{"total":326,"rows":[{"id":"2112.00059","title":"Evaluating Gradient Inversion Attacks and Defenses in Federated Learning","created":"2021-11-30","cited_by_count":196,"area":null},{"id":"2206.07758","title":"Reconstructing Training Data from Trained Neural Networks","created":"2022-06-15","cited_by_count":133,"area":null},{"id":"2112.02918","title":"When the Curious Abandon Honesty: Federated Learning Is Not Private","created":"2021-12-06","cited_by_count":127,"area":null},{"id":"2210.09929","title":"Differentially Private Diffusion Models","created":"2022-10-18","cited_by_count":119,"area":"diffusion"},{"id":"2110.13057","title":"Robbing the Fed: Directly Obtaining Private Data in Federated Learning with Modified Models","created":"2021-10-25","cited_by_count":108,"area":null},{"id":"2110.14962","title":"Gradient Inversion with Generative Image Prior","created":"2021-10-28","cited_by_count":101,"area":null},{"id":"2112.12371","title":"DENSE: Data-Free One-Shot Federated Learning","created":"2021-12-23","cited_by_count":100,"area":null},{"id":"2205.07424","title":"Trustworthy Graph Neural Networks: Aspects, Methods and Trends","created":"2022-05-16","cited_by_count":89,"area":null},{"id":"2306.05980","title":"Federated Learning for Medical Image Analysis: A Survey","created":"2023-06-09","cited_by_count":78,"area":null},{"id":"2110.15122","title":"CAFE: Catastrophic Data Leakage in Vertical Federated Learning","created":"2021-10-26","cited_by_count":76,"area":null},{"id":"2202.00580","title":"Fishing for User Data in Large-Batch Federated Learning via Gradient Magnification","created":"2022-02-01","cited_by_count":73,"area":null},{"id":"2203.15696","title":"Auditing Privacy Defenses in Federated Learning via Generative Gradient Leakage","created":"2022-03-29","cited_by_count":72,"area":null},{"id":"2205.08514","title":"Recovering Private Text in Federated Learning of Language Models","created":"2022-05-17","cited_by_count":70,"area":null},{"id":"2110.04995","title":"The Skellam Mechanism for Differentially Private Federated Learning","created":"2021-10-11","cited_by_count":68,"area":null},{"id":"2111.07380","title":"Eluding Secure Aggregation in Federated Learning via Model Inconsistency","created":"2021-11-14","cited_by_count":67,"area":null},{"id":"2202.08827","title":"LAMP: Extracting Text from Gradients with Language Model Priors","created":"2022-02-17","cited_by_count":54,"area":null},{"id":"2201.12675","title":"Decepticons: Corrupted Transformers Breach Privacy in Federated Learning for Language Models","created":"2022-01-29","cited_by_count":53,"area":null},{"id":"2203.11894","title":"GradViT: Gradient Inversion of Vision Transformers","created":"2022-03-22","cited_by_count":53,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2404.03233","title":"Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning","created":"2024-04-04","cited_by_count":48,"area":"safety"},{"id":"2302.07225","title":"Bounding Training Data Reconstruction in DP-SGD","created":"2023-02-14","cited_by_count":46,"area":"safety"},{"id":"2308.04699","title":"GIFD: A Generative Gradient Inversion Method with Feature Domain Optimization","created":"2023-08-09","cited_by_count":45,"area":null},{"id":"2202.06924","title":"Do Gradient Inversion Attacks Make Federated Learning Unsafe?","created":"2022-02-14","cited_by_count":44,"area":null},{"id":"2203.10144","title":"Closing the Generalization Gap of Cross-silo Federated Medical Image Segmentation","created":"2022-03-18","cited_by_count":42,"area":null},{"id":"2210.06659","title":"Structural Pruning via Latency-Saliency Knapsack","created":"2022-10-13","cited_by_count":41,"area":null},{"id":"2301.01299","title":"Recent Advances on Federated Learning: A Systematic