{"total":48,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2401.06121","title":"TOFU: A Task of Fictitious Unlearning for LLMs","created":"2024-01-11","cited_by_count":533,"area":"safety"},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248,"area":"safety"},{"id":"2111.08440","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","created":"2021-11-15","cited_by_count":147,"area":"safety"},{"id":"2308.07061","title":"Machine Unlearning: Solutions and Challenges","created":"2023-08-14","cited_by_count":93,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2406.09073","title":"Are we making progress in unlearning? Findings from the first NeurIPS unlearning competition","created":"2024-06-13","cited_by_count":50,"area":"safety"},{"id":"2409.19798","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","created":"2024-09-29","cited_by_count":50,"area":"safety"},{"id":"2209.12269","title":"Algorithms that Approximate Data Removal: New Results and Limitations","created":"2022-09-25","cited_by_count":40,"area":"safety"},{"id":"2206.05199","title":"Bayesian Estimation of Differential Privacy","created":"2022-06-10","cited_by_count":33,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2503.06808","title":"Privacy Auditing of Large Language Models","created":"2025-03-09","cited_by_count":23,"area":"safety"},{"id":"2306.07273","title":"Gaussian Membership Inference Privacy","created":"2023-06-12","cited_by_count":21,"area":"safety"},{"id":"2402.09477","title":"PANORAMIA: Privacy Auditing of Machine Learning Models without Retraining","created":"2024-02-12","cited_by_count":17,"area":"safety"},{"id":"2202.12232","title":"Bounding Membership Inference","created":"2022-02-24","cited_by_count":15,"area":"safety"},{"id":"2412.08559","title":"Underestimated Privacy Risks for Minority Populations in Large Language Model Unlearning","created":"2024-12-11","cited_by_count":9,"area":"safety"},{"id":"2205.06369","title":"How to Combine Membership-Inference Attacks on Multiple Updated Models","created":"2022-05-12","cited_by_count":8,"area":"safety"},{"id":"2411.05743","title":"Free Record-Level Privacy Risk Evaluation Through Artifact-Based Methods","created":"2024-11-08","cited_by_count":7,"area":"safety"},{"id":"2508.09603","title":"The Surprising Effectiveness of Membership Inference with Simple N-Gram Coverage","created":"2025-08-13","cited_by_count":7,"area":"safety"},{"id":"2403.17775","title":"Secure Aggregation is Not Private Against Membership Inference Attacks","created":"2024-03-26","cited_by_count":6,"area":"safety"},{"id":"2506.14913","title":"Winter Soldier: Backdooring Language Models at Pre-Training with Indirect Data Poisoning","created":"2025-06-17","cited_by_count":6,"area":"safety"},{"id":"2507.15836","title":"Optimizing Canaries for Privacy Auditing with Metagradient Descent","created":"2025-07-21","cited_by_count":6,"area":"safety"},{"id":"2507.21412","title":"Cascading and Proxy Membership Inference Attacks","created":"2025-07-29","cited_by_count":6,"area":"safety"},{"id":"2405.15979","title":"BadGD: A unified data-centric framework to identify gradient descent vulnerabilities","created":"2024-05-24","cited_by_count":5,"area":"safety"},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2211.06582","title":"Provable Membership Inference Privacy","created":"2022-11-12","cited_by_count":4,"area":"safety"},{"id":"2303.03648","title":"Can Membership Inferencing be Refuted?","created":"2023-03-07","cited_by_count":4,"area":"safety"},{"id":"2406.18671","title":"A Zero Auxiliary Knowledge Membership Inference Attack on Aggregate Location Data","created":"2024-06-26","cited_by_count":4,"area":"safety"},{"id":"2411.04388","title":"Unlearning in- vs. out-of-distribution data in LLMs under gradient-based method","created":"2024-11-07","cited_by_count":4,"area":"safety"},{"id":"2506.15349","title":"Enhancing One-run Privacy Auditing with Quantile Regression-Based Membership Inference","created":"2025-06-18","cited_by_count":4,"area":"safety"},{"id":"2508.18671","title":"Auditing Approximate Machine Unlearning for Differentially Private Models","created":"2025-08-26","cited_by_count":4,"area":"safety"},{"id":"2509.05350","title":"Ensembling Membership Inference Attacks Against Tabular Generative Models","created":"2025-09-02","cited_by_count":4,"area":"safety"},{"id":"2509.06796","title":"Imitative Membership Inference Attack","created":"2025-09-08","cited_by_count":3,"area":"safety"},{"id":"2502.06374","title":"Hyperparameters in Score-Based Membership Inference Attacks","created":"2025-02-10","cited_by_count":2,"area":"safety"},{"id":"2503.07482","title":"How does Bayesian Sampling help Membership Inference Attacks?","created":"2025-03-10","cited_by_count":2,"area":"safety"},{"id":"2507.08158","title":"A Unified Framework for Adversary-Aware Differential Privacy Bounds","created":"2025-07-10","cited_by_count":2,"area":"safety"},{"id":"2602.02819","title":"Causal Evaluation of Membership Inference Attacks","created":"2026-02-02","cited_by_count":2,"area":"safety"},{"id":"2603.12142","title":"Understanding Disclosure Risk in Differential Privacy with Applications to Noise Calibration and Auditing (Extended Version)","created":"2026-03-12","cited_by_count":2,"area":"safety"},{"id":"2502.05739","title":"Mitigating Sensitive Information Leakage in LLMs4Code through Machine Unlearning","created":"2025-02-09","cited_by_count":1,"area":"safety"},{"id":"2504.16683","title":"MCMC for Bayesian estimation of Differential Privacy from Membership Inference Attacks","created":"2025-04-23","cited_by_count":1,"area":"safety"},{"id":"2602.16596","title":"Sequential Membership Inference Attacks","created":"2026-02-18","cited_by_count":1,"area":"safety"},{"id":"2607.05898","title":"Auditing of Unlearning Algorithms","created":"2026-07-07","cited_by_count":1,"area":"safety"},{"id":"2405.15423","title":"Lost in the Averages: A New Specific Setup to Evaluate Membership Inference Attacks Against Machine Learning Models","created":"2024-05-24","cited_by_count":0,"area":"safety"},{"id":"2502.16396","title":"FedNIA: Noise-Induced Activation Analysis for Mitigating Data Poisoning in Federated Learning","created":"2025-02-23","cited_by_count":0,"area":"safety"},{"id":"2602.15919","title":"Assessing Per-Sample Membership Inference Vulnerability without Retraining","created":"2026-02-17","cited_by_count":0,"area":"safety"},{"id":"2605.27292","title":"Detectability in Diversity: Improved Canary Crafting for Privacy Auditing in One Run","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2605.30203","title":"A Bayesian Approach to Membership Inference for Statistical Release","created":"2026-05-28","cited_by_count":0,"area":"safety"}],"next_cursor":null}