{"total":84,"rows":[{"id":"2209.02299","title":"A Survey of Machine Unlearning","created":"2022-09-06","cited_by_count":312,"area":"safety"},{"id":"2109.13398","title":"Unrolling SGD: Understanding Factors Influencing Machine Unlearning","created":"2021-09-27","cited_by_count":279,"area":"safety"},{"id":"2209.00626","title":"The Alignment Problem from a Deep Learning Perspective","created":"2022-08-30","cited_by_count":258,"area":null},{"id":"2110.11891","title":"On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning","created":"2021-10-22","cited_by_count":171,"area":"safety"},{"id":"2308.07061","title":"Machine Unlearning: Solutions and Challenges","created":"2023-08-14","cited_by_count":93,"area":"safety"},{"id":"2205.07424","title":"Trustworthy Graph Neural Networks: Aspects, Methods and Trends","created":"2022-05-16","cited_by_count":89,"area":null},{"id":"2106.04690","title":"Handcrafted Backdoors in Deep Neural Networks","created":"2021-06-08","cited_by_count":63,"area":null},{"id":"2202.08602","title":"Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations","created":"2022-02-17","cited_by_count":61,"area":null},{"id":"2209.09024","title":"Dataset Inference for Self-Supervised Models","created":"2022-09-16","cited_by_count":36,"area":null},{"id":"2312.04828","title":"HuRef: HUman-REadable Fingerprint for Large Language Models","created":"2023-12-08","cited_by_count":34,"area":null},{"id":"2205.07890","title":"On the Difficulty of Defending Self-Supervised Learning against Model Extraction","created":"2022-05-16","cited_by_count":22,"area":null},{"id":"2307.00682","title":"Tools for Verifying Neural Models' Training Data","created":"2023-07-02","cited_by_count":22,"area":null},{"id":"2201.09243","title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work","created":"2022-01-23","cited_by_count":21,"area":null},{"id":"2303.11341","title":"What does it take to catch a Chinchilla? Verifying Rules on Large-Scale Neural Network Training via Compute Monitoring","created":"2023-03-20","cited_by_count":21,"area":null},{"id":"2108.09454","title":"\"Adversarial Examples\" for Proof-of-Learning","created":"2021-08-21","cited_by_count":20,"area":null},{"id":"2307.16273","title":"zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training","created":"2023-07-30","cited_by_count":20,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2301.04017","title":"Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregation","created":"2023-01-09","cited_by_count":16,"area":null},{"id":"2402.02675","title":"Verifiable evaluations of machine learning models using zkSNARKs","created":"2024-02-05","cited_by_count":16,"area":null},{"id":"2210.11334","title":"Proof of Unlearning: Definitions and Instantiation","created":"2022-10-20","cited_by_count":15,"area":"safety"},{"id":"2301.04006","title":"IronForge: An Open, Secure, Fair, Decentralized Federated Learning","created":"2023-01-07","cited_by_count":15,"area":null},{"id":"2209.00939","title":"An Introduction to Machine Unlearning","created":"2022-09-02","cited_by_count":13,"area":"safety"},{"id":"2208.03567","title":"Proof-of-Learning is Currently More Broken Than You Think","created":"2022-08-06","cited_by_count":12,"area":null},{"id":"2307.00310","title":"Gradients Look Alike: Sensitivity is Often Overestimated in DP-SGD","created":"2023-07-01","cited_by_count":11,"area":null},{"id":"2506.06112","title":"Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness","created":"2025-06-06","cited_by_count":11,"area":"safety"},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2501.15509","title":"FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint","created":"2025-01-26","cited_by_count":10,"area":null},{"id":"2210.00108","title":"ImpNet: Imperceptible and blackbox-undetectable backdoors in compiled neural networks","created":"2022-09-30","cited_by_count":9,"area":null},{"id":"2305.04507","title":"FedZKP: Federated Model Ownership Verification with Zero-knowledge Proof","created":"2023-05-08","cited_by_count":9,"area":null},{"id":"2502.19405","title":"Verde: Verification via Refereed Delegation for Machine Learning Programs","created":"2025-02-26","cited_by_count":9,"area":null},{"id":"2210.13631","title":"On the Robustness of Dataset