Survey","created":"2023-01-03","cited_by_count":41,"area":null},{"id":"2110.09074","title":"Towards General Deep Leakage in Federated Learning","created":"2021-10-18","cited_by_count":40,"area":null},{"id":"2206.07284","title":"A Survey on Gradient Inversion: Attacks, Defenses and Future Directions","created":"2022-06-15","cited_by_count":40,"area":null},{"id":"2203.05816","title":"No Free Lunch Theorem for Security and Utility in Federated Learning","created":"2022-03-11","cited_by_count":39,"area":null},{"id":"2206.04055","title":"Gradient Obfuscation Gives a False Sense of Security in Federated Learning","created":"2022-06-08","cited_by_count":39,"area":null},{"id":"2206.12680","title":"Topology-aware Generalization of Decentralized SGD","created":"2022-06-25","cited_by_count":38,"area":null},{"id":"2206.07902","title":"On Privacy and Personalization in Cross-Silo Federated Learning","created":"2022-06-16","cited_by_count":36,"area":null},{"id":"2301.08227","title":"Diffusion-based Conditional ECG Generation with Structured State Space Models","created":"2023-01-19","cited_by_count":36,"area":null},{"id":"2303.12233","title":"LOKI: Large-scale Data Reconstruction Attack against Federated Learning through Model Manipulation","created":"2023-03-21","cited_by_count":36,"area":null},{"id":"2208.10888","title":"Joint Privacy Enhancement and Quantization in Federated Learning","created":"2022-08-23","cited_by_count":35,"area":null},{"id":"2111.04706","title":"Bayesian Framework for Gradient Leakage","created":"2021-11-08","cited_by_count":34,"area":null},{"id":"2205.12551","title":"Masked Jigsaw Puzzle: A Versatile Position Embedding for Vision Transformers","created":"2022-05-25","cited_by_count":33,"area":null},{"id":"2209.00230","title":"Trading Off Privacy, Utility and Efficiency in Federated Learning","created":"2022-09-01","cited_by_count":33,"area":null},{"id":"2112.15278","title":"Data-Free Knowledge Transfer: A Survey","created":"2021-12-31","cited_by_count":31,"area":"distill"},{"id":"2210.10880","title":"Learning to Invert: Simple Adaptive Attacks for Gradient Inversion in Federated Learning","created":"2022-10-19","cited_by_count":30,"area":null},{"id":"2404.01231","title":"Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models","created":"2024-04-01","cited_by_count":30,"area":null},{"id":"2209.05578","title":"Cocktail Party Attack: Breaking Aggregation-Based Privacy in Federated Learning using Independent Component Analysis","created":"2022-09-12","cited_by_count":29,"area":null},{"id":"2212.03714","title":"Reconstructing Training Data from Model Gradient, Provably","created":"2022-12-07","cited_by_count":27,"area":null},{"id":"2402.15070","title":"Enhancing One-Shot Federated Learning Through Data and Ensemble Co-Boosting","created":"2024-02-23","cited_by_count":27,"area":null},{"id":"2112.00734","title":"Personalized Federated Learning with Adaptive Batchnorm for Healthcare","created":"2021-12-01","cited_by_count":26,"area":null},{"id":"2206.12395","title":"Data Leakage in Federated Averaging","created":"2022-06-24","cited_by_count":26,"area":null},{"id":"2306.14123","title":"Privacy and Fairness in Federated Learning: on the Perspective of Trade-off","created":"2023-06-25","cited_by_count":26,"area":null},{"id":"2307.01827","title":"Deconstructing Data Reconstruction: Multiclass, Weight Decay and General Losses","created":"2023-07-04","cited_by_count":26,"area":null},{"id":"2107.03311","title":"RoFL: Robustness of Secure Federated Learning","created":"2021-07-07","cited_by_count":25,"area":null},{"id":"2210.08371","title":"Sketching for First Order Method: Efficient Algorithm for Low-Bandwidth Channel and Vulnerability","created":"2022-10-15","cited_by_count":25,"area":null},{"id":"2112.14087","title":"APRIL: Finding