{"total":108,"rows":[{"id":"2108.06098","title":"FedPara: Low-Rank Hadamard Product for Communication-Efficient Federated Learning","created":"2021-08-13","cited_by_count":141,"area":null},{"id":"2307.01881","title":"ProPILE: Probing Privacy Leakage in Large Language Models","created":"2023-07-04","cited_by_count":129,"area":null},{"id":"2204.08570","title":"A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability","created":"2022-04-18","cited_by_count":118,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2203.01925","title":"Label-Only Model Inversion Attacks via Boundary Repulsion","created":"2022-03-03","cited_by_count":56,"area":null},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2206.04055","title":"Gradient Obfuscation Gives a False Sense of Security in Federated Learning","created":"2022-06-08","cited_by_count":39,"area":null},{"id":"2304.04625","title":"Reinforcement Learning-Based Black-Box Model Inversion Attacks","created":"2023-04-10","cited_by_count":33,"area":null},{"id":"2209.10117","title":"A Comprehensive Survey on Trustworthy Recommender Systems","created":"2022-09-21","cited_by_count":32,"area":null},{"id":"2111.14655","title":"FedHM: Efficient Federated Learning for Heterogeneous Models via Low-rank Factorization","created":"2021-11-29","cited_by_count":31,"area":null},{"id":"2206.05483","title":"Bilateral Dependency Optimization: Defending Against Model-inversion Attacks","created":"2022-06-11","cited_by_count":30,"area":null},{"id":"2310.01424","title":"Identifying and Mitigating Privacy Risks Stemming from Language Models: A Survey","created":"2023-09-27","cited_by_count":30,"area":null},{"id":"2304.03722","title":"Beyond Privacy: Navigating the Opportunities and Challenges of Synthetic Data","created":"2023-04-07","cited_by_count":29,"area":null},{"id":"2209.07807","title":"Model Inversion Attacks against Graph Neural Networks","created":"2022-09-16","cited_by_count":26,"area":null},{"id":"2210.08371","title":"Sketching for First Order Method: Efficient Algorithm for Low-Bandwidth Channel and Vulnerability","created":"2022-10-15","cited_by_count":25,"area":null},{"id":"2308.16375","title":"A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applications","created":"2023-08-31","cited_by_count":22,"area":null},{"id":"2210.12051","title":"The privacy issue of counterfactual explanations: explanation linkage attacks","created":"2022-10-21","cited_by_count":20,"area":null},{"id":"2104.13061","title":"Property Inference Attacks on Convolutional Neural Networks: Influence and Implications of Target Model's Complexity","created":"2021-04-27","cited_by_count":19,"area":null},{"id":"2410.08190","title":"Poison-splat: Computation Cost Attack on 3D Gaussian Splatting","created":"2024-10-10","cited_by_count":18,"area":null},{"id":"2507.03034","title":"Rethinking Data Protection in the (Generative) Artificial Intelligence Era","created":"2025-07-03","cited_by_count":18,"area":null},{"id":"2208.10134","title":"Machine Learning with Confidential Computing: A Systematization of Knowledge","created":"2022-08-22","cited_by_count":15,"area":null},{"id":"2302.01428","title":"Understanding Reconstruction Attacks with the Neural Tangent Kernel and Dataset Distillation","created":"2023-02-02","cited_by_count":14,"area":null},{"id":"2208.02878","title":"Differentially Private Counterfactuals via Functional Mechanism","created":"2022-08-04","cited_by_count":13,"area":null},{"id":"2209.14826","title":"Towards Lightweight Black-Box Attacks against Deep Neural Networks","created":"2022-09-29","cited_by_count":13,"area":null},{"id":"2405.03636","title":"The Federation Strikes Back: A Survey of Federated Learning Privacy Attacks, Defenses, Applications, and Policy