{"total":248,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2301.13188","title":"Extracting Training Data from Diffusion Models","created":"2023-01-30","cited_by_count":732,"area":"diffusion"},{"id":"2407.06460","title":"MUSE: Machine Unlearning Six-Way Evaluation for Language Models","created":"2024-07-08","cited_by_count":261,"area":"safety"},{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2402.07841","title":"Do Membership Inference Attacks Work on Large Language Models?","created":"2024-02-12","cited_by_count":195,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2203.03929","title":"Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks","created":"2022-03-08","cited_by_count":175,"area":"safety"},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2208.14933","title":"Membership Inference Attacks by Exploiting Loss Trajectory","created":"2022-08-31","cited_by_count":101,"area":"safety"},{"id":"2311.06062","title":"Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibration","created":"2023-11-10","cited_by_count":98,"area":"safety"},{"id":"2302.03262","title":"Membership Inference Attacks against Diffusion Models","created":"2023-02-07","cited_by_count":86,"area":"diffusion"},{"id":"2403.01218","title":"Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy","created":"2024-03-02","cited_by_count":82,"area":"safety"},{"id":"2302.12580","title":"Membership Inference Attacks against Synthetic Data through Overfitting Detection","created":"2023-02-24","cited_by_count":66,"area":"safety"},{"id":"2307.03694","title":"Scalable Membership Inference Attacks via Quantile Regression","created":"2023-07-07","cited_by_count":65,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2409.19798","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","created":"2024-09-29","cited_by_count":50,"area":"safety"},{"id":"2203.05363","title":"Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)","created":"2022-03-10","cited_by_count":48,"area":null},{"id":"2301.09956","title":"Membership Inference of Diffusion Models","created":"2023-01-24","cited_by_count":46,"area":"diffusion"},{"id":"2409.01380","title":"Membership Inference Attacks Against In-Context Learning","created":"2024-09-02","cited_by_count":43,"area":"safety"},{"id":"2308.06405","title":"White-box Membership Inference Attacks against Diffusion Models","created":"2023-08-11","cited_by_count":42,"area":"diffusion"},{"id":"2306.12983","title":"Towards More Realistic Membership Inference Attacks on Large Diffusion Models","created":"2023-06-22","cited_by_count":41,"area":"diffusion"},{"id":"2408.12787","title":"LLM-PBE: Assessing Data Privacy in Large Language Models","created":"2024-08-23","cited_by_count":41,"area":null},{"id":"2505.11953","title":"Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning","created":"2025-05-17","cited_by_count":39,"area":"safety"},{"id":"2310.18362","title":"SoK: Memorization in General-Purpose Large Language Models","created":"2023-10-24","cited_by_count":37,"area":null},{"id":"2502.18943","title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models","created":"2025-02-26","cited_by_count":37,"area":"safety"},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2206.05199","title":"Bayesian Estimation of Differential Privacy","created":"2022-06-10","cited_by_count":33,"area":"safety"},{"id":"2411.02902","title":"Membership Inference Attacks against Large Vision-Language Models","created":"2024-11-05","cited_by_count":33,"area":"mllm"},{"id":"2202.07623","title":"Defending against Reconstruction Attacks with R\\'enyi Differential Privacy","created":"2022-02-15","cited_by_count":32,"area":null},{"id":"2211.05427","title":"On the Privacy Risks of Algorithmic Recourse","created":"2022-11-10","cited_by_count":32,"area":"safety"},{"id":"2408.03400","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","created":"2024-08-06","cited_by_count":32,"area":"diffusion"},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2410.22235","title":"Auditing $f$-Differential Privacy in One Run","created":"2024-10-29","cited_by_count":30,"area":null},{"id":"2307.01610","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction","created":"2023-07-04","cited_by_count":29,"area":"safety"},{"id":"2310.14369","title":"MoPe: Model Perturbation-based Privacy Attacks on Language Models","created":"2023-10-22","cited_by_count":25,"area":null},{"id":"2401.00676","title":"Digger: Detecting Copyright