the Achilles' Heel on Privacy for Vision Transformers","created":"2021-12-28","cited_by_count":24,"area":null},{"id":"2205.14900","title":"FRAug: Tackling Federated Learning with Non-IID Features via Representation Augmentation","created":"2022-05-30","cited_by_count":24,"area":null},{"id":"2210.02912","title":"CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning","created":"2022-10-06","cited_by_count":24,"area":null},{"id":"2302.10637","title":"A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacy","created":"2023-02-21","cited_by_count":24,"area":null},{"id":"2205.08443","title":"On the (In)security of Peer-to-Peer Decentralized Machine Learning","created":"2022-05-17","cited_by_count":23,"area":null},{"id":"2307.10655","title":"A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency","created":"2023-07-20","cited_by_count":21,"area":null},{"id":"2311.05808","title":"Scale-MIA: A Scalable Model Inversion Attack against Secure Federated Learning via Latent Space Reconstruction","created":"2023-11-10","cited_by_count":21,"area":null},{"id":"2107.09898","title":"Defending against Reconstruction Attack in Vertical Federated Learning","created":"2021-07-21","cited_by_count":20,"area":null},{"id":"2406.01355","title":"Differentially Private Fine-Tuning of Diffusion Models","created":"2024-06-03","cited_by_count":20,"area":"diffusion"},{"id":"2208.02304","title":"How Much Privacy Does Federated Learning with Secure Aggregation Guarantee?","created":"2022-08-03","cited_by_count":19,"area":null},{"id":"2409.11585","title":"Advances in APPFL: A Comprehensive and Extensible Federated Learning Framework","created":"2024-09-17","cited_by_count":19,"area":null},{"id":"2112.13178","title":"Gradient Leakage Attack Resilient Deep Learning","created":"2021-12-25","cited_by_count":18,"area":null},{"id":"2203.11635","title":"Feature Distribution Matching for Federated Domain Generalization","created":"2022-03-22","cited_by_count":18,"area":null},{"id":"2106.06326","title":"TOHAN: A One-step Approach towards Few-shot Hypothesis Adaptation","created":"2021-06-11","cited_by_count":17,"area":null},{"id":"2111.00556","title":"Revealing and Protecting Labels in Distributed Training","created":"2021-10-31","cited_by_count":17,"area":null},{"id":"2302.12685","title":"Active Membership Inference Attack under Local Differential Privacy in Federated Learning","created":"2023-02-24","cited_by_count":17,"area":"safety"},{"id":"2111.00430","title":"Efficient passive membership inference attack in federated learning","created":"2021-10-31","cited_by_count":16,"area":"safety"},{"id":"2112.05409","title":"Batch Label Inference and Replacement Attacks in Black-Boxed Vertical Federated Learning","created":"2021-12-10","cited_by_count":16,"area":null},{"id":"2301.04017","title":"Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregation","created":"2023-01-09","cited_by_count":16,"area":null},{"id":"2308.10888","title":"Unlocking Accuracy and Fairness in Differentially Private Image Classification","created":"2023-08-21","cited_by_count":16,"area":null},{"id":"2204.13784","title":"AGIC: Approximate Gradient Inversion Attack on Federated Learning","created":"2022-04-28","cited_by_count":15,"area":null},{"id":"2208.10134","title":"Machine Learning with Confidential Computing: A Systematization of Knowledge","created":"2022-08-22","cited_by_count":15,"area":null},{"id":"2306.02913","title":"Decentralized SGD and Average-direction SAM are Asymptotically Equivalent","created":"2023-06-05","cited_by_count":15,"area":null},{"id":"2307.16680","title":"On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook","created":"2023-07-31","cited_by_count":15,"area":"diffusion"},{"id":"2308.05832","title":"FLShield: A Validation Based Federated