Landscape","created":"2024-05-06","cited_by_count":13,"area":null},{"id":"2309.16398","title":"Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Survey","created":"2023-09-28","cited_by_count":12,"area":null},{"id":"2402.19232","title":"Trained Random Forests Completely Reveal your Dataset","created":"2024-02-29","cited_by_count":11,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2502.16184","title":"Robustness and Cybersecurity in the EU Artificial Intelligence Act","created":"2025-02-22","cited_by_count":11,"area":null},{"id":"2209.01215","title":"Exploiting Fairness to Enhance Sensitive Attributes Reconstruction","created":"2022-09-02","cited_by_count":10,"area":null},{"id":"2109.03999","title":"Towards Efficient Synchronous Federated Training: A Survey on System Optimization Strategies","created":"2021-09-09","cited_by_count":9,"area":null},{"id":"2401.16251","title":"Cross-silo Federated Learning with Record-level Personalized Differential Privacy","created":"2024-01-29","cited_by_count":9,"area":null},{"id":"2406.03519","title":"Noise-Aware Algorithm for Heterogeneous Differentially Private Federated Learning","created":"2024-06-05","cited_by_count":9,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2405.14517","title":"TUNI: A Textual Unimodal Detector for Identity Inference in CLIP Models","created":"2024-05-23","cited_by_count":8,"area":null},{"id":"2504.10277","title":"RealHarm: A Collection of Real-World Language Model Application Failures","created":"2025-04-14","cited_by_count":8,"area":null},{"id":"2205.11090","title":"FaceMAE: Privacy-Preserving Face Recognition via Masked Autoencoders","created":"2022-05-23","cited_by_count":7,"area":null},{"id":"2308.15099","title":"Probabilistic Dataset Reconstruction from Interpretable Models","created":"2023-08-29","cited_by_count":7,"area":null},{"id":"2405.19471","title":"The Data Minimization Principle in Machine Learning","created":"2024-05-29","cited_by_count":7,"area":null},{"id":"2506.00660","title":"Differential privacy for medical deep learning: methods, tradeoffs, and deployment implications","created":"2025-05-31","cited_by_count":7,"area":null},{"id":"2502.16065","title":"A Survey of Model Extraction Attacks and Defenses in Distributed Computing Environments","created":"2025-02-22","cited_by_count":6,"area":null},{"id":"2204.09183","title":"Robustness Testing of Data and Knowledge Driven Anomaly Detection in Cyber-Physical Systems","created":"2022-04-20","cited_by_count":5,"area":null},{"id":"2404.16847","title":"State-of-the-Art Approaches to Enhancing Privacy Preservation of Machine Learning Datasets: A Survey","created":"2024-02-25","cited_by_count":5,"area":null},{"id":"2503.04963","title":"Energy-Latency Attacks: A New Adversarial Threat to Deep Learning","created":"2025-03-06","cited_by_count":5,"area":null},{"id":"2510.12950","title":"An Investigation of Memorization Risk in Healthcare Foundation Models","created":"2025-10-14","cited_by_count":5,"area":null},{"id":"2205.06506","title":"Collaborative Drug Discovery: Inference-level Data Protection Perspective","created":"2022-05-13","cited_by_count":4,"area":null},{"id":"2306.09273","title":"Privacy Risks in Reinforcement Learning for Household Robots","created":"2023-06-15","cited_by_count":4,"area":null},{"id":"2311.17228","title":"Survey on AI Ethics: A Socio-technical Perspective","created":"2023-11-28","cited_by_count":4,"area":null},{"id":"2311.17453","title":"Privacy Measurement in Tabular Synthetic Data: State of the Art and Future Research Directions","created":"2023-11-29","cited_by_count":4,"area":null},{"id":"2312.16191","title":"SoK: Taming the Triangle -- On the Interplays between Fairness, Interpretability and Privacy in Machine Learning","created":"2023-12-22","cited_by_count":4,"area":null},{"id":"2405.19272","title":"Differentially