Content Mis-usage in Large Language Model Training","created":"2024-01-01","cited_by_count":25,"area":null},{"id":"2301.10053","title":"A Linear Reconstruction Approach for Attribute Inference Attacks against Synthetic Data","created":"2023-01-24","cited_by_count":24,"area":null},{"id":"2205.08443","title":"On the (In)security of Peer-to-Peer Decentralized Machine Learning","created":"2022-05-17","cited_by_count":23,"area":null},{"id":"2403.09562","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","created":"2024-03-14","cited_by_count":23,"area":"safety"},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2409.13745","title":"Context-Aware Membership Inference Attacks against Pre-trained Large Language Models","created":"2024-09-11","cited_by_count":22,"area":"safety"},{"id":"2306.07273","title":"Gaussian Membership Inference Privacy","created":"2023-06-12","cited_by_count":21,"area":"safety"},{"id":"2405.14106","title":"Nearly Tight Black-Box Auditing of Differentially Private Machine Learning","created":"2024-05-23","cited_by_count":21,"area":null},{"id":"2409.00426","title":"Is Difficulty Calibration All We Need? Towards More Practical Membership Inference Attacks","created":"2024-08-31","cited_by_count":21,"area":"safety"},{"id":"2206.02617","title":"Individual Privacy Accounting for Differentially Private Stochastic Gradient Descent","created":"2022-06-06","cited_by_count":20,"area":null},{"id":"2206.03317","title":"Subject Membership Inference Attacks in Federated Learning","created":"2022-06-07","cited_by_count":20,"area":"safety"},{"id":"2305.18447","title":"Unleashing the Power of Randomization in Auditing Differentially Private ML","created":"2023-05-29","cited_by_count":20,"area":null},{"id":"2307.16273","title":"zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training","created":"2023-07-30","cited_by_count":20,"area":null},{"id":"2309.17310","title":"Leave-one-out Distinguishability in Machine Learning","created":"2023-09-29","cited_by_count":20,"area":null},{"id":"2304.13850","title":"Do SSL Models Have D\\'ej\\`a Vu? A Case of Unintended Memorization in Self-supervised Learning","created":"2023-04-26","cited_by_count":19,"area":null},{"id":"2205.14055","title":"A Blessing of Dimensionality in Membership Inference through Regularization","created":"2022-05-27","cited_by_count":18,"area":"safety"},{"id":"2502.14921","title":"The Canary's Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text","created":"2025-02-19","cited_by_count":18,"area":"synth"},{"id":"2210.13662","title":"Analyzing Privacy Leakage in Machine Learning via Multiple Hypothesis Testing: A Lesson From Fano","created":"2022-10-24","cited_by_count":17,"area":null},{"id":"2505.13312","title":"GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection","created":"2025-05-19","cited_by_count":17,"area":"safety"},{"id":"2406.07687","title":"Adversarial Machine Unlearning","created":"2024-06-11","cited_by_count":16,"area":"safety"},{"id":"2407.15100","title":"A General Framework for Data-Use Auditing of ML Models","created":"2024-07-21","cited_by_count":16,"area":null},{"id":"2212.07591","title":"Dissecting Distribution Inference","created":"2022-12-15","cited_by_count":15,"area":null},{"id":"2401.10458","title":"Contrastive Unlearning: A Contrastive Approach to Machine Unlearning","created":"2024-01-19","cited_by_count":15,"area":"safety"},{"id":"2202.01243","title":"Parameters or Privacy: A Provable Tradeoff Between Overparameterization and Membership Inference","created":"2022-02-02","cited_by_count":14,"area":"safety"},{"id":"2306.01181","title":"TMI! Finetuned Models Leak Private Information from their Pretraining Data","created":"2023-06-01","cited_by_count":14,"area":null},{"id":"2309.07983","title":"SLMIA-SR: Speaker-Level Membership Inference Attacks against Speaker Recognition Systems","created":"2023-09-14","cited_by_count":14,"area":"safety"},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2405.16978","title":"OSLO: One-Shot Label-Only Membership Inference Attacks","created":"2024-05-27","cited_by_count":13,"area":"safety"},{"id":"2410.07582","title":"Detecting Training Data of Large Language Models via Expectation Maximization","created":"2024-10-10","cited_by_count":13,"area":"safety"},{"id":"2205.04525","title":"Towards a multi-stakeholder value-based assessment framework for algorithmic systems","created":"2022-05-09","cited_by_count":12,"area":null},{"id":"2302.01190","title":"On