Learning Framework to Defend Against Poisoning Attacks","created":"2023-08-10","cited_by_count":15,"area":null},{"id":"2312.04447","title":"Privacy-preserving quantum federated learning via gradient hiding","created":"2023-12-07","cited_by_count":15,"area":null},{"id":"2403.03945","title":"SPEAR:Exact Gradient Inversion of Batches in Federated Learning","created":"2024-03-06","cited_by_count":15,"area":null},{"id":"2407.06754","title":"Threats and Defenses in Federated Learning Life Cycle: A Comprehensive Survey and Challenges","created":"2024-07-09","cited_by_count":15,"area":null},{"id":"2305.06473","title":"Securing Distributed SGD against Gradient Leakage Threats","created":"2023-05-10","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2405.15586","title":"DAGER: Exact Gradient Inversion for Large Language Models","created":"2024-05-24","cited_by_count":14,"area":null},{"id":"2405.20725","title":"GI-NAS: Boosting Gradient Inversion Attacks Through Adaptive Neural Architecture Search","created":"2024-05-31","cited_by_count":14,"area":null},{"id":"2109.13012","title":"Federated Deep Learning with Bayesian Privacy","created":"2021-09-27","cited_by_count":13,"area":null},{"id":"2210.01785","title":"TabLeak: Tabular Data Leakage in Federated Learning","created":"2022-10-04","cited_by_count":13,"area":null},{"id":"2308.04761","title":"Feature Matching Data Synthesis for Non-IID Federated Learning","created":"2023-08-09","cited_by_count":13,"area":null},{"id":"2311.12850","title":"PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretraining","created":"2023-10-19","cited_by_count":13,"area":"diffusion"},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2405.03636","title":"The Federation Strikes Back: A Survey of Federated Learning Privacy Attacks, Defenses, Applications, and Policy Landscape","created":"2024-05-06","cited_by_count":13,"area":null},{"id":"2201.03169","title":"FedDTG:Federated Data-Free Knowledge Distillation via Three-Player Generative Adversarial Networks","created":"2022-01-10","cited_by_count":12,"area":"distill"},{"id":"2305.00312","title":"Optimizing Privacy, Utility and Efficiency in Constrained Multi-Objective Federated Learning","created":"2023-04-29","cited_by_count":12,"area":null},{"id":"2306.01356","title":"FedCIP: Federated Client Intellectual Property Protection with Traitor Tracking","created":"2023-06-02","cited_by_count":12,"area":"safety"},{"id":"2411.09973","title":"Establishing and Evaluating Trustworthy AI: Overview and Research Challenges","created":"2024-11-15","cited_by_count":12,"area":null},{"id":"2412.05186","title":"One-shot Federated Learning via Synthetic Distiller-Distillate Communication","created":"2024-12-06","cited_by_count":12,"area":null},{"id":"2208.06163","title":"Dropout is NOT All You Need to Prevent Gradient Leakage","created":"2022-08-12","cited_by_count":11,"area":null},{"id":"2209.05724","title":"Concealing Sensitive Samples against Gradient Leakage in Federated Learning","created":"2022-09-13","cited_by_count":11,"area":null},{"id":"2306.00127","title":"Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning","created":"2023-05-31","cited_by_count":11,"area":null},{"id":"2310.00222","title":"Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learning","created":"2023-09-30","cited_by_count":11,"area":"safety"},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2209.03175","title":"On the utility and protection of optimization with differential privacy and classic regularization techniques","created":"2022-09-07","cited_by_count":10,"area":null},{"id":"2209.03885","title":"A Framework for Evaluating Privacy-Utility Trade-off in Vertical Federated Learning","created":"2022-09-08","cited_by_count":10,"area":null}],"next_cursor":"100"}