Private Clustered Federated Learning","created":"2024-05-29","cited_by_count":4,"area":null},{"id":"2211.06716","title":"PriMask: Cascadable and Collusion-Resilient Data Masking for Mobile Cloud Inference","created":"2022-11-12","cited_by_count":3,"area":null},{"id":"2406.15789","title":"Privacy Implications of Explainable AI in Data-Driven Systems","created":"2024-06-22","cited_by_count":3,"area":null},{"id":"2406.18812","title":"A Survey on Privacy Attacks Against Digital Twin Systems in AI-Robotics","created":"2024-06-27","cited_by_count":3,"area":null},{"id":"2411.14516","title":"Memory Backdoor Attacks on Neural Networks","created":"2024-11-21","cited_by_count":3,"area":null},{"id":"2502.05325","title":"From Counterfactuals to Trees: Competitive Analysis of Model Extraction Attacks","created":"2025-02-07","cited_by_count":3,"area":null},{"id":"2310.14858","title":"Dynamically Weighted Federated k-Means","created":"2023-10-23","cited_by_count":2,"area":null},{"id":"2407.08127","title":"Prediction Exposes Your Face: Black-box Model Inversion via Prediction Alignment","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2411.02099","title":"Differentially Private Integrated Decision Gradients (IDG-DP) for Radar-based Human Activity Recognition","created":"2024-11-04","cited_by_count":2,"area":null},{"id":"2412.01460","title":"A Comprehensive Study of Shapley Value in Data Analytics","created":"2024-12-02","cited_by_count":2,"area":null},{"id":"2504.14188","title":"Rethinking Client-oriented Federated Graph Learning","created":"2025-04-19","cited_by_count":2,"area":null},{"id":"2505.02828","title":"Privacy Risks and Preservation Methods in Explainable Artificial Intelligence: A Scoping Review","created":"2025-05-05","cited_by_count":2,"area":null},{"id":"2505.23412","title":"Buffer-free Class-Incremental Learning with Out-of-Distribution Detection","created":"2025-05-29","cited_by_count":2,"area":null},{"id":"2508.13730","title":"On the Security and Privacy of Federated Learning: A Survey with Attacks, Defenses, Frameworks, Applications, and Future Directions","created":"2025-08-19","cited_by_count":2,"area":null},{"id":"2510.00909","title":"\"We are not Future-ready\": Understanding AI Privacy Risks and Existing Mitigation Strategies from the Perspective of AI Developers in Europe","created":"2025-10-01","cited_by_count":2,"area":null},{"id":"2602.09748","title":"Linear Model Extraction via Factual and Counterfactual Queries","created":"2026-02-10","cited_by_count":2,"area":null},{"id":"2110.03054","title":"On the Privacy Risks of Deploying Recurrent Neural Networks in Machine Learning Models","created":"2021-10-06","cited_by_count":1,"area":null},{"id":"2201.03004","title":"Privacy-aware Early Detection of COVID-19 through Adversarial Training","created":"2022-01-09","cited_by_count":1,"area":null},{"id":"2211.04157","title":"Inferring Class Label Distribution of Training Data from Classifiers: An Accuracy-Augmented Meta-Classifier Attack","created":"2022-11-08","cited_by_count":1,"area":null},{"id":"2212.03749","title":"Memorization of Named Entities in Fine-tuned BERT Models","created":"2022-12-07","cited_by_count":1,"area":null},{"id":"2310.08775","title":"When Machine Learning Models Leak: An Exploration of Synthetic Training Data","created":"2023-10-12","cited_by_count":1,"area":null},{"id":"2404.00696","title":"Privacy Re-identification Attacks on Tabular GANs","created":"2024-03-31","cited_by_count":1,"area":null},{"id":"2404.17225","title":"Enhancing Privacy and Security of Autonomous UAV Navigation","created":"2024-04-26","cited_by_count":1,"area":null},{"id":"2406.06202","title":"Federated learning in food research","created":"2024-06-10","cited_by_count":1,"area":null},{"id":"2408.02140","title":"VidModEx: