{"total":54,"rows":[{"id":"2310.16789","title":"Detecting Pretraining Data from Large Language Models","created":"2023-10-25","cited_by_count":387,"area":null},{"id":"2202.06539","title":"Deduplicating Training Data Mitigates Privacy Risks in Language Models","created":"2022-02-14","cited_by_count":314,"area":null},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2404.02936","title":"Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Models","created":"2024-04-03","cited_by_count":103,"area":null},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2402.09910","title":"DE-COP: Detecting Copyrighted Content in Language Models Training Data","created":"2024-02-15","cited_by_count":74,"area":null},{"id":"2409.14781","title":"Pretraining Data Detection for Large Language Models: A Divergence-based Calibration Method","created":"2024-09-23","cited_by_count":55,"area":null},{"id":"2408.12787","title":"LLM-PBE: Assessing Data Privacy in Large Language Models","created":"2024-08-23","cited_by_count":41,"area":null},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2202.07623","title":"Defending against Reconstruction Attacks with R\\'enyi Differential Privacy","created":"2022-02-15","cited_by_count":32,"area":null},{"id":"2310.01424","title":"Identifying and Mitigating Privacy Risks Stemming from Language Models: A Survey","created":"2023-09-27","cited_by_count":30,"area":null},{"id":"2402.02823","title":"Evading Data Contamination Detection for Language Models is (too) Easy","created":"2024-02-05","cited_by_count":30,"area":null},{"id":"2410.22235","title":"Auditing $f$-Differential Privacy in One Run","created":"2024-10-29","cited_by_count":30,"area":null},{"id":"2406.01333","title":"Probing Language Models for Pre-training Data Detection","created":"2024-06-03","cited_by_count":25,"area":null},{"id":"2405.11930","title":"Data Contamination Calibration for Black-box LLMs","created":"2024-05-20","cited_by_count":24,"area":null},{"id":"2307.16273","title":"zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training","created":"2023-07-30","cited_by_count":20,"area":null},{"id":"2409.03363","title":"Con-ReCall: Detecting Pre-training Data in LLMs via Contrastive Decoding","created":"2024-09-05","cited_by_count":20,"area":null},{"id":"2304.13850","title":"Do SSL Models Have D\\'ej\\`a Vu? A Case of Unintended Memorization in Self-supervised Learning","created":"2023-04-26","cited_by_count":19,"area":null},{"id":"2210.13662","title":"Analyzing Privacy Leakage in Machine Learning via Multiple Hypothesis Testing: A Lesson From Fano","created":"2022-10-24","cited_by_count":17,"area":null},{"id":"2208.08270","title":"On the Privacy Effect of Data Enhancement via the Lens of Memorization","created":"2022-08-17","cited_by_count":15,"area":null},{"id":"2407.21248","title":"Adaptive Pre-training Data Detection for Large Language Models via Surprising Tokens","created":"2024-07-30","cited_by_count":11,"area":null},{"id":"2506.06108","title":"Synthetic Tabular Data: Methods, Attacks and Defenses","created":"2025-06-06","cited_by_count":9,"area":null},{"id":"2210.11049","title":"How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers","created":"2022-10-20","cited_by_count":8,"area":null},{"id":"2501.03941","title":"Synthetic Data Privacy Metrics","created":"2025-01-07","cited_by_count":8,"area":null},{"id":"2511.14045","title":"Auditing Data Membership in Reinforcement Learning With Verifiable Rewards","created":"2025-11-18","cited_by_count":8,"area":null},{"id":"2306.00133","title":"A Note On Interpreting Canary Exposure","created":"2023-05-31","cited_by_count":6,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2508.21146","title":"Privacy Auditing Synthetic Data Release through Local Likelihood Attacks","created":"2025-08-28","cited_by_count":5,"area":null},{"id":"2207.12779","title":"Reconciling Security and Communication Efficiency in Federated Learning","created":"2022-07-26","cited_by_count":4,"area":null},{"id":"2407.04981","title":"TRACE: TRansformer-based Attribution using Contrastive Embeddings in LLMs","created":"2024-07-06","cited_by_count":4,"area":null},{"id":"2509.18014","title":"Synth-MIA: A Testbed for Auditing Privacy Leakage in Tabular Data Synthesis","created":"2025-09-22","cited_by_count":4,"area":null},{"id":"2606.09401","title":"Benchmarking Empirical Privacy Protection for Adaptations of Large Language Models","created":"2026-06-08","cited_by_count":4,"area":null},{"id":"2305.12997","title":"Evaluating Privacy Leakage in Split Learning","created":"2023-05-22","cited_by_count":3,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2504.05651","title":"Measuring D\\'ej\\`a vu Memorization Efficiently","created":"2025-04-08","cited_by_count":2,"area":null},{"id":"2607.09692","title":"Reference-Based Distillation Detection in LLMs","created":"2026-06-19","cited_by_count":2,"area":null},{"id":"2211.04686","title":"Directional Privacy for Deep Learning","created":"2022-11-09","cited_by_count":1,"area":null},{"id":"2311.03075","title":"SoK: Memorisation in machine learning","created":"2023-11-06","cited_by_count":1,"area":null},{"id":"2404.08847","title":"LazyDP: Co-Designing Algorithm-Software for Scalable Training of Differentially Private Recommendation Models","created":"2024-04-12","cited_by_count":1,"area":null},{"id":"2412.11951","title":"The Impact of Generalization Techniques on the Interplay Among Privacy, Utility, and Fairness in Image Classification","created":"2024-12-16","cited_by_count":1,"area":null},{"id":"2503.13872","title":"Empirical Calibration and Metric Differential Privacy in Language Models","created":"2025-03-18","cited_by_count":1,"area":null},{"id":"2505.20095","title":"Spurious Privacy Leakage in Neural Networks","created":"2025-05-26","cited_by_count":1,"area":null},{"id":"2510.07304","title":"Cocoon: A System Architecture for Differentially Private Training with Correlated Noises","created":"2025-10-08","cited_by_count":1,"area":null},{"id":"2601.12922","title":"Your Privacy Depends on Others: Collusion Vulnerabilities in Individual Differential Privacy","created":"2026-01-19","cited_by_count":1,"area":null},{"id":"2606.31208","title":"Probing Memorization of Tabular In-Context Learning","created":"2026-06-30","cited_by_count":1,"area":null},{"id":"2212.04223","title":"Vicious Classifiers: Assessing Inference-time Data Reconstruction Risk in Edge Computing","created":"2022-12-08","cited_by_count":0,"area":null},{"id":"2510.23427","title":"PrivacyGuard: A Modular Framework for Privacy Auditing in Machine Learning","created":"2025-10-27","cited_by_count":0,"area":null},{"id":"2511.14084","title":"Observational Auditing of Label Privacy","created":"2025-11-18","cited_by_count":0,"area":null},{"id":"2511.15192","title":"As If We've Met Before: LLMs Exhibit Certainty in Recognizing Seen Files","created":"2025-11-19","cited_by_count":0,"area":null},{"id":"2601.06827","title":"PDR: A Plug-and-Play Positional Decay Framework for LLM Pre-training Data Detection","created":"2026-01-11","cited_by_count":0,"area":null},{"id":"2609.21888","title":"Detecting Pretraining Data in Large Language Models from a Free-Energy Perspective","created":"2026-09-18","cited_by_count":0,"area":null},{"id":"2609.22145","title":"Weak Ties, Strong Signals: Efficient Training Data Detection in Diffusion LLMs via Independent Token Sampling","created":"2026-08-26","cited_by_count":0,"area":null}],"next_cursor":null}