{"total":70,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248,"area":"safety"},{"id":"2202.05520","title":"What Does it Mean for a Language Model to Preserve Privacy?","created":"2022-02-11","cited_by_count":195,"area":null},{"id":"2203.03929","title":"Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks","created":"2022-03-08","cited_by_count":175,"area":"safety"},{"id":"2206.10469","title":"The Privacy Onion Effect: Memorization is Relative","created":"2022-06-21","cited_by_count":136,"area":null},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2301.09956","title":"Membership Inference of Diffusion Models","created":"2023-01-24","cited_by_count":46,"area":"diffusion"},{"id":"2106.11384","title":"Membership Inference on Word Embedding and Beyond","created":"2021-06-21","cited_by_count":35,"area":"safety"},{"id":"2409.00426","title":"Is Difficulty Calibration All We Need? Towards More Practical Membership Inference Attacks","created":"2024-08-31","cited_by_count":21,"area":"safety"},{"id":"2209.08615","title":"Membership Inference Attacks and Generalization: A Causal Perspective","created":"2022-09-18","cited_by_count":17,"area":"safety"},{"id":"2406.07687","title":"Adversarial Machine Unlearning","created":"2024-06-11","cited_by_count":16,"area":"safety"},{"id":"2402.00179","title":"De-identification is not enough: a comparison between de-identified and synthetic clinical notes","created":"2024-01-31","cited_by_count":14,"area":"safety"},{"id":"2310.00222","title":"Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learning","created":"2023-09-30","cited_by_count":11,"area":"safety"},{"id":"2506.13972","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2112.02230","title":"SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning","created":"2021-12-04","cited_by_count":10,"area":null},{"id":"2406.11544","title":"Do Parameters Reveal More than Loss for Membership Inference?","created":"2024-06-17","cited_by_count":10,"area":"safety"},{"id":"2605.17373","title":"FML-bench: A Controlled Study of AI Research Agent Strategies from the Perspective of Search Dynamics","created":"2026-05-17","cited_by_count":8,"area":"agents"},{"id":"2101.05405","title":"Training Data Leakage Analysis in Language Models","created":"2021-01-14","cited_by_count":7,"area":null},{"id":"2310.07219","title":"Improved Membership Inference Attacks Against Language Classification Models","created":"2023-10-11","cited_by_count":7,"area":"safety"},{"id":"2411.05743","title":"Free Record-Level Privacy Risk Evaluation Through Artifact-Based Methods","created":"2024-11-08","cited_by_count":7,"area":"safety"},{"id":"2209.06529","title":"Data Privacy and Trustworthy Machine Learning","created":"2022-09-14","cited_by_count":6,"area":null},{"id":"2307.11525","title":"Model Reporting for Certifiable AI: A Proposal from Merging EU Regulation into AI Development","created":"2023-07-21","cited_by_count":6,"area":null},{"id":"2507.21412","title":"Cascading and Proxy Membership Inference Attacks","created":"2025-07-29","cited_by_count":6,"area":"safety"},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2302.01068","title":"FedLAP-DP: Federated Learning by Sharing Differentially Private Loss Approximations","created":"2023-02-02","cited_by_count":5,"area":null},{"id":"2310.05696","title":"Little is Enough: Boosting Privacy by Sharing Only Hard Labels in Federated Semi-Supervised Learning","created":"2023-10-09","cited_by_count":5,"area":null},{"id":"2310.13786","title":"Fundamental Limits of Membership Inference Attacks on Machine Learning Models","created":"2023-10-20","cited_by_count":5,"area":"safety"},{"id":"2407.02747","title":"Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvature","created":"2024-07-03","cited_by_count":5,"area":"safety"},{"id":"2209.06317","title":"Quantitative AI Risk Assessments: Opportunities and Challenges","created":"2022-09-13","cited_by_count":4,"area":null},{"id":"2303.03648","title":"Can Membership Inferencing be Refuted?","created":"2023-03-07","cited_by_count":4,"area":"safety"},{"id":"2510.10472","title":"FML-bench: Benchmarking Machine Learning Agents for Scientific Research","created":"2025-10-12","cited_by_count":4,"area":"agents"},{"id":"2212.02701","title":"On the Discredibility of Membership Inference Attacks","created":"2022-12-06","cited_by_count":3,"area":"safety"},{"id":"2306.15790","title":"Probing the Transition to Dataset-Level Privacy in ML Models Using an Output-Specific and Data-Resolved Privacy Profile","created":"2023-06-27","cited_by_count":3,"area":null},{"id":"2402.10065","title":"Some Targets Are Harder to Identify than Others: Quantifying the Target-dependent Membership Leakage","created":"2024-02-15","cited_by_count":3,"area":"safety"},{"id":"2410.16975","title":"Publishing Neural Networks in Drug Discovery Might Compromise Training Data Privacy","created":"2024-10-22","cited_by_count":3,"area":null},{"id":"2410.17281","title":"A Comprehensive Survey and Classification of