{"total":147,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2310.16789","title":"Detecting Pretraining Data from Large Language Models","created":"2023-10-25","cited_by_count":387,"area":null},{"id":"2202.06539","title":"Deduplicating Training Data Mitigates Privacy Risks in Language Models","created":"2022-02-14","cited_by_count":314,"area":null},{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248,"area":"safety"},{"id":"2402.07841","title":"Do Membership Inference Attacks Work on Large Language Models?","created":"2024-02-12","cited_by_count":195,"area":"safety"},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2404.02936","title":"Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Models","created":"2024-04-03","cited_by_count":103,"area":null},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2208.14933","title":"Membership Inference Attacks by Exploiting Loss Trajectory","created":"2022-08-31","cited_by_count":101,"area":"safety"},{"id":"2311.06062","title":"Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibration","created":"2023-11-10","cited_by_count":98,"area":"safety"},{"id":"2402.09910","title":"DE-COP: Detecting Copyrighted Content in Language Models Training Data","created":"2024-02-15","cited_by_count":74,"area":null},{"id":"2307.03694","title":"Scalable Membership Inference Attacks via Quantile Regression","created":"2023-07-07","cited_by_count":65,"area":"safety"},{"id":"2406.15968","title":"ReCaLL: Membership Inference via Relative Conditional Log-Likelihoods","created":"2024-06-23","cited_by_count":64,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2402.14904","title":"Watermarking Makes Language Models Radioactive","created":"2024-02-22","cited_by_count":58,"area":"safety"},{"id":"2409.14781","title":"Pretraining Data Detection for Large Language Models: A Divergence-based Calibration Method","created":"2024-09-23","cited_by_count":55,"area":null},{"id":"2308.06405","title":"White-box Membership Inference Attacks against Diffusion Models","created":"2023-08-11","cited_by_count":42,"area":"diffusion"},{"id":"2408.12787","title":"LLM-PBE: Assessing Data Privacy in Large Language Models","created":"2024-08-23","cited_by_count":41,"area":null},{"id":"2502.18943","title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models","created":"2025-02-26","cited_by_count":37,"area":"safety"},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2303.03446","title":"Students Parrot Their Teachers: Membership Inference on Model Distillation","created":"2023-03-06","cited_by_count":33,"area":"safety"},{"id":"2202.07623","title":"Defending against Reconstruction Attacks with R\\'enyi Differential Privacy","created":"2022-02-15","cited_by_count":32,"area":null},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2310.01424","title":"Identifying and Mitigating Privacy Risks Stemming from Language Models: A Survey","created":"2023-09-27","cited_by_count":30,"area":null},{"id":"2402.02823","title":"Evading Data Contamination Detection for Language Models is (too) Easy","created":"2024-02-05","cited_by_count":30,"area":null},{"id":"2410.22235","title":"Auditing $f$-Differential Privacy in One Run","created":"2024-10-29","cited_by_count":30,"area":null},{"id":"2502.00306","title":"Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation","created":"2025-02-01","cited_by_count":26,"area":"rag"},{"id":"2406.01333","title":"Probing Language Models for Pre-training Data Detection","created":"2024-06-03","cited_by_count":25,"area":null},{"id":"2405.11930","title":"Data Contamination Calibration for Black-box LLMs","created":"2024-05-20","cited_by_count":24,"area":null},{"id":"2403.09562","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","created":"2024-03-14","cited_by_count":23,"area":"safety"},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2406.16565","title":"Noisy Neighbors: Efficient membership inference attacks against LLMs","created":"2024-06-24","cited_by_count":21,"area":"safety"},{"id":"2409.00426","title":"Is Difficulty Calibration All We Need? Towards More Practical Membership Inference Attacks","created":"2024-08-31","cited_by_count":21,"area":"safety"},{"id":"2205.13680","title":"Membership Inference Attack Using Self Influence Functions","created":"2022-05-26","cited_by_count":20,"area":"safety"},{"id":"2307.16273","title":"zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training","created":"2023-07-30","cited_by_count":20,"area":null},{"id":"2409.03363","title":"Con-ReCall: Detecting Pre-training Data in LLMs via