{"total":93,"rows":[{"id":"2210.01504","title":"Knowledge Unlearning for Mitigating Privacy Risks in Language Models","created":"2022-10-04","cited_by_count":437,"area":"safety"},{"id":"2202.06539","title":"Deduplicating Training Data Mitigates Privacy Risks in Language Models","created":"2022-02-14","cited_by_count":314,"area":null},{"id":"2302.00539","title":"Analyzing Leakage of Personally Identifiable Information in Language Models","created":"2023-02-01","cited_by_count":285,"area":"safety"},{"id":"2309.15025","title":"Large Language Model Alignment: A Survey","created":"2023-09-26","cited_by_count":243,"area":"alignment"},{"id":"2205.12628","title":"Are Large Pre-Trained Language Models Leaking Your Personal Information?","created":"2022-05-25","cited_by_count":200,"area":null},{"id":"2202.05520","title":"What Does it Mean for a Language Model to Preserve Privacy?","created":"2022-02-11","cited_by_count":195,"area":null},{"id":"2402.07841","title":"Do Membership Inference Attacks Work on Large Language Models?","created":"2024-02-12","cited_by_count":195,"area":"safety"},{"id":"2310.06816","title":"Text Embeddings Reveal (Almost) As Much As Text","created":"2023-10-10","cited_by_count":192,"area":null},{"id":"2203.03929","title":"Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks","created":"2022-03-08","cited_by_count":175,"area":"safety"},{"id":"2409.00138","title":"PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Action","created":"2024-08-29","cited_by_count":171,"area":null},{"id":"2310.05694","title":"A Survey of Large Language Models for Healthcare: from Data, Technology, and Applications to Accountability and Ethics","created":"2023-10-09","cited_by_count":163,"area":null},{"id":"2311.04897","title":"Future Lens: Anticipating Subsequent Tokens from a Single Hidden State","created":"2023-11-08","cited_by_count":121,"area":null},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2302.08091","title":"Do We Still Need Clinical Language Models?","created":"2023-02-16","cited_by_count":98,"area":null},{"id":"2207.05521","title":"Federated Unlearning: How to Efficiently Erase a Client in FL?","created":"2022-07-12","cited_by_count":95,"area":"safety"},{"id":"2303.11504","title":"Language Model Behavior: A Comprehensive Survey","created":"2023-03-20","cited_by_count":92,"area":null},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2110.05006","title":"Pre-trained Language Models in Biomedical Domain: A Systematic Survey","created":"2021-10-11","cited_by_count":87,"area":null},{"id":"2210.07700","title":"Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Survey","created":"2022-10-14","cited_by_count":80,"area":null},{"id":"2302.04460","title":"Bag of Tricks for Training Data Extraction from Language Models","created":"2023-02-09","cited_by_count":70,"area":null},{"id":"2309.06746","title":"DP-Forward: Fine-tuning and Inference on Language Models with Differential Privacy in Forward Pass","created":"2023-09-13","cited_by_count":67,"area":"safety"},{"id":"2505.12540","title":"Harnessing the Universal Geometry of Embeddings","created":"2025-05-18","cited_by_count":55,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2209.01292","title":"Are Attribute Inference Attacks Just Imputation?","created":"2022-09-02","cited_by_count":49,"area":null},{"id":"2306.11547","title":"Event Stream GPT: A Data Pre-processing and Modeling Library for Generative, Pre-trained Transformers over Continuous-time Sequences of Complex Events","created":"2023-06-20","cited_by_count":46,"area":null},{"id":"2205.12506","title":"Memorization in NLP Fine-tuning Methods","created":"2022-05-25","cited_by_count":45,"area":null},{"id":"2305.16157","title":"Training Data Extraction From Pre-trained Language Models: A Survey","created":"2023-05-25","cited_by_count":45,"area":null},{"id":"2405.15012","title":"Extracting Prompts by Inverting LLM Outputs","created":"2024-05-23","cited_by_count":41,"area":null},{"id":"2408.12787","title":"LLM-PBE: Assessing Data Privacy in Large Language Models","created":"2024-08-23","cited_by_count":41,"area":null},{"id":"2310.18362","title":"SoK: Memorization in General-Purpose Large Language Models","created":"2023-10-24","cited_by_count":37,"area":null},{"id":"2307.04401","title":"Ethicist: Targeted Training Data Extraction Through Loss Smoothed Soft Prompting and Calibrated Confidence Estimation","created":"2023-07-10","cited_by_count":36,"area":null},{"id":"2305.14888","title":"Privacy Implications of Retrieval-Based Language Models","created":"2023-05-24","cited_by_count":32,"area":null},{"id":"2209.10505","title":"Text Revealer: Private Text Reconstruction via Model Inversion Attacks against Transformers","created":"2022-09-21","cited_by_count":31,"area":null},{"id":"2310.01424","title":"Identifying and Mitigating Privacy Risks Stemming from Language Models: A