Inference","created":"2022-10-24","cited_by_count":8,"area":null},{"id":"2309.01837","title":"Delegating Data Collection in Decentralized Machine Learning","created":"2023-09-04","cited_by_count":8,"area":null},{"id":"2506.15115","title":"Towards Reliable Forgetting: A Survey on Machine Unlearning Verification","created":"2025-06-18","cited_by_count":8,"area":"safety"},{"id":"2403.09603","title":"Optimistic Verifiable Training by Controlling Hardware Nondeterminism","created":"2024-03-14","cited_by_count":7,"area":"safety"},{"id":"2412.08897","title":"Neural Interactive Proofs","created":"2024-12-12","cited_by_count":7,"area":null},{"id":"2412.12836","title":"A Survey on Recommendation Unlearning: Fundamentals, Taxonomy, Evaluation, and Open Questions","created":"2024-12-17","cited_by_count":7,"area":null},{"id":"2306.14043","title":"Machine Learning needs Better Randomness Standards: Randomised Smoothing and PRNG-based attacks","created":"2023-06-24","cited_by_count":6,"area":"safety"},{"id":"2403.12830","title":"Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Approximate Unlearning Completeness","created":"2024-03-19","cited_by_count":6,"area":"safety"},{"id":"2411.17461","title":"SoK: Blockchain-Based Decentralized AI (DeAI)","created":"2024-11-26","cited_by_count":6,"area":null},{"id":"2308.09552","title":"Attesting Distributional Properties of Training Data for Machine Learning","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2309.11013","title":"ModelGiF: Gradient Fields for Model Functional Distance","created":"2023-09-20","cited_by_count":5,"area":null},{"id":"2303.03648","title":"Can Membership Inferencing be Refuted?","created":"2023-03-07","cited_by_count":4,"area":"safety"},{"id":"2306.01431","title":"On Knowledge Editing in Federated Learning: Perspectives, Challenges, and Future Directions","created":"2023-06-02","cited_by_count":4,"area":null},{"id":"2310.01959","title":"Beyond Labeling Oracles: What does it mean to steal ML models?","created":"2023-10-03","cited_by_count":4,"area":null},{"id":"2404.06077","title":"Is Your AI Truly Yours? Leveraging Blockchain for Copyrights, Provenance, and Lineage","created":"2024-04-09","cited_by_count":4,"area":null},{"id":"2404.09005","title":"Proof-of-Learning with Incentive Security","created":"2024-04-13","cited_by_count":4,"area":null},{"id":"2411.06611","title":"vTune: Verifiable Fine-Tuning for LLMs Through Backdooring","created":"2024-11-10","cited_by_count":4,"area":"safety"},{"id":"2412.14566","title":"AIArena: A Blockchain-Based Decentralized AI Training Platform","created":"2024-12-19","cited_by_count":4,"area":null},{"id":"2505.18786","title":"Leveraging Per-Instance Privacy for Machine Unlearning","created":"2025-05-24","cited_by_count":4,"area":"safety"},{"id":"2307.02140","title":"Towards Open Federated Learning Platforms: Survey and Vision from Technical and Legal Perspectives","created":"2023-07-05","cited_by_count":3,"area":null},{"id":"2505.21684","title":"Incentivizing Permissionless Distributed Learning of LLMs","created":"2025-05-27","cited_by_count":3,"area":null},{"id":"2510.15106","title":"PoTS: Proof-of-Training-Steps for Backdoor Detection in Large Language Models","created":"2025-10-16","cited_by_count":3,"area":"safety"},{"id":"2410.00059","title":"IDEA: An Inverse Domain Expert Adaptation Based Active DNN IP Protection Method","created":"2024-09-29","cited_by_count":2,"area":null},{"id":"2410.04397","title":"Towards Understanding and Enhancing Security of Proof-of-Training for DNN Model Ownership Verification","created":"2024-10-06","cited_by_count":2,"area":null},{"id":"2503.00065","title":"ADAGE: Active Defenses Against GNN Extraction","created":"2025-02-27","cited_by_count":2,"area":null},{"id":"2510.16830","title":"Verifiable Fine-Tuning for LLMs: Zero-Knowledge Training Proofs Bound to Data Provenance and Policy","created":"2025-10-19","cited_by_count":2,"area":null},{"id":"2412.10537","title":"VerifiableFL: Verifiable Claims for Federated Learning using Exclaves","created":"2024-12-13","cited_by_count":1,"area":null},{"id":"2504.00170","title":"Backdoor Detection through Replicated Execution of Outsourced Training","created":"2025-03-31","cited_by_count":1,"area":null},{"id":"2504.14798","title":"RUB: