-19","cited_by_count":1,"area":null},{"id":"2411.11713","title":"FLMarket: Enabling Privacy-preserved Pre-training Data Pricing for Federated Learning","created":"2024-11-18","cited_by_count":1,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2309.01523","title":"A Blackbox Model Is All You Need to Breach Privacy: Smart Grid Forecasting Models as a Use Case","created":"2023-09-04","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2402.00342","title":"Survey of Privacy Threats and Countermeasures in Federated Learning","created":"2024-02-01","cited_by_count":0,"area":null},{"id":"2606.10091","title":"SoK: Colluding Adversaries in Machine Learning Pipelines","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2607.15970","title":"Code-Poisoning Property Inference Attacks","created":"2026-07-17","cited_by_count":0,"area":null},{"id":"2609.17995","title":"QuanText: Protecting Dataset-Level Secrets in Textual Data Sharing","created":"2026-09-16","cited_by_count":0,"area":null}],"next_cursor":null}