Survey","created":"2023-09-27","cited_by_count":30,"area":null},{"id":"2311.09060","title":"Do Localization Methods Actually Localize Memorized Data in LLMs? A Tale of Two Benchmarks","created":"2023-11-15","cited_by_count":29,"area":null},{"id":"2410.02650","title":"Undesirable Memorization in Large Language Models: A Survey","created":"2024-10-03","cited_by_count":29,"area":null},{"id":"2305.12707","title":"Quantifying Association Capabilities of Large Language Models and Its Implications on Privacy Leakage","created":"2023-05-22","cited_by_count":28,"area":null},{"id":"2401.02458","title":"Data-Centric Foundation Models in Computational Healthcare: A Survey","created":"2024-01-04","cited_by_count":27,"area":null},{"id":"2509.01396","title":"DeepResearch Arena: The First Exam of LLMs' Research Abilities via Seminar-Grounded Tasks","created":"2025-09-01","cited_by_count":24,"area":"agents"},{"id":"2401.07348","title":"Generative AI in EU Law: Liability, Privacy, Intellectual Property, and Cybersecurity","created":"2024-01-14","cited_by_count":21,"area":null},{"id":"2308.06294","title":"Enhancing Phenotype Recognition in Clinical Notes Using Large Language Models: PhenoBCBERT and PhenoGPT","created":"2023-08-11","cited_by_count":18,"area":null},{"id":"2305.15008","title":"Are Chatbots Ready for Privacy-Sensitive Applications? An Investigation into Input Regurgitation and Prompt-Induced Sanitization","created":"2023-05-24","cited_by_count":17,"area":null},{"id":"2406.10218","title":"Semantic Membership Inference Attack against Large Language Models","created":"2024-06-14","cited_by_count":17,"area":"safety"},{"id":"2206.02696","title":"Learning to Ask Like a Physician","created":"2022-06-06","cited_by_count":16,"area":null},{"id":"2302.04725","title":"Lightweight Transformers for Clinical Natural Language Processing","created":"2023-02-09","cited_by_count":15,"area":"distill"},{"id":"2307.10476","title":"What can we learn from Data Leakage and Unlearning for Law?","created":"2023-07-19","cited_by_count":15,"area":"safety"},{"id":"2307.16680","title":"On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook","created":"2023-07-31","cited_by_count":15,"area":"diffusion"},{"id":"2305.08596","title":"DarkBERT: A Language Model for the Dark Side of the Internet","created":"2023-05-15","cited_by_count":13,"area":null},{"id":"2205.10228","title":"You Don't Know My Favorite Color: Preventing Dialogue Representations from Revealing Speakers' Private Personas","created":"2022-04-26","cited_by_count":11,"area":null},{"id":"2206.04591","title":"Privacy Leakage in Text Classification: A Data Extraction Approach","created":"2022-06-09","cited_by_count":10,"area":null},{"id":"2305.05973","title":"Synthetic Query Generation for Privacy-Preserving Deep Retrieval Systems using Differentially Private Language Models","created":"2023-05-10","cited_by_count":10,"area":null},{"id":"2312.07420","title":"FairSISA: Ensemble Post-Processing to Improve Fairness of Unlearning in LLMs","created":"2023-12-12","cited_by_count":10,"area":"safety"},{"id":"2502.15680","title":"Privacy Ripple Effects from Adding or Removing Personal Information in Language Model Training","created":"2025-02-21","cited_by_count":10,"area":null},{"id":"2305.11348","title":"In the Name of Fairness: Assessing the Bias in Clinical Record De-identification","created":"2023-05-18","cited_by_count":9,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2207.10802","title":"Combing for Credentials: Active Pattern Extraction from Smart Reply","created":"2022-07-14","cited_by_count":7,"area":null},{"id":"2409.18222","title":"Trustworthy AI: Securing Sensitive Data in Large Language Models","created":"2024-09-26","cited_by_count":7,"area":null},{"id":"2502.05087","title":"Mitigating Unintended Memorization with LoRA in Federated Learning for LLMs","created":"2025-02-07","cited_by_count":7,"area":null},{"id":"2306.13789","title":"Deconstructing Classifiers: Towards A Data Reconstruction Attack Against Text Classification Models","created":"2023-06-23","cited_by_count":6,"area":null},{"id":"2507.07700","title":"Rethinking the Privacy of Text Embeddings: A Reproducibility Study of \"Text Embeddings Reveal (Almost) As Much As Text\"","created":"2025-07-10","cited_by_count":6,"area":null},{"id":"2510.16629","title":"On the Impossibility of Retrain Equivalence in Machine Unlearning","created":"2025-10-18","cited_by_count":6,"area":"safety"},{"id":"2505.15656","title":"Be Careful When Fine-tuning On Open-Source LLMs: Your Fine-tuning Data Could Be Secretly Stolen!","created":"2025-05-21","cited_by_count":5,"area":"safety"},{"id":"2510.12950","title":"An Investigation of Memorization Risk in Healthcare Foundation Models","created":"2025-10-14","cited_by_count":5,"area":null},{"id":"2411.04388","title":"Unlearning in- vs. out-of-distribution data in LLMs under gradient-based