{"total":73,"rows":[{"id":"2206.10469","title":"The Privacy Onion Effect: Memorization is Relative","created":"2022-06-21","cited_by_count":136,"area":null},{"id":"2308.07026","title":"AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learning","created":"2023-08-14","cited_by_count":103,"area":null},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2209.09024","title":"Dataset Inference for Self-Supervised Models","created":"2022-09-16","cited_by_count":36,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2209.06997","title":"M^4I: Multi-modal Models Membership Inference","created":"2022-09-15","cited_by_count":34,"area":"safety"},{"id":"2111.07608","title":"Property Inference Attacks Against GANs","created":"2021-11-15","cited_by_count":33,"area":"safety"},{"id":"2411.02902","title":"Membership Inference Attacks against Large Vision-Language Models","created":"2024-11-05","cited_by_count":33,"area":"mllm"},{"id":"2307.12280","title":"Downstream-agnostic Adversarial Examples","created":"2023-07-23","cited_by_count":32,"area":null},{"id":"2201.07513","title":"Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders","created":"2022-01-19","cited_by_count":31,"area":null},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2307.01610","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction","created":"2023-07-04","cited_by_count":29,"area":"safety"},{"id":"2305.13257","title":"Watermarking Text Data on Large Language Models for Dataset Copyright","created":"2023-05-22","cited_by_count":27,"area":"safety"},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2203.02077","title":"User-Level Membership Inference Attack against Metric Embedding Learning","created":"2022-03-04","cited_by_count":22,"area":"safety"},{"id":"2209.07341","title":"Does CLIP Know My Face?","created":"2022-09-15","cited_by_count":19,"area":null},{"id":"2401.12233","title":"Memorization in Self-Supervised Learning Improves Downstream Generalization","created":"2024-01-19","cited_by_count":18,"area":null},{"id":"2209.08615","title":"Membership Inference Attacks and Generalization: A Causal Perspective","created":"2022-09-18","cited_by_count":17,"area":"safety"},{"id":"2407.15100","title":"A General Framework for Data-Use Auditing of ML Models","created":"2024-07-21","cited_by_count":16,"area":null},{"id":"2306.01181","title":"TMI! Finetuned Models Leak Private Information from their Pretraining Data","created":"2023-06-01","cited_by_count":14,"area":null},{"id":"2309.07983","title":"SLMIA-SR: Speaker-Level Membership Inference Attacks against Speaker Recognition Systems","created":"2023-09-14","cited_by_count":14,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2207.12535","title":"Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning","created":"2022-07-25","cited_by_count":10,"area":"safety"},{"id":"2404.02462","title":"A Unified Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2024-04-03","cited_by_count":9,"area":"safety"},{"id":"2409.19069","title":"Localizing Memorization in SSL Vision Encoders","created":"2024-09-27","cited_by_count":9,"area":null},{"id":"2310.11970","title":"Quantifying Privacy Risks of Prompts in Visual Prompt Learning","created":"2023-10-18","cited_by_count":8,"area":"safety"},{"id":"2405.14517","title":"TUNI: A Textual Unimodal Detector for Identity Inference in CLIP Models","created":"2024-05-23","cited_by_count":8,"area":null},{"id":"2207.12263","title":"SecretGen: Privacy Recovery on Pre-Trained Models via Distribution Discrimination","created":"2022-07-25","cited_by_count":7,"area":null},{"id":"2306.08173","title":"Safeguarding Data in Multimodal AI: A Differentially Private Approach to CLIP Training","created":"2023-06-13","cited_by_count":7,"area":null},{"id":"2403.02571","title":"DPAdapter: Improving Differentially Private Deep Learning through Noise Tolerance Pre-training","created":"2024-03-05","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2402.05453","title":"Mitigating Privacy Risk in Membership Inference by Convex-Concave Loss","created":"2024-02-08","cited_by_count":6,"area":"safety"},{"id":"2205.06469","title":"l-Leaks: Membership Inference Attacks with Logits","created":"2022-05-13","cited_by_count":5,"area":"safety"},{"id":"2209.01688","title":"On the Privacy Risks of Cell-Based NAS Architectures","created":"2022-09-04","cited_by_count":5,"area":null},{"id":"2310.08320","title":"Defending Our Privacy With Backdoors","created":"2023-10-12","cited_by_count":4,"area":null},{"id":"2401.00996","title":"Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment","created":"2024-01-02","cited_by_count":4,"area":"safety"},{"id":"2501.10985","title":"GRID: Protecting Training Graph from Link Stealing Attacks on GNN Models","created":"2025-01-19","cited_by_count":4,"area":null},{"id":"2502.07830","title":"Captured by Captions: On Memorization and its Mitigation in CLIP Models","created":"2025-02-11","cited_by_count":4,"area":null},{"id":"2503.22413","title":"Instance-Level Data-Use Auditing of Visual ML Models","created":"2025-03-28","cited_by_count":4,"area":"safety"},{"id":"2511.01952","title":"Black-Box Membership Inference Attack for LVLMs via Prior Knowledge-Calibrated Memory