{"total":45,"rows":[{"id":"2203.01925","title":"Label-Only Model Inversion Attacks via Boundary Repulsion","created":"2022-03-03","cited_by_count":56,"area":null},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2310.18362","title":"SoK: Memorization in General-Purpose Large Language Models","created":"2023-10-24","cited_by_count":37,"area":null},{"id":"2205.04007","title":"ResSFL: A Resistance Transfer Framework for Defending Model Inversion Attack in Split Federated Learning","created":"2022-05-09","cited_by_count":36,"area":null},{"id":"2206.05483","title":"Bilateral Dependency Optimization: Defending Against Model-inversion Attacks","created":"2022-06-11","cited_by_count":30,"area":null},{"id":"2402.04013","title":"Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses","created":"2024-02-06","cited_by_count":30,"area":null},{"id":"2310.19342","title":"Label-Only Model Inversion Attacks via Knowledge Transfer","created":"2023-10-30","cited_by_count":21,"area":null},{"id":"2210.13662","title":"Analyzing Privacy Leakage in Machine Learning via Multiple Hypothesis Testing: A Lesson From Fano","created":"2022-10-24","cited_by_count":17,"area":null},{"id":"2310.06549","title":"Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks","created":"2023-10-10","cited_by_count":13,"area":null},{"id":"2405.05588","title":"Model Inversion Robustness: Can Transfer Learning Help?","created":"2024-05-09","cited_by_count":12,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2103.01496","title":"DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing","created":"2021-03-02","cited_by_count":10,"area":null},{"id":"2409.01696","title":"On the Vulnerability of Skip Connections to Model Inversion Attacks","created":"2024-09-03","cited_by_count":9,"area":null},{"id":"2306.13965","title":"Boosting Model Inversion Attacks with Adversarial Examples","created":"2023-06-24","cited_by_count":8,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2201.04569","title":"Get your Foes Fooled: Proximal Gradient Split Learning for Defense against Model Inversion Attacks on IoMT data","created":"2022-01-12","cited_by_count":7,"area":null},{"id":"2304.11436","title":"Breaching FedMD: Image Recovery via Paired-Logits Inversion Attack","created":"2023-04-22","cited_by_count":7,"area":null},{"id":"2307.10318","title":"Eliminating Label Leakage in Tree-Based Vertical Federated Learning","created":"2023-07-19","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2503.00383","title":"Theoretical Insights in Model Inversion Robustness and Conditional Entropy Maximization for Collaborative Inference Systems","created":"2025-03-01","cited_by_count":6,"area":null},{"id":"2410.05159","title":"MIBench: A Comprehensive Framework for Benchmarking Model Inversion Attack and Defense","created":"2024-10-07","cited_by_count":5,"area":null},{"id":"2411.08460","title":"Trap-MID: Trapdoor-based Defense against Model Inversion Attacks","created":"2024-11-13","cited_by_count":5,"area":null},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2508.03097","title":"VFLAIR-LLM: A Comprehensive Framework and Benchmark for Split Learning of LLMs","created":"2025-08-05","cited_by_count":5,"area":null},{"id":"2301.03206","title":"Introducing Model Inversion Attacks on Automatic Speaker Recognition","created":"2023-01-09","cited_by_count":4,"area":null},{"id":"2306.07973","title":"PrivaScissors: Enhance the Privacy of Collaborative Inference through the Lens of Mutual Information","created":"2023-05-17","cited_by_count":4,"area":null},{"id":"2410.05814","title":"Rank Matters: Understanding and Defending Model Inversion Attacks via Low-Rank Feature Filtering","created":"2024-10-08","cited_by_count":4,"area":null},{"id":"2312.05642","title":"Speed Up Federated Learning in Heterogeneous Environment: A Dynamic Tiering Approach","created":"2023-12-09","cited_by_count":3,"area":null},{"id":"2504.04033","title":"Disparate Privacy Vulnerability: Targeted Attribute Inference Attacks and Defenses","created":"2025-04-05","cited_by_count":3,"area":null},{"id":"2401.07205","title":"Crafter: Facial Feature Crafting against Inversion-based Identity Theft on Deep Models","created":"2024-01-14","cited_by_count":2,"area":null},{"id":"2409.01062","title":"Random Erasing vs. Model Inversion: A Promising Defense or a False Hope?","created":"2024-09-02","cited_by_count":2,"area":null},{"id":"2306.06825","title":"AnoFel: Supporting Anonymity for Privacy-Preserving Federated Learning","created":"2023-06-12","cited_by_count":1,"area":null},{"id":"2404.13860","title":"Distributional Black-Box Model Inversion Attack with Multi-Agent Reinforcement Learning","created":"2024-04-22","cited_by_count":1,"area":null},{"id":"2505.03519","title":"Revisiting Model Inversion Evaluation: From Misleading Standards to Reliable Privacy Assessment","created":"2025-05-06","cited_by_count":1,"area":null},{"id":"2505.23792","title":"Zero-Trust Foundation Models: A New Paradigm for Secure and Collaborative Artificial Intelligence for Internet of Things","created":"2025-05-26","cited_by_count":1,"area":null},{"id":"2507.04528","title":"Towards integration of Privacy Enhancing Technologies in Explainable Artificial Intelligence","created":"2025-07-06","cited_by_count":1,"area":null},{"id":"2509.20177","title":"Generative Model Inversion Through the Lens of the Manifold Hypothesis","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2312.17667","title":"AIJack: Let's Hijack AI! Security and Privacy Risk Simulator for Machine Learning","created":"2023-12-29","cited_by_count":0,"area":null},{"id":"2502.02913","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","created":"2025-02-05","cited_by_count":0,"area":null},{"id":"2503.16542","title":"Defending Against Gradient Inversion Attacks for Biomedical Images via Learnable Data Perturbation","created":"2025-03-19","cited_by_count":0,"area":null},{"id":"2510.25687","title":"Model Inversion meets Cryptographic Fuzzy Extractors","created":"2025-10-29","cited_by_count":0,"area":null},{"id":"2511.21799","title":"The Double-Edged Nature of the Rashomon Set for Trustworthy Machine Learning","created":"2025-11-26","cited_by_count":0,"area":null},{"id":"2607.12354","title":"Reducing information dependency does not cause training data privacy. Adversarially non-robust features do","created":"2026-07-14","cited_by_count":0,"area":null},{"id":"2610.00382","title":"On the Relationship between Model Quantization and Model Inversion Attacks","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.07677","title":"Adaptive Model Inversion Attacks Generalize a Privacy-Robustness Tradeoff","created":"2026-10-06","cited_by_count":0,"area":null}],"next_cursor":null}