Evaluating Residual Knowledge in Unlearned Models","created":"2025-04-21","cited_by_count":1,"area":"safety"},{"id":"2510.16028","title":"TAO: Tolerance-Aware Optimistic Verification for Floating-Point Neural Networks","created":"2025-10-15","cited_by_count":1,"area":null},{"id":"2609.09219","title":"Scores Alone Do Not Prove Discovery: The Discovery Certification Protocol for Auditing AI Research Agents","created":"2026-09-07","cited_by_count":1,"area":null},{"id":"2609.17380","title":"OPEN-1B: A Fully Auditable Training Run","created":"2026-09-15","cited_by_count":1,"area":null},{"id":"2308.16730","title":"Proof of Deep Learning: Approaches, Challenges, and Future Directions","created":"2023-08-31","cited_by_count":0,"area":null},{"id":"2401.05895","title":"Binary Linear Tree Commitment-based Ownership Protection for Distributed Machine Learning","created":"2024-01-11","cited_by_count":0,"area":null},{"id":"2405.04108","title":"A2-DIDM: Privacy-preserving Accumulator-enabled Auditing for Distributed Identity of DNN Model","created":"2024-05-07","cited_by_count":0,"area":null},{"id":"2406.02600","title":"Data Quality in Edge Machine Learning: A State-of-the-Art Survey","created":"2024-06-01","cited_by_count":0,"area":null},{"id":"2505.12296","title":"PoLO: Proof-of-Learning and Proof-of-Ownership at Once with Chained Watermarking","created":"2025-05-18","cited_by_count":0,"area":null},{"id":"2505.24536","title":"CHIP: Chameleon Hash-based Irreversible Passport for Robust Deep Model Ownership Verification and Active Usage Control","created":"2025-05-30","cited_by_count":0,"area":"safety"},{"id":"2509.02391","title":"Gaming and Cooperation in Federated Learning: What Can Happen and How to Monitor It","created":"2025-09-02","cited_by_count":0,"area":null},{"id":"2601.18127","title":"The Limits of AI Data Transparency Policy: Three Disclosure Fallacies","created":"2026-01-26","cited_by_count":0,"area":null},{"id":"2602.05410","title":"Robust Federated Learning via Byzantine Filtering over Encrypted Updates","created":"2026-02-05","cited_by_count":0,"area":null},{"id":"2603.29688","title":"Client-Verifiable and Efficient Federated Unlearning in Low-Altitude Wireless Networks","created":"2026-03-31","cited_by_count":0,"area":"safety"},{"id":"2606.17123","title":"LineageMark: Multi-user White-box Watermarking for Contribution Tracing in Model Derivation Chains","created":"2026-06-15","cited_by_count":0,"area":"safety"},{"id":"2606.21045","title":"OVIG: Optimistic Verification of AI Training Integrity via Gradient Signals","created":"2026-06-19","cited_by_count":0,"area":null},{"id":"2607.04613","title":"Governed Individuation: Cryptographically Decoupling an Agent's Learning from Its Authority","created":"2026-07-06","cited_by_count":0,"area":null},{"id":"2607.06643","title":"The Power of Backdoor Absorption in Community Training","created":"2026-07-07","cited_by_count":0,"area":null},{"id":"2607.19490","title":"Integrity of peer-to-peer distributed LLM inference under malicious nodes","created":"2026-07-21","cited_by_count":0,"area":null},{"id":"2608.02774","title":"Privacy-Preserving AI Verification via Minimal Information Disclosure","created":"2026-08-03","cited_by_count":0,"area":null},{"id":"2608.02986","title":"Internalising the Identity Primitive: Cryptographic Individuality for an Autonomous Agent on a Public Blockchain","created":"2026-08-04","cited_by_count":0,"area":null},{"id":"2608.14929","title":"Training Leaves Traces: Centered Residual Signatures for Language Model Lineage Verification","created":"2026-08-14","cited_by_count":0,"area":null},{"id":"2609.09001","title":"Deposon: An Auditable, Conservation-Guaranteed, Game-Theoretically Tested Scattering Layer over LLM Reasoning Paths","created":"2026-09-08","cited_by_count":0,"area":"lr"},{"id":"2609.33915","title":"Training Witnesses: Trusting the Training without Trusting the Trainer","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2609.36117","title":"Why Backdooring Neural Networks is so Easy?","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.37011","title":"OPFL: Optimistic Verification of Federated Learning via Empirical Boundary","created":"2026-09-29","cited_by_count":0,"area":null}],"next_cursor":null}