{"total":44,"rows":[{"id":"2204.13650","title":"Unlocking High-Accuracy Differentially Private Image Classification through Scale","created":"2022-04-28","cited_by_count":224,"area":null},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2209.01292","title":"Are Attribute Inference Attacks Just Imputation?","created":"2022-09-02","cited_by_count":49,"area":null},{"id":"2109.11429","title":"Robin Hood and Matthew Effects: Differential Privacy Has Disparate Impact on Synthetic Data","created":"2021-09-23","cited_by_count":48,"area":null},{"id":"2205.02973","title":"Large Scale Transfer Learning for Differentially Private Image Classification","created":"2022-05-06","cited_by_count":41,"area":null},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2310.07152","title":"No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device ML","created":"2023-10-11","cited_by_count":21,"area":null},{"id":"2105.12049","title":"Honest-but-Curious Nets: Sensitive Attributes of Private Inputs Can Be Secretly Coded into the Classifiers' Outputs","created":"2021-05-25","cited_by_count":18,"area":null},{"id":"2304.02782","title":"FACE-AUDITOR: Data Auditing in Facial Recognition Systems","created":"2023-04-05","cited_by_count":16,"area":null},{"id":"2410.16618","title":"SoK: Dataset Copyright Auditing in Machine Learning Systems","created":"2024-10-22","cited_by_count":15,"area":null},{"id":"2302.06975","title":"A Review of the Role of Causality in Developing Trustworthy AI Systems","created":"2023-02-14","cited_by_count":14,"area":null},{"id":"2305.05900","title":"DPMLBench: Holistic Evaluation of Differentially Private Machine Learning","created":"2023-05-10","cited_by_count":13,"area":null},{"id":"2205.03105","title":"LPGNet: Link Private Graph Networks for Node Classification","created":"2022-05-06","cited_by_count":12,"area":null},{"id":"2112.02230","title":"SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning","created":"2021-12-04","cited_by_count":10,"area":null},{"id":"2209.02902","title":"Defending Against Backdoor Attack on Graph Nerual Network by Explainability","created":"2022-09-07","cited_by_count":9,"area":null},{"id":"2208.05969","title":"Safety and Performance, Why not Both? Bi-Objective Optimized Model Compression toward AI Software Deployment","created":"2022-08-11","cited_by_count":8,"area":null},{"id":"2210.11049","title":"How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers","created":"2022-10-20","cited_by_count":8,"area":null},{"id":"2211.13403","title":"Differentially Private Image Classification from Features","created":"2022-11-24","cited_by_count":7,"area":null},{"id":"2403.02571","title":"DPAdapter: Improving Differentially Private Deep Learning through Noise Tolerance Pre-training","created":"2024-03-05","cited_by_count":7,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2209.01688","title":"On the Privacy Risks of Cell-Based NAS Architectures","created":"2022-09-04","cited_by_count":5,"area":null},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2211.11434","title":"Privacy in Practice: Private COVID-19 Detection in X-Ray Images (Extended Version)","created":"2022-11-21","cited_by_count":4,"area":null},{"id":"2403.01268","title":"Defending Against Data Reconstruction Attacks in Federated Learning: An Information Theory Approach","created":"2024-03-02","cited_by_count":4,"area":null},{"id":"2403.14641","title":"Testing autonomous vehicles and AI: perspectives and challenges from cybersecurity, transparency, robustness and fairness","created":"2024-02-21","cited_by_count":3,"area":null},{"id":"2405.12295","title":"Efficient Model-Stealing Attacks Against Inductive Graph Neural Networks","created":"2024-05-20","cited_by_count":3,"area":null},{"id":"2411.03022","title":"Flashy Backdoor: Real-world Environment Backdoor Attack on SNNs with DVS Cameras","created":"2024-11-05","cited_by_count":3,"area":null},{"id":"2411.09945","title":"TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models","created":"2024-11-15","cited_by_count":3,"area":null},{"id":"2512.15460","title":"From Risk to Resilience: Towards Assessing and Mitigating the Risk of Data Reconstruction Attacks in Federated Learning","created":"2025-12-17","cited_by_count":3,"area":null},{"id":"2105.13929","title":"Quantifying and Localizing Usable Information Leakage from Neural Network Gradients","created":"2021-05-28","cited_by_count":2,"area":null},{"id":"2209.06300","title":"PINCH: An Adversarial Extraction Attack Framework for Deep Learning Models","created":"2022-09-13","cited_by_count":2,"area":null},{"id":"2409.07415","title":"SoK: Security and Privacy Risks of Healthcare AI","created":"2024-09-11","cited_by_count":2,"area":null},{"id":"2503.06150","title":"Do Fairness Interventions Come at the Cost of Privacy: Evaluations for Binary Classifiers","created":"2025-03-08","cited_by_count":2,"area":null},{"id":"2510.19979","title":"SecureInfer: Heterogeneous TEE-GPU Architecture for Privacy-Critical Tensors for Large Language Model Deployment","created":"2025-10-22","cited_by_count":2,"area":null},{"id":"2501.16671","title":"Data-Free Model-Related Attacks: Unleashing the Potential of Generative AI","created":"2025-01-28","cited_by_count":1,"area":null},{"id":"2505.23792","title":"Zero-Trust Foundation Models: A New Paradigm for Secure and Collaborative Artificial Intelligence for Internet of Things","created":"2025-05-26","cited_by_count":1,"area":null},{"id":"2512.14439","title":"VICTOR: Dataset Copyright Auditing in Video Recognition Systems","created":"2025-12-16","cited_by_count":1,"area":null},{"id":"2205.12430","title":"Additive Logistic Mechanism for Privacy-Preserving Self-Supervised Learning","created":"2022-05-25","cited_by_count":0,"area":null},{"id":"2210.13028","title":"Generalised Likelihood Ratio Testing Adversaries through the Differential Privacy Lens","created":"2022-10-24","cited_by_count":0,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2503.06188","title":"Attackers Can Do Better: Over- and Understated Factors of Model Stealing Attacks","created":"2025-03-08","cited_by_count":0,"area":null},{"id":"2505.21792","title":"Multimodal Federated Learning: A Survey through the Lens of Different FL Paradigms","created":"2025-05-27","cited_by_count":0,"area":null},{"id":"2601.09460","title":"SoK: Enhancing Cryptographic Collaborative Learning with Differential Privacy","created":"2026-01-14","cited_by_count":0,"area":null}],"next_cursor":null}