Interpretable and Efficient Black Box Model Extraction for High-Dimensional Spaces","created":"2024-08-04","cited_by_count":1,"area":null},{"id":"2409.10986","title":"Control-flow Reconstruction Attacks on Business Process Models","created":"2024-09-17","cited_by_count":1,"area":null},{"id":"2412.20798","title":"Reconciling Privacy and Explainability in High-Stakes: A Systematic Inquiry","created":"2024-12-30","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2509.20177","title":"Generative Model Inversion Through the Lens of the Manifold Hypothesis","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2509.20680","title":"Can Federated Learning Safeguard Private Data in LLM Training? Vulnerabilities, Attacks, and Defense Evaluation","created":"2025-09-25","cited_by_count":1,"area":null},{"id":"2601.22434","title":"Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspective","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2304.00258","title":"Data Privacy Preservation on the Internet of Things","created":"2023-04-01","cited_by_count":0,"area":null},{"id":"2312.03120","title":"The Landscape of Modern Machine Learning: A Review of Machine, Distributed and Federated Learning","created":"2023-12-05","cited_by_count":0,"area":null},{"id":"2312.10943","title":"Model Stealing Attack against Graph Classification with Authenticity, Uncertainty and Diversity","created":"2023-12-18","cited_by_count":0,"area":null},{"id":"2401.01204","title":"PPBFL: A Privacy Protected Blockchain-based Federated Learning Model","created":"2024-01-02","cited_by_count":0,"area":null},{"id":"2402.18027","title":"Breaking the Black-Box: Confidence-Guided Model Inversion Attack for Distribution Shift","created":"2024-02-28","cited_by_count":0,"area":null},{"id":"2406.00249","title":"Privacy Challenges in Meta-Learning: An Investigation on Model-Agnostic Meta-Learning","created":"2024-06-01","cited_by_count":0,"area":null},{"id":"2407.14573","title":"Trading Devil Final: Backdoor attack via Stock market and Bayesian Optimization","created":"2024-07-21","cited_by_count":0,"area":null},{"id":"2409.09517","title":"Deep Learning Under Siege: Identifying Security Vulnerabilities and Risk Mitigation Strategies","created":"2024-09-14","cited_by_count":0,"area":null},{"id":"2411.18746","title":"Inference Privacy: Properties and Mechanisms","created":"2024-11-27","cited_by_count":0,"area":null},{"id":"2502.02913","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","created":"2025-02-05","cited_by_count":0,"area":null},{"id":"2502.05307","title":"Training Set Reconstruction from Differentially Private Forests: How Effective is DP?","created":"2025-02-07","cited_by_count":0,"area":null},{"id":"2508.08583","title":"AI Security Map: Holistic Organization of AI Security Technologies and Impacts on Stakeholders","created":"2025-08-12","cited_by_count":0,"area":null},{"id":"2509.18949","title":"Towards Privacy-Aware Bayesian Networks: A Credal Approach","created":"2025-09-23","cited_by_count":0,"area":null},{"id":"2601.13122","title":"Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forward","created":"2026-01-19","cited_by_count":0,"area":null},{"id":"2602.05410","title":"Robust Federated Learning via Byzantine Filtering over Encrypted Updates","created":"2026-02-05","cited_by_count":0,"area":null},{"id":"2603.13570","title":"Privacy-Preserving Machine Learning for IoT: A Cross-Paradigm Survey and Future Roadmap","created":"2026-03-13","cited_by_count":0,"area":null},{"id":"2603.15842","title":"Informationally Compressive Anonymization: Non-Degrading Sensitive Input Protection for Privacy-Preserving Supervised Machine Learning","created":"2026-03-16","cited_by_count":0,"area":null}],"next_cursor":"100"}