{"total":24,"rows":[{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2209.09024","title":"Dataset Inference for Self-Supervised Models","created":"2022-09-16","cited_by_count":36,"area":null},{"id":"2307.12280","title":"Downstream-agnostic Adversarial Examples","created":"2023-07-23","cited_by_count":32,"area":null},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2310.08571","title":"Bucks for Buckets (B4B): Active Defenses Against Stealing Encoders","created":"2023-10-12","cited_by_count":8,"area":null},{"id":"2302.11982","title":"A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2502.20924","title":"Decoder Gradient Shield: Provable and High-Fidelity Prevention of Gradient-Based Box-Free Watermark Removal","created":"2025-02-28","cited_by_count":5,"area":null},{"id":"2306.11338","title":"FDINet: Protecting against DNN Model Extraction via Feature Distortion Index","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2509.00973","title":"Clone What You Can't Steal: Black-Box LLM Replication via Logit Leakage and Distillation","created":"2025-08-31","cited_by_count":3,"area":null},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2502.18077","title":"Examining the Threat Landscape: Foundation Models and Model Stealing","created":"2025-02-25","cited_by_count":2,"area":null},{"id":"2503.00065","title":"ADAGE: Active Defenses Against GNN Extraction","created":"2025-02-27","cited_by_count":2,"area":null},{"id":"2506.04556","title":"BESA: Boosting Encoder Stealing Attack with Perturbation Recovery","created":"2025-06-05","cited_by_count":2,"area":null},{"id":"2507.12022","title":"Dataset Ownership Verification for Pre-trained Masked Models","created":"2025-07-16","cited_by_count":2,"area":null},{"id":"2308.04673","title":"SSL-Auth: An Authentication Framework by Fragile Watermarking for Pre-trained Encoders in Self-supervised Learning","created":"2023-08-09","cited_by_count":1,"area":null},{"id":"2601.11952","title":"Decoder Gradient Shields: A Family of Provable and High-Fidelity Methods Against Gradient-Based Box-Free Watermark Removal","created":"2026-01-17","cited_by_count":1,"area":null},{"id":"2307.10997","title":"DREAM: Domain-free Reverse Engineering Attributes of Black-box Model","created":"2023-07-20","cited_by_count":0,"area":null},{"id":"2312.00855","title":"Refine, Discriminate and Align: Stealing Encoders via Sample-Wise Prototypes and Multi-Relational Extraction","created":"2023-12-01","cited_by_count":0,"area":null},{"id":"2312.14677","title":"MEAOD: Model Extraction Attack against Object Detectors","created":"2023-12-22","cited_by_count":0,"area":null},{"id":"2406.00828","title":"Imitating the Functionality of Image-to-Image Models Using a Single Example","created":"2024-06-02","cited_by_count":0,"area":null},{"id":"2408.02814","title":"Pre-trained Encoder Inference: Revealing Upstream Encoders In Downstream Machine Learning Services","created":"2024-08-05","cited_by_count":0,"area":null},{"id":"2411.09359","title":"Your Semantic-Independent Watermark is Fragile: A Semantic Perturbation Attack against EaaS Watermark","created":"2024-11-14","cited_by_count":0,"area":null},{"id":"2412.05842","title":"DREAM: Domain-agnostic Reverse Engineering Attributes of Black-box Model","created":"2024-12-08","cited_by_count":0,"area":null},{"id":"2511.07170","title":"On Stealing Graph Neural Network Models","created":"2025-11-10","cited_by_count":0,"area":null}],"next_cursor":null}