method","created":"2024-11-07","cited_by_count":4,"area":"safety"},{"id":"2605.23158","title":"What Does the Server See? Understanding Privacy Leakage from Large Language Models in Split Inference","created":"2026-05-22","cited_by_count":4,"area":null},{"id":"2303.13451","title":"Development and validation of a natural language processing algorithm to pseudonymize documents in the context of a clinical data warehouse","created":"2023-03-23","cited_by_count":3,"area":null},{"id":"2401.14931","title":"Do LLMs Dream of Ontologies?","created":"2024-01-26","cited_by_count":3,"area":null},{"id":"2601.14298","title":"Guardrails for trust, safety, and ethical development and deployment of Large Language Models (LLM)","created":"2026-01-16","cited_by_count":3,"area":null},{"id":"2209.02022","title":"How Much User Context Do We Need? Privacy by Design in Mental Health NLP Application","created":"2022-09-05","cited_by_count":2,"area":null},{"id":"2404.17143","title":"Quantifying Memorization and Detecting Training Data of Pre-trained Language Models using Japanese Newspaper","created":"2024-04-26","cited_by_count":2,"area":null},{"id":"2409.07415","title":"SoK: Security and Privacy Risks of Healthcare AI","created":"2024-09-11","cited_by_count":2,"area":null},{"id":"2412.12040","title":"How Private are Language Models in Abstractive Summarization?","created":"2024-12-16","cited_by_count":2,"area":null},{"id":"2212.03749","title":"Memorization of Named Entities in Fine-tuned BERT Models","created":"2022-12-07","cited_by_count":1,"area":null},{"id":"2310.03232","title":"Deep Representations of First-person Pronouns for Prediction of Depression Symptom Severity","created":"2023-10-05","cited_by_count":1,"area":null},{"id":"2411.07070","title":"On Active Privacy Auditing in Supervised Fine-tuning for White-Box Language Models","created":"2024-11-11","cited_by_count":1,"area":null},{"id":"2510.08813","title":"The Model's Language Matters: A Comparative Privacy Analysis of LLMs","created":"2025-10-09","cited_by_count":1,"area":null},{"id":"2510.21322","title":"Leverage Unlearning to Sanitize LLMs","created":"2025-10-24","cited_by_count":1,"area":"safety"},{"id":"2105.02746","title":"Introducing Information Retrieval for Biomedical Informatics Students","created":"2021-05-06","cited_by_count":0,"area":null},{"id":"2201.00965","title":"Semantics-Preserved Distortion for Personal Privacy Protection in Information Management","created":"2022-01-04","cited_by_count":0,"area":null},{"id":"2402.12189","title":"Amplifying Training Data Exposure through Fine-Tuning with Pseudo-Labeled Memberships","created":"2024-02-19","cited_by_count":0,"area":"safety"},{"id":"2403.18205","title":"Exploring the Privacy Protection Capabilities of Chinese Large Language Models","created":"2024-03-27","cited_by_count":0,"area":null},{"id":"2406.13947","title":"AspirinSum: an Aspect-based utility-preserved de-identification Summarization framework","created":"2024-06-20","cited_by_count":0,"area":null},{"id":"2501.02407","title":"Towards the Anonymization of the Language Modeling","created":"2025-01-05","cited_by_count":0,"area":null},{"id":"2505.06284","title":"DMRL: Data- and Model-aware Reward Learning for Data Extraction","created":"2025-05-07","cited_by_count":0,"area":"alignment"},{"id":"2507.10582","title":"Transforming Sensitive Documents into Quantitative Data: An AI-Based Preprocessing Toolchain for Structured and Privacy-Conscious Analysis","created":"2025-07-11","cited_by_count":0,"area":null},{"id":"2509.21192","title":"GEP: A GCG-Based method for extracting personally identifiable information from chatbots built on small language models","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2511.11836","title":"Securing Generative AI in Healthcare: A Zero-Trust Architecture Powered by Confidential Computing on Google Cloud","created":"2025-11-14","cited_by_count":0,"area":null},{"id":"2603.03054","title":"PrivMedChat: End-to-End Differentially Private RLHF for Medical Dialogue Systems","created":"2026-03-03","cited_by_count":0,"area":"alignment"},{"id":"2604.27426","title":"Secret Stealing Attacks on Local LLM Fine-Tuning through Supply-Chain Model Code Backdoors","created":"2026-04-30","cited_by_count":0,"area":"safety"},{"id":"2605.06423","title":"Pop Quiz Attack: Black-box Membership Inference Attacks Against Large Language Models","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2606.09590","title":"Clinically Grounded Privacy Evaluation of Medical LMs","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2606.10066","title":"A Controlled Audit of Pretraining Contamination in Public Medical Vision-Language Benchmarks","created":"2026-06-08","cited_by_count":0,"area":"mllm"},{"id":"2608.03172","title":"Surrogate Substitution Preserves PHI Detectability: A Multi-Detector Equivalence Study","created":"2026-08-04","cited_by_count":0,"area":null}],"next_cursor":null}