{"total":60,"rows":[{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2302.03262","title":"Membership Inference Attacks against Diffusion Models","created":"2023-02-07","cited_by_count":86,"area":"diffusion"},{"id":"2201.08135","title":"Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challenges","created":"2022-01-20","cited_by_count":84,"area":null},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2109.06024","title":"Formalizing and Estimating Distribution Inference Risks","created":"2021-09-13","cited_by_count":43,"area":null},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2302.10637","title":"A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacy","created":"2023-02-21","cited_by_count":24,"area":null},{"id":"2403.09562","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","created":"2024-03-14","cited_by_count":23,"area":"safety"},{"id":"2209.01100","title":"Group Property Inference Attacks Against Graph Neural Networks","created":"2022-09-02","cited_by_count":21,"area":null},{"id":"2406.16565","title":"Noisy Neighbors: Efficient membership inference attacks against LLMs","created":"2024-06-24","cited_by_count":21,"area":"safety"},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2209.08541","title":"Distribution inference risks: Identifying and mitigating sources of leakage","created":"2022-09-18","cited_by_count":17,"area":null},{"id":"2212.07591","title":"Dissecting Distribution Inference","created":"2022-12-15","cited_by_count":15,"area":null},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2408.05131","title":"Range Membership Inference Attacks","created":"2024-08-09","cited_by_count":12,"area":"safety"},{"id":"2207.08367","title":"Protecting Global Properties of Datasets with Distribution Privacy Mechanisms","created":"2022-07-18","cited_by_count":11,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2206.04591","title":"Privacy Leakage in Text Classification: A Data Extraction Approach","created":"2022-06-09","cited_by_count":10,"area":null},{"id":"2303.11643","title":"Manipulating Transfer Learning for Property Inference","created":"2023-03-21","cited_by_count":8,"area":null},{"id":"2310.11970","title":"Quantifying Privacy Risks of Prompts in Visual Prompt Learning","created":"2023-10-18","cited_by_count":8,"area":"safety"},{"id":"2207.10802","title":"Combing for Credentials: Active Pattern Extraction from Smart Reply","created":"2022-07-14","cited_by_count":7,"area":null},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2303.02014","title":"Summary Statistic Privacy in Data Sharing","created":"2023-03-03","cited_by_count":6,"area":null},{"id":"2306.13789","title":"Deconstructing Classifiers: Towards A Data Reconstruction Attack Against Text Classification Models","created":"2023-06-23","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2402.18607","title":"Exploring Privacy and Fairness Risks in Sharing Diffusion Models: An Adversarial Perspective","created":"2024-02-28","cited_by_count":6,"area":"diffusion"},{"id":"2205.09986","title":"SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning","created":"2022-05-20","cited_by_count":5,"area":null},{"id":"2308.09552","title":"Attesting Distributional Properties of Training Data for Machine Learning","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2310.03838","title":"Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning","created":"2023-10-05","cited_by_count":5,"area":"safety"},{"id":"2404.16847","title":"State-of-the-Art Approaches to Enhancing Privacy Preservation of Machine Learning Datasets: A Survey","created":"2024-02-25","cited_by_count":5,"area":null},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2507.08983","title":"Exploiting Leaderboards for Large-Scale Distribution of Malicious Models","created":"2025-07-11","cited_by_count":5,"area":null},{"id":"2105.06300","title":"Privacy Inference Attacks and Defenses in Cloud-based Deep Neural Network: A Survey","created":"2021-05-13","cited_by_count":4,"area":null},{"id":"2306.05208","title":"PriSampler: Mitigating Property Inference of Diffusion Models","created":"2023-06-08","cited_by_count":4,"area":"diffusion"},{"id":"2506.10364","title":"Can We Infer Confidential Properties of Training Data from LLMs?","created":"2025-06-12","cited_by_count":4,"area":null},{"id":"2510.13451","title":"Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts","created":"2025-10-15","cited_by_count":4,"area":"safety"},{"id":"2106.03699","title":"Formalizing Distribution Inference Risks","created":"2021-06-07","cited_by_count":3,"area":null},{"id":"2406.10884","title":"Linkage on Security, Privacy and Fairness in Federated Learning: New Balances and New Perspectives","created":"2024-06-16","cited_by_count":3,"area":null},{"id":"2409.19417","title":"Subject Data Auditing via Source Inference Attack in Cross-Silo Federated Learning","created":"2024-09-28","cited_by_count":3,"area":null},{"id":"2411.03663","title":"Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approach","created":"2024-11-06","cited_by_count":3,"area":null},{"id":"2504.04033","title":"Disparate Privacy Vulnerability: Targeted Attribute Inference Attacks and Defenses","created":"2025-04-05","cited_by_count":3,"area":null},{"id":"2601.01966","title":"Refinement Provenance Inference: Detecting LLM-Refined Training Prompts from Model Behavior","created":"2026-01-05","cited_by_count":3,"area":null},{"id":"2506.19836","title":"Machine Learning with Privacy for Protected Attributes","created":"2025-06-24","cited_by_count":2,"area":null},{"id":"2205.08821","title":"Lessons Learned: Defending Against Property Inference Attacks","created":"2022-05-18","cited_by_count":1,"area":"safety"},{"id":"2210.01864","title":"Recycling Scraps: Improving Private Learning by Leveraging Intermediate Checkpoints","created":"2022-10-04","cited_by_count":1,"area":null},{"id":"2211.04157","title":"Inferring Class Label Distribution of Training Data from Classifiers: An Accuracy-Augmented Meta-Classifier Attack","created":"2022-11-08","cited_by_count":1,"area":null},{"id":"2411.03059","title":"Enhancing DP-SGD through Non-monotonous Adaptive Scaling Gradient Weight","created":"2024-11-05","cited_by_count":1,"area":null},{"id":"2507.00423","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","created":"2025-07-01","cited_by_count":1,"area":"safety"},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2303.12589","title":"Do Backdoors Assist Membership Inference Attacks?","created":"2023-03-22","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2402.00342","title":"Survey of Privacy Threats and Countermeasures in Federated Learning","created":"2024-02-01","cited_by_count":0,"area":null},{"id":"2406.02600","title":"Data Quality in Edge Machine Learning: A State-of-the-Art Survey","created":"2024-06-01","cited_by_count":0,"area":null},{"id":"2412.07575","title":"Defending Against Neural Network Model Inversion Attacks via Data Poisoning","created":"2024-12-10","cited_by_count":0,"area":"safety"},{"id":"2506.16460","title":"Black-Box Privacy Attacks on Shared Representations in Multitask Learning","created":"2025-06-19","cited_by_count":0,"area":null},{"id":"2606.10091","title":"SoK: Colluding Adversaries in Machine Learning Pipelines","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2607.15970","title":"Code-Poisoning Property Inference Attacks","created":"2026-07-17","cited_by_count":0,"area":null}],"next_cursor":null}