Contrastive Decoding","created":"2024-09-05","cited_by_count":20,"area":null},{"id":"2204.06106","title":"Optimal Membership Inference Bounds for Adaptive Composition of Sampled Gaussian Mechanisms","created":"2022-04-12","cited_by_count":19,"area":"safety"},{"id":"2304.13850","title":"Do SSL Models Have D\\'ej\\`a Vu? A Case of Unintended Memorization in Self-supervised Learning","created":"2023-04-26","cited_by_count":19,"area":null},{"id":"2502.14921","title":"The Canary's Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text","created":"2025-02-19","cited_by_count":18,"area":"synth"},{"id":"2210.13662","title":"Analyzing Privacy Leakage in Machine Learning via Multiple Hypothesis Testing: A Lesson From Fano","created":"2022-10-24","cited_by_count":17,"area":null},{"id":"2208.08270","title":"On the Privacy Effect of Data Enhancement via the Lens of Memorization","created":"2022-08-17","cited_by_count":15,"area":null},{"id":"2311.16136","title":"ERASER: Machine Unlearning in MLaaS via an Inference Serving-Aware Approach","created":"2023-11-03","cited_by_count":15,"area":"safety"},{"id":"2402.09225","title":"Is My Data in Your AI? Membership Inference Test (MINT) applied to Face Biometrics","created":"2024-02-14","cited_by_count":13,"area":"safety"},{"id":"2405.16978","title":"OSLO: One-Shot Label-Only Membership Inference Attacks","created":"2024-05-27","cited_by_count":13,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2407.21248","title":"Adaptive Pre-training Data Detection for Large Language Models via Surprising Tokens","created":"2024-07-30","cited_by_count":11,"area":null},{"id":"2506.13972","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2207.12535","title":"Semi-Leak: Membership Inference Attacks Against Semi-supervised Learning","created":"2022-07-25","cited_by_count":10,"area":"safety"},{"id":"2503.07384","title":"Is My Text in Your AI Model? Gradient-based Membership Inference Test applied to LLMs","created":"2025-03-10","cited_by_count":10,"area":"safety"},{"id":"2506.06108","title":"Synthetic Tabular Data: Methods, Attacks and Defenses","created":"2025-06-06","cited_by_count":9,"area":null},{"id":"2210.11049","title":"How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers","created":"2022-10-20","cited_by_count":8,"area":null},{"id":"2312.07200","title":"Code Membership Inference for Detecting Unauthorized Data Use in Code Pre-trained Language Models","created":"2023-12-12","cited_by_count":8,"area":"safety"},{"id":"2410.09101","title":"Data Taggants: Dataset Ownership Verification via Harmless Targeted Data Poisoning","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2501.03941","title":"Synthetic Data Privacy Metrics","created":"2025-01-07","cited_by_count":8,"area":null},{"id":"2511.14045","title":"Auditing Data Membership in Reinforcement Learning With Verifiable Rewards","created":"2025-11-18","cited_by_count":8,"area":null},{"id":"2405.07562","title":"GLiRA: Black-Box Membership Inference Attack via Knowledge Distillation","created":"2024-05-13","cited_by_count":7,"area":"safety"},{"id":"2406.19395","title":"Dataset Size Recovery from LoRA Weights","created":"2024-06-27","cited_by_count":7,"area":"safety"},{"id":"2410.13088","title":"Self-Comparison for Dataset-Level Membership Inference in Large (Vision-)Language Models","created":"2024-10-16","cited_by_count":7,"area":"mllm"},{"id":"2601.02751","title":"Window-based Membership Inference Attacks Against Fine-tuned Large Language Models","created":"2026-01-06","cited_by_count":7,"area":"safety"},{"id":"2306.00133","title":"A Note On Interpreting Canary Exposure","created":"2023-05-31","cited_by_count":6,"area":null},{"id":"2402.05453","title":"Mitigating Privacy Risk in Membership Inference by Convex-Concave Loss","created":"2024-02-08","cited_by_count":6,"area":"safety"},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2506.05126","title":"Membership Inference Attacks on Sequence Models","created":"2025-06-05","cited_by_count":6,"area":"safety"},{"id":"2507.05068","title":"ICAS: Detecting Training Data from Autoregressive Image Generative Models","created":"2025-07-07","cited_by_count":6,"area":"safety"},{"id":"2507.21412","title":"Cascading and Proxy Membership Inference Attacks","created":"2025-07-29","cited_by_count":6,"area":"safety"},{"id":"2407.02747","title":"Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvature","created":"2024-07-03","cited_by_count":5,"area":"safety"},{"id":"2409.14513","title":"Order of Magnitude Speedups for LLM Membership