the Efficacy of Differentially Private Few-shot Image Classification","created":"2023-02-02","cited_by_count":12,"area":null},{"id":"2302.06676","title":"Netflix and Forget: Efficient and Exact Machine Unlearning from Bi-linear Recommendations","created":"2023-02-13","cited_by_count":12,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2408.05131","title":"Range Membership Inference Attacks","created":"2024-08-09","cited_by_count":12,"area":"safety"},{"id":"2505.01524","title":"The DCR Delusion: Measuring the Privacy Risk of Synthetic Data","created":"2025-05-02","cited_by_count":11,"area":"safety"},{"id":"2506.06112","title":"Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness","created":"2025-06-06","cited_by_count":11,"area":"safety"},{"id":"2506.13972","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2509.02820","title":"Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs","created":"2025-09-02","cited_by_count":11,"area":"safety"},{"id":"2306.03962","title":"PILLAR: How to make semi-private learning more effective","created":"2023-06-06","cited_by_count":10,"area":null},{"id":"2406.11544","title":"Do Parameters Reveal More than Loss for Membership Inference?","created":"2024-06-17","cited_by_count":10,"area":"safety"},{"id":"2306.03013","title":"Hiding in Plain Sight: Disguising Data Stealing Attacks in Federated Learning","created":"2023-06-05","cited_by_count":9,"area":null},{"id":"2306.05093","title":"Investigating the Effect of Misalignment on Membership Privacy in the White-box Setting","created":"2023-06-08","cited_by_count":9,"area":null},{"id":"2404.09536","title":"Noiseless Privacy-Preserving Decentralized Learning","created":"2024-04-15","cited_by_count":9,"area":null},{"id":"2406.07698","title":"Label Smoothing Improves Machine Unlearning","created":"2024-06-11","cited_by_count":9,"area":"safety"},{"id":"2407.01251","title":"QUEEN: Query Unlearning against Model Extraction","created":"2024-07-01","cited_by_count":9,"area":"safety"},{"id":"2410.01276","title":"Deep Unlearn: Benchmarking Machine Unlearning for Image Classification","created":"2024-10-02","cited_by_count":9,"area":"safety"},{"id":"2412.08559","title":"Underestimated Privacy Risks for Minority Populations in Large Language Model Unlearning","created":"2024-12-11","cited_by_count":9,"area":"safety"},{"id":"2506.06108","title":"Synthetic Tabular Data: Methods, Attacks and Defenses","created":"2025-06-06","cited_by_count":9,"area":null},{"id":"2210.11049","title":"How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers","created":"2022-10-20","cited_by_count":8,"area":null},{"id":"2312.07861","title":"GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networks","created":"2023-12-13","cited_by_count":8,"area":null},{"id":"2407.07557","title":"Real World Federated Learning with a Knowledge Distilled Transformer for Cardiac CT Imaging","created":"2024-07-10","cited_by_count":8,"area":null},{"id":"2505.12442","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","created":"2025-05-18","cited_by_count":8,"area":"agents"},{"id":"2402.00906","title":"BrainLeaks: On the Privacy-Preserving Properties of Neuromorphic Architectures against Model Inversion Attacks","created":"2024-02-01","cited_by_count":7,"area":null},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2411.05743","title":"Free Record-Level Privacy Risk Evaluation Through Artifact-Based Methods","created":"2024-11-08","cited_by_count":7,"area":"safety"},{"id":"2508.09603","title":"The Surprising Effectiveness of Membership Inference with Simple N-Gram Coverage","created":"2025-08-13","cited_by_count":7,"area":"safety"},{"id":"2601.02751","title":"Window-based Membership Inference Attacks Against Fine-tuned Large Language Models","created":"2026-01-06","cited_by_count":7,"area":"safety"},{"id":"2209.06529","title":"Data Privacy and Trustworthy Machine Learning","created":"2022-09-14","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2402.05453","title":"Mitigating Privacy Risk in Membership Inference by Convex-Concave Loss","created":"2024-02-08","cited_by_count":6,"area":"safety"},{"id":"2403.17775","title":"Secure Aggregation is Not Private Against Membership Inference Attacks","created":"2024-03-26","cited_by_count":6,"area":"safety"},{"id":"2404.00673","title":"A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasures","created":"2024-03-31","cited_by_count":6,"area":null}],"next_cursor":"100"}