{"total":58,"rows":[{"id":"2206.00240","title":"Privacy for Free: How does Dataset Condensation Help Privacy?","created":"2022-06-01","cited_by_count":120,"area":null},{"id":"2201.12179","title":"Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks","created":"2022-01-28","cited_by_count":60,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2403.04468","title":"A Survey of Graph Neural Networks in Real world: Imbalance, Noise, Privacy and OOD Challenges","created":"2024-03-07","cited_by_count":54,"area":null},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2302.09923","title":"Prompt Stealing Attacks Against Text-to-Image Generation Models","created":"2023-02-20","cited_by_count":51,"area":null},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38,"area":null},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2308.16375","title":"A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applications","created":"2023-08-31","cited_by_count":22,"area":null},{"id":"2310.07152","title":"No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device ML","created":"2023-10-11","cited_by_count":21,"area":null},{"id":"2203.09566","title":"Leveraging Adversarial Examples to Quantify Membership Information Leakage","created":"2022-03-17","cited_by_count":19,"area":null},{"id":"2207.13766","title":"Label-Only Membership Inference Attack against Node-Level Graph Neural Networks","created":"2022-07-27","cited_by_count":19,"area":null},{"id":"2209.07341","title":"Does CLIP Know My Face?","created":"2022-09-15","cited_by_count":19,"area":null},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2407.06754","title":"Threats and Defenses in Federated Learning Life Cycle: A Comprehensive Survey and Challenges","created":"2024-07-09","cited_by_count":15,"area":null},{"id":"2410.16618","title":"SoK: Dataset Copyright Auditing in Machine Learning Systems","created":"2024-10-22","cited_by_count":15,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2112.02230","title":"SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning","created":"2021-12-04","cited_by_count":10,"area":null},{"id":"2302.02162","title":"AUTOLYCUS: Exploiting Explainable AI (XAI) for Model Extraction Attacks against Interpretable Models","created":"2023-02-04","cited_by_count":9,"area":null},{"id":"2210.11049","title":"How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers","created":"2022-10-20","cited_by_count":8,"area":null},{"id":"2501.03941","title":"Synthetic Data Privacy Metrics","created":"2025-01-07","cited_by_count":8,"area":null},{"id":"2403.02571","title":"DPAdapter: Improving Differentially Private Deep Learning through Noise Tolerance Pre-training","created":"2024-03-05","cited_by_count":7,"area":null},{"id":"2202.02242","title":"Dikaios: Privacy Auditing of Algorithmic Fairness via Attribute Inference Attacks","created":"2022-02-04","cited_by_count":5,"area":null},{"id":"2209.01688","title":"On the Privacy Risks of Cell-Based NAS Architectures","created":"2022-09-04","cited_by_count":5,"area":null},{"id":"2308.09490","title":"Balancing Transparency and Risk: The Security and Privacy Risks of Open-Source Machine Learning Models","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2310.05696","title":"Little is Enough: Boosting Privacy by Sharing Only Hard Labels in Federated Semi-Supervised Learning","created":"2023-10-09","cited_by_count":5,"area":null},{"id":"2501.15718","title":"CENSOR: Defense Against Gradient Inversion via Orthogonal Subspace Bayesian Sampling","created":"2025-01-27","cited_by_count":5,"area":null},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2203.06555","title":"Label-only Model Inversion Attack: The Attack that Requires the Least Information","created":"2022-03-13","cited_by_count":4,"area":null},{"id":"2312.05264","title":"All Rivers Run to the Sea: Private Learning with Asymmetric