Evaluation Criteria for Trustworthy Artificial Intelligence","created":"2024-10-10","cited_by_count":3,"area":null},{"id":"2502.06567","title":"Membership Inference Risks in Quantized Models: A Theoretical and Empirical Study","created":"2025-02-10","cited_by_count":3,"area":"safety"},{"id":"2509.06796","title":"Imitative Membership Inference Attack","created":"2025-09-08","cited_by_count":3,"area":"safety"},{"id":"2603.07567","title":"Revisiting the LiRA Membership Inference Attack Under Realistic Assumptions","created":"2026-03-08","cited_by_count":3,"area":"safety"},{"id":"2210.16258","title":"On the Vulnerability of Data Points under Multiple Membership Inference Attacks and Target Models","created":"2022-10-28","cited_by_count":2,"area":"safety"},{"id":"2310.00488","title":"Membership Privacy Risks of Sharpness Aware Minimization","created":"2023-09-30","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2411.15831","title":"Efficient and Private: Memorisation under differentially private parameter-efficient fine-tuning in language models","created":"2024-11-24","cited_by_count":2,"area":null},{"id":"2508.16150","title":"Evaluating the Defense Potential of Machine Unlearning against Membership Inference Attacks","created":"2025-08-22","cited_by_count":2,"area":"safety"},{"id":"2510.16037","title":"Membership Inference over Diffusion-models-based Synthetic Tabular Data","created":"2025-10-16","cited_by_count":2,"area":"diffusion"},{"id":"2211.04686","title":"Directional Privacy for Deep Learning","created":"2022-11-09","cited_by_count":1,"area":null},{"id":"2411.07070","title":"On Active Privacy Auditing in Supervised Fine-tuning for White-Box Language Models","created":"2024-11-11","cited_by_count":1,"area":null},{"id":"2503.13872","title":"Empirical Calibration and Metric Differential Privacy in Language Models","created":"2025-03-18","cited_by_count":1,"area":null},{"id":"2505.20095","title":"Spurious Privacy Leakage in Neural Networks","created":"2025-05-26","cited_by_count":1,"area":null},{"id":"2506.23296","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","created":"2025-06-29","cited_by_count":1,"area":null},{"id":"2509.12386","title":"Amulet: a Python Library for Assessing Interactions Among ML Defenses and Risks","created":"2025-09-15","cited_by_count":1,"area":null},{"id":"2601.22434","title":"Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspective","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2605.25819","title":"On Reliability of Membership Inference Vulnerability Evaluation","created":"2026-05-25","cited_by_count":1,"area":"safety"},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2310.10656","title":"VeriDIP: Verifying Ownership of Deep Neural Networks through Privacy Leakage Fingerprints","created":"2023-09-07","cited_by_count":0,"area":null},{"id":"2312.17667","title":"AIJack: Let's Hijack AI! Security and Privacy Risk Simulator for Machine Learning","created":"2023-12-29","cited_by_count":0,"area":null},{"id":"2405.15423","title":"Lost in the Averages: A New Specific Setup to Evaluate Membership Inference Attacks Against Machine Learning Models","created":"2024-05-24","cited_by_count":0,"area":"safety"},{"id":"2411.03363","title":"TDDBench: A Benchmark for Training data detection","created":"2024-11-05","cited_by_count":0,"area":"safety"},{"id":"2502.15758","title":"Maturity Framework for Enhancing Machine Learning Quality","created":"2025-02-12","cited_by_count":0,"area":null},{"id":"2509.04169","title":"Privacy Risks in Time Series Forecasting: User- and Record-Level Membership Inference","created":"2025-09-04","cited_by_count":0,"area":"safety"},{"id":"2510.23074","title":"Fast-MIA: Efficient and Scalable Membership Inference for LLMs","created":"2025-10-27","cited_by_count":0,"area":"safety"},{"id":"2511.21799","title":"The Double-Edged Nature of the Rashomon Set for Trustworthy Machine Learning","created":"2025-11-26","cited_by_count":0,"area":null},{"id":"2602.09182","title":"One RNG to Rule Them All: How Randomness Becomes an Attack Vector in Machine Learning","created":"2026-02-09","cited_by_count":0,"area":null},{"id":"2603.22987","title":"A Critical Review on the Effectiveness and Privacy Threats of Membership Inference Attacks","created":"2026-03-24","cited_by_count":0,"area":"safety"},{"id":"2603.28942","title":"ReproMIA: A Comprehensive Analysis of Model Reprogramming for Proactive Membership Inference Attacks","created":"2026-03-30","cited_by_count":0,"area":"diffusion"},{"id":"2604.02780","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","created":"2026-04-03","cited_by_count":0,"area":"safety"},{"id":"2605.30203","title":"A Bayesian Approach to Membership Inference for Statistical Release","created":"2026-05-28","cited_by_count":0,"area":"safety"},{"id":"2607.14607","title":"Auditing Fairness-Privacy Trade-offs: Subpopulation-Level Effects of Fairness-Enhancing Algorithms","created":"2026-07-16","cited_by_count":0,"area":null}],"next_cursor":null}