Probing","created":"2025-11-03","cited_by_count":4,"area":"mllm"},{"id":"2307.06123","title":"SoK: Comparing Different Membership Inference Attacks with a Comprehensive Benchmark","created":"2023-07-12","cited_by_count":3,"area":"safety"},{"id":"2409.19413","title":"Membership Privacy Evaluation in Deep Spiking Neural Networks","created":"2024-09-28","cited_by_count":3,"area":null},{"id":"2506.05743","title":"When Better Features Mean Greater Risks: The Performance-Privacy Trade-Off in Contrastive Learning","created":"2025-06-06","cited_by_count":3,"area":"safety"},{"id":"2506.12340","title":"Image Corruption-Inspired Membership Inference Attacks against Large Vision-Language Models","created":"2025-06-14","cited_by_count":3,"area":"mllm"},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2408.06825","title":"Membership Inference Attack Against Masked Image Modeling","created":"2024-08-13","cited_by_count":2,"area":"safety"},{"id":"2503.06150","title":"Do Fairness Interventions Come at the Cost of Privacy: Evaluations for Binary Classifiers","created":"2025-03-08","cited_by_count":2,"area":null},{"id":"2503.07482","title":"How does Bayesian Sampling help Membership Inference Attacks?","created":"2025-03-10","cited_by_count":2,"area":"safety"},{"id":"2504.05651","title":"Measuring D\\'ej\\`a vu Memorization Efficiently","created":"2025-04-08","cited_by_count":2,"area":null},{"id":"2506.04556","title":"BESA: Boosting Encoder Stealing Attack with Perturbation Recovery","created":"2025-06-05","cited_by_count":2,"area":null},{"id":"2405.07317","title":"Machine Unlearning in Contrastive Learning","created":"2024-05-12","cited_by_count":1,"area":"safety"},{"id":"2405.15140","title":"Better Membership Inference Privacy Measurement through Discrepancy","created":"2024-05-24","cited_by_count":1,"area":"safety"},{"id":"2406.03603","title":"MUC: Machine Unlearning for Contrastive Learning with Black-box Evaluation","created":"2024-06-05","cited_by_count":1,"area":"safety"},{"id":"2505.09166","title":"An Exploration of Default Images in Text-to-Image Generation","created":"2025-05-14","cited_by_count":1,"area":null},{"id":"2505.10351","title":"A Unified and Scalable Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2025-05-15","cited_by_count":1,"area":"safety"},{"id":"2512.14439","title":"VICTOR: Dataset Copyright Auditing in Video Recognition Systems","created":"2025-12-16","cited_by_count":1,"area":null},{"id":"2601.03429","title":"DeepLeak: Privacy Enhancing Hardening of Model Explanations Against Membership Leakage","created":"2026-01-06","cited_by_count":1,"area":null},{"id":"2603.01053","title":"Turning Black Box into White Box: Dataset Distillation Leaks","created":"2026-03-01","cited_by_count":1,"area":null},{"id":"2310.03104","title":"Differentially Private Optimization for Non-Decomposable Objective Functions","created":"2023-10-04","cited_by_count":0,"area":null},{"id":"2312.00855","title":"Refine, Discriminate and Align: Stealing Encoders via Sample-Wise Prototypes and Multi-Relational Extraction","created":"2023-12-01","cited_by_count":0,"area":null},{"id":"2404.16850","title":"Membership Information Leakage in Federated Contrastive Learning","created":"2024-03-06","cited_by_count":0,"area":"safety"},{"id":"2408.02814","title":"Pre-trained Encoder Inference: Revealing Upstream Encoders In Downstream Machine Learning Services","created":"2024-08-05","cited_by_count":0,"area":null},{"id":"2505.03490","title":"A new membership inference attack that spots memorization in generative and predictive models: Loss-Based with Reference Model algorithm (LBRM)","created":"2025-05-06","cited_by_count":0,"area":"safety"},{"id":"2506.16460","title":"Black-Box Privacy Attacks on Shared Representations in Multitask Learning","created":"2025-06-19","cited_by_count":0,"area":null},{"id":"2603.15842","title":"Informationally Compressive Anonymization: Non-Degrading Sensitive Input Protection for Privacy-Preserving Supervised Machine Learning","created":"2026-03-16","cited_by_count":0,"area":null},{"id":"2603.24213","title":"Uncovering Memorization in Timeseries Imputation models: LBRM Membership Inference and its link to attribute Leakage","created":"2026-03-25","cited_by_count":0,"area":"safety"},{"id":"2605.12574","title":"DistractMIA: Black-Box Membership Inference on Vision-Language Models via Semantic Distraction","created":"2026-05-12","cited_by_count":0,"area":"mllm"},{"id":"2605.17341","title":"Single-Sample Black-Box Membership Inference Attack against Vision-Language Models via Cross-modal Semantic Alignment","created":"2026-05-17","cited_by_count":0,"area":"mllm"},{"id":"2607.13541","title":"When T2I Synthetic Data Backfires: Amplified Privacy Risks in Real-Synthetic Mix Training","created":"2026-07-15","cited_by_count":0,"area":null},{"id":"2607.15084","title":"Quantifying Training Membership Information in the Hyperspherical Embedding Geometry of Face Recognition Models","created":"2026-07-16","cited_by_count":0,"area":null},{"id":"2610.17332","title":"COMPASS: Membership Inference Attack Against Vision Large Language Models via Adaptive Noise Calibration","created":"2026-10-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}