Flows","created":"2023-12-05","cited_by_count":4,"area":null},{"id":"2407.04981","title":"TRACE: TRansformer-based Attribution using Contrastive Embeddings in LLMs","created":"2024-07-06","cited_by_count":4,"area":null},{"id":"2501.10985","title":"GRID: Protecting Training Graph from Link Stealing Attacks on GNN Models","created":"2025-01-19","cited_by_count":4,"area":null},{"id":"2510.09655","title":"Data Provenance Auditing of Fine-Tuned Large Language Models with a Text-Preserving Technique","created":"2025-10-07","cited_by_count":4,"area":null},{"id":"2512.16059","title":"ContextLeak: Auditing Leakage in Private In-Context Learning Methods","created":"2025-12-18","cited_by_count":4,"area":null},{"id":"2409.19413","title":"Membership Privacy Evaluation in Deep Spiking Neural Networks","created":"2024-09-28","cited_by_count":3,"area":null},{"id":"2411.09945","title":"TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models","created":"2024-11-15","cited_by_count":3,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2409.07415","title":"SoK: Security and Privacy Risks of Healthcare AI","created":"2024-09-11","cited_by_count":2,"area":null},{"id":"2411.03730","title":"NeurIPS 2023 Competition: Privacy Preserving Federated Learning Document VQA","created":"2024-11-06","cited_by_count":2,"area":null},{"id":"2503.06150","title":"Do Fairness Interventions Come at the Cost of Privacy: Evaluations for Binary Classifiers","created":"2025-03-08","cited_by_count":2,"area":null},{"id":"2503.19070","title":"Graph-Level Label-Only Membership Inference Attack against Graph Neural Networks","created":"2025-03-24","cited_by_count":2,"area":null},{"id":"2508.11848","title":"Adversarial Robustness in Distributed Quantum Machine Learning","created":"2025-08-16","cited_by_count":2,"area":null},{"id":"2209.01538","title":"Data Provenance via Differential Auditing","created":"2022-09-04","cited_by_count":1,"area":null},{"id":"2212.06264","title":"Data Leakage via Access Patterns of Sparse Features in Deep Learning-based Recommendation Systems","created":"2022-12-12","cited_by_count":1,"area":null},{"id":"2310.19304","title":"Privacy-Preserving Federated Learning over Vertically and Horizontally Partitioned Data for Financial Anomaly Detection","created":"2023-10-30","cited_by_count":1,"area":null},{"id":"2401.13751","title":"A Training Rate and Survival Heuristic for Inference and Robustness Evaluation (TRASHFIRE)","created":"2024-01-24","cited_by_count":1,"area":null},{"id":"2411.07070","title":"On Active Privacy Auditing in Supervised Fine-tuning for White-Box Language Models","created":"2024-11-11","cited_by_count":1,"area":null},{"id":"2501.16671","title":"Data-Free Model-Related Attacks: Unleashing the Potential of Generative AI","created":"2025-01-28","cited_by_count":1,"area":null},{"id":"2512.14439","title":"VICTOR: Dataset Copyright Auditing in Video Recognition Systems","created":"2025-12-16","cited_by_count":1,"area":null},{"id":"2205.12430","title":"Additive Logistic Mechanism for Privacy-Preserving Self-Supervised Learning","created":"2022-05-25","cited_by_count":0,"area":null},{"id":"2206.14371","title":"Matryoshka: Stealing Functionality of Private ML Data by Hiding Models in Model","created":"2022-06-29","cited_by_count":0,"area":null},{"id":"2310.20299","title":"Verification of Neural Networks Local Differential Classification Privacy","created":"2023-10-31","cited_by_count":0,"area":null},{"id":"2409.07609","title":"Survival of the Cheapest: Cost-Aware Hardware Adaptation for Adversarial Robustness","created":"2024-09-11","cited_by_count":0,"area":null},{"id":"2603.06359","title":"Tiny, Hardware-Independent, Compression-based Classification","created":"2026-03-06","cited_by_count":0,"area":null},{"id":"2606.07996","title":"MC-PDD: Masked Corpus-Level Pretraining Data Detection for Black-Box Large Language Models","created":"2026-06-06","cited_by_count":0,"area":null}],"next_cursor":null}