Inference","created":"2024-09-22","cited_by_count":5,"area":"safety"},{"id":"2505.24089","title":"Practical Bayes-Optimal Membership Inference Attacks","created":"2025-05-30","cited_by_count":5,"area":"safety"},{"id":"2508.21146","title":"Privacy Auditing Synthetic Data Release through Local Likelihood Attacks","created":"2025-08-28","cited_by_count":5,"area":null},{"id":"2510.02962","title":"Leave No TRACE: Black-box Detection of Copyrighted Dataset Usage in Large Language Models via Watermarking","created":"2025-10-03","cited_by_count":5,"area":"safety"},{"id":"2601.20125","title":"Membership Inference Attacks Against Fine-tuned Diffusion Language Models","created":"2026-01-27","cited_by_count":5,"area":"diffusion"},{"id":"2203.02080","title":"An Efficient Subpopulation-based Membership Inference Attack","created":"2022-03-04","cited_by_count":4,"area":"safety"},{"id":"2207.12779","title":"Reconciling Security and Communication Efficiency in Federated Learning","created":"2022-07-26","cited_by_count":4,"area":null},{"id":"2303.03648","title":"Can Membership Inferencing be Refuted?","created":"2023-03-07","cited_by_count":4,"area":"safety"},{"id":"2407.04981","title":"TRACE: TRansformer-based Attribution using Contrastive Embeddings in LLMs","created":"2024-07-06","cited_by_count":4,"area":null},{"id":"2509.18014","title":"Synth-MIA: A Testbed for Auditing Privacy Leakage in Tabular Data Synthesis","created":"2025-09-22","cited_by_count":4,"area":null},{"id":"2510.13451","title":"Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts","created":"2025-10-15","cited_by_count":4,"area":"safety"},{"id":"2606.09401","title":"Benchmarking Empirical Privacy Protection for Adaptations of Large Language Models","created":"2026-06-08","cited_by_count":4,"area":null},{"id":"2212.02701","title":"On the Discredibility of Membership Inference Attacks","created":"2022-12-06","cited_by_count":3,"area":"safety"},{"id":"2305.12997","title":"Evaluating Privacy Leakage in Split Learning","created":"2023-05-22","cited_by_count":3,"area":null},{"id":"2307.06123","title":"SoK: Comparing Different Membership Inference Attacks with a Comprehensive Benchmark","created":"2023-07-12","cited_by_count":3,"area":"safety"},{"id":"2506.14919","title":"Frequency-Calibrated Membership Inference Attacks on Medical Image Diffusion Models","created":"2025-06-17","cited_by_count":3,"area":"diffusion"},{"id":"2509.06796","title":"Imitative Membership Inference Attack","created":"2025-09-08","cited_by_count":3,"area":"safety"},{"id":"2509.07879","title":"Active Membership Inference Test (aMINT): Enhancing Model Auditability with Multi-Task Learning","created":"2025-09-09","cited_by_count":3,"area":"safety"},{"id":"2511.12043","title":"BudgetLeak: Membership Inference Attacks on RAG Systems via the Generation Budget Side Channel","created":"2025-11-15","cited_by_count":3,"area":"rag"},{"id":"2601.12929","title":"Membership Inference Test: Auditing Training Data in Object Classification Models","created":"2026-01-19","cited_by_count":3,"area":"safety"},{"id":"2310.08015","title":"Why Train More? Effective and Efficient Membership Inference via Memorization","created":"2023-10-12","cited_by_count":2,"area":"safety"},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2401.04929","title":"Learning-Based Difficulty Calibration for Enhanced Membership Inference Attacks","created":"2024-01-10","cited_by_count":2,"area":"safety"},{"id":"2503.07482","title":"How does Bayesian Sampling help Membership Inference Attacks?","created":"2025-03-10","cited_by_count":2,"area":"safety"},{"id":"2504.05651","title":"Measuring D\\'ej\\`a vu Memorization Efficiently","created":"2025-04-08","cited_by_count":2,"area":null},{"id":"2505.03392","title":"Automatic Calibration for Membership Inference Attack on Large Language Models","created":"2025-05-06","cited_by_count":2,"area":"safety"},{"id":"2506.02711","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","created":"2025-06-03","cited_by_count":2,"area":"safety"},{"id":"2508.07066","title":"Membership Inference Attacks with False Discovery Rate Control","created":"2025-08-09","cited_by_count":2,"area":"safety"},{"id":"2511.20710","title":"Are Neuro-Inspired Multi-Modal Vision-Language Models Resilient to Membership Inference Privacy Leakage?","created":"2025-11-24","cited_by_count":2,"area":"mllm"},{"id":"2602.07126","title":"Finding Connections: Membership Inference Attacks for the Multi-Table Synthetic Data Setting","created":"2026-02-06","cited_by_count":2,"area":"safety"}],"next_cursor":"100"}