{"total":55,"rows":[{"id":"2201.12179","title":"Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks","created":"2022-01-28","cited_by_count":60,"area":null},{"id":"2203.01925","title":"Label-Only Model Inversion Attacks via Boundary Repulsion","created":"2022-03-03","cited_by_count":56,"area":null},{"id":"2304.01669","title":"Re-thinking Model Inversion Attacks Against Deep Neural Networks","created":"2023-04-04","cited_by_count":39,"area":null},{"id":"2304.04625","title":"Reinforcement Learning-Based Black-Box Model Inversion Attacks","created":"2023-04-10","cited_by_count":33,"area":null},{"id":"2206.05483","title":"Bilateral Dependency Optimization: Defending Against Model-inversion Attacks","created":"2022-06-11","cited_by_count":30,"area":null},{"id":"2402.04013","title":"Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses","created":"2024-02-06","cited_by_count":30,"area":null},{"id":"2302.09814","title":"Pseudo Label-Guided Model Inversion Attack via Conditional Generative Adversarial Network","created":"2023-02-20","cited_by_count":28,"area":null},{"id":"2307.10655","title":"A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency","created":"2023-07-20","cited_by_count":21,"area":null},{"id":"2310.19342","title":"Label-Only Model Inversion Attacks via Knowledge Transfer","created":"2023-10-30","cited_by_count":21,"area":null},{"id":"2407.13863","title":"A Closer Look at GAN Priors: Exploiting Intermediate Features for Enhanced Model Inversion Attacks","created":"2024-07-18","cited_by_count":18,"area":null},{"id":"2306.09104","title":"On Strengthening and Defending Graph Reconstruction Attack with Markov Chain Approximation","created":"2023-06-15","cited_by_count":16,"area":null},{"id":"2306.00419","title":"Challenges and Remedies to Privacy and Security in AIGC: Exploring the Potential of Privacy Computing, Blockchain, and Beyond","created":"2023-06-01","cited_by_count":14,"area":null},{"id":"2310.06549","title":"Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks","created":"2023-10-10","cited_by_count":13,"area":null},{"id":"2405.05588","title":"Model Inversion Robustness: Can Transfer Learning Help?","created":"2024-05-09","cited_by_count":12,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2409.01696","title":"On the Vulnerability of Skip Connections to Model Inversion Attacks","created":"2024-09-03","cited_by_count":9,"area":null},{"id":"2306.13965","title":"Boosting Model Inversion Attacks with Adversarial Examples","created":"2023-06-24","cited_by_count":8,"area":null},{"id":"2201.04569","title":"Get your Foes Fooled: Proximal Gradient Split Learning for Defense against Model Inversion Attacks on IoMT data","created":"2022-01-12","cited_by_count":7,"area":null},{"id":"2207.12263","title":"SecretGen: Privacy Recovery on Pre-Trained Models via Distribution Discrimination","created":"2022-07-25","cited_by_count":7,"area":null},{"id":"2309.00013","title":"Model Inversion Attack via Dynamic Memory Learning","created":"2023-08-24","cited_by_count":7,"area":null},{"id":"2310.10427","title":"DANAA: Towards transferable attacks with double adversarial neuron attribution","created":"2023-10-16","cited_by_count":7,"area":null},{"id":"2402.00906","title":"BrainLeaks: On the Privacy-Preserving Properties of Neuromorphic Architectures against Model Inversion Attacks","created":"2024-02-01","cited_by_count":7,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2201.10349","title":"Roadmap for Cybersecurity in Autonomous Vehicles","created":"2022-01-19","cited_by_count":5,"area":null},{"id":"2308.09490","title":"Balancing Transparency and Risk: The Security and Privacy Risks of Open-Source Machine Learning Models","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2410.05159","title":"MIBench: A Comprehensive Framework for Benchmarking Model Inversion Attack and Defense","created":"2024-10-07","cited_by_count":5,"area":null},{"id":"2411.08460","title":"Trap-MID: Trapdoor-based Defense against Model Inversion Attacks","created":"2024-11-13","cited_by_count":5,"area":null},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2312.05264","title":"All Rivers Run to the Sea: Private Learning with Asymmetric Flows","created":"2023-12-05","cited_by_count":4,"area":null},{"id":"2410.05814","title":"Rank Matters: Understanding and Defending Model Inversion Attacks via Low-Rank Feature Filtering","created":"2024-10-08","cited_by_count":4,"area":null},{"id":"2503.07505","title":"From Centralized to Decentralized Federated Learning: Theoretical Insights, Privacy Preservation, and Robustness Challenges","created":"2025-03-10","cited_by_count":4,"area":null},{"id":"2201.08786","title":"FedComm: Federated Learning as a Medium for Covert Communication","created":"2022-01-21","cited_by_count":3,"area":null},{"id":"2502.19070","title":"A Sample-Level Evaluation and Generative Framework for Model Inversion Attacks","created":"2025-02-26","cited_by_count":3,"area":null},{"id":"2206.03391","title":"Data Stealing Attack on Medical Images: Is it Safe to Export Networks from Data Lakes?","created":"2022-06-07","cited_by_count":2,"area":null},{"id":"2303.09289","title":"Class Attribute Inference Attacks: Inferring Sensitive Class Information by Diffusion-Based Attribute Manipulations","created":"2023-03-16","cited_by_count":2,"area":null},{"id":"2402.06045","title":"Direct Acquisition Optimization for Low-Budget Active Learning","created":"2024-02-08","cited_by_count":2,"area":null},{"id":"2407.08127","title":"Prediction Exposes Your Face: Black-box Model Inversion via Prediction Alignment","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2409.01062","title":"Random Erasing vs. Model Inversion: A Promising Defense or a False Hope?","created":"2024-09-02","cited_by_count":2,"area":null},{"id":"2206.07018","title":"Turning a Curse into a Blessing: Enabling In-Distribution-Data-Free Backdoor Removal via Stabilized Model Inversion","created":"2022-06-14","cited_by_count":1,"area":null},{"id":"2404.13860","title":"Distributional Black-Box Model Inversion Attack with Multi-Agent Reinforcement Learning","created":"2024-04-22","cited_by_count":1,"area":null},{"id":"2505.03519","title":"Revisiting Model Inversion Evaluation: From Misleading Standards to Reliable Privacy Assessment","created":"2025-05-06","cited_by_count":1,"area":null},{"id":"2509.20177","title":"Generative Model Inversion Through the Lens of the Manifold Hypothesis","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2602.17614","title":"Guarding the Middle: Protecting Intermediate Representations in Federated Split Learning","created":"2026-02-19","cited_by_count":1,"area":null},{"id":"2310.15590","title":"Facial Data Minimization: Shallow Model as Your Privacy Filter","created":"2023-10-24","cited_by_count":0,"area":null},{"id":"2312.07040","title":"Rethinking Model Inversion Attacks With Patch-Wise Reconstruction","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2402.18027","title":"Breaking the Black-Box: Confidence-Guided Model Inversion Attack for Distribution Shift","created":"2024-02-28","cited_by_count":0,"area":null},{"id":"2403.10558","title":"Adaptive Hybrid Masking Strategy for Privacy-Preserving Face Recognition Against Model Inversion Attack","created":"2024-03-14","cited_by_count":0,"area":null},{"id":"2503.09306","title":"Revealing Unintentional Information Leakage in Low-Dimensional Facial Portrait Representations","created":"2025-03-12","cited_by_count":0,"area":null},{"id":"2503.16542","title":"Defending Against Gradient Inversion Attacks for Biomedical Images via Learnable Data Perturbation","created":"2025-03-19","cited_by_count":0,"area":null},{"id":"2504.06410","title":"PEEL the Layers and Find Yourself: Revisiting Inference-time Data Leakage for Residual Neural Networks","created":"2025-04-08","cited_by_count":0,"area":null},{"id":"2510.25687","title":"Model Inversion meets Cryptographic Fuzzy Extractors","created":"2025-10-29","cited_by_count":0,"area":null},{"id":"2511.12233","title":"Model Inversion Attack Against Deep Hashing","created":"2025-11-15","cited_by_count":0,"area":null},{"id":"2601.17360","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","created":"2026-01-24","cited_by_count":0,"area":null},{"id":"2607.12354","title":"Reducing information dependency does not cause training data privacy. Adversarially non-robust features do","created":"2026-07-14","cited_by_count":0,"area":null},{"id":"2610.00382","title":"On the Relationship between Model Quantization and Model Inversion Attacks","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}