{"total":34,"rows":[{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2209.01292","title":"Are Attribute Inference Attacks Just Imputation?","created":"2022-09-02","cited_by_count":49,"area":null},{"id":"2310.07152","title":"No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device ML","created":"2023-10-11","cited_by_count":21,"area":null},{"id":"2304.13850","title":"Do SSL Models Have D\\'ej\\`a Vu? A Case of Unintended Memorization in Self-supervised Learning","created":"2023-04-26","cited_by_count":19,"area":null},{"id":"2405.03636","title":"The Federation Strikes Back: A Survey of Federated Learning Privacy Attacks, Defenses, Applications, and Policy Landscape","created":"2024-05-06","cited_by_count":13,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2210.11049","title":"How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers","created":"2022-10-20","cited_by_count":8,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2306.00578","title":"Does Black-box Attribute Inference Attacks on Graph Neural Networks Constitute Privacy Risk?","created":"2023-06-01","cited_by_count":7,"area":null},{"id":"2210.04052","title":"FedDef: Defense Against Gradient Leakage in Federated Learning-based Network Intrusion Detection Systems","created":"2022-10-08","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2503.00383","title":"Theoretical Insights in Model Inversion Robustness and Conditional Entropy Maximization for Collaborative Inference Systems","created":"2025-03-01","cited_by_count":6,"area":null},{"id":"2404.16847","title":"State-of-the-Art Approaches to Enhancing Privacy Preservation of Machine Learning Datasets: A Survey","created":"2024-02-25","cited_by_count":5,"area":null},{"id":"2210.09028","title":"Attribute Inference Attacks in Online Multiplayer Video Games: a Case Study on Dota2","created":"2022-10-17","cited_by_count":4,"area":null},{"id":"2408.16913","title":"Analyzing Inference Privacy Risks Through Gradients in Machine Learning","created":"2024-08-29","cited_by_count":4,"area":null},{"id":"2409.15868","title":"Privacy Evaluation Benchmarks for NLP Models","created":"2024-09-24","cited_by_count":3,"area":null},{"id":"2411.09945","title":"TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models","created":"2024-11-15","cited_by_count":3,"area":null},{"id":"2504.04033","title":"Disparate Privacy Vulnerability: Targeted Attribute Inference Attacks and Defenses","created":"2025-04-05","cited_by_count":3,"area":null},{"id":"2303.09289","title":"Class Attribute Inference Attacks: Inferring Sensitive Class Information by Diffusion-Based Attribute Manipulations","created":"2023-03-16","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2512.10296","title":"FLARE: A Wireless Side-Channel Fingerprinting Attack on Federated Learning","created":"2025-12-11","cited_by_count":2,"area":null},{"id":"2305.15697","title":"Privacy Protectability: An Information-theoretical Approach","created":"2023-05-25","cited_by_count":1,"area":null},{"id":"2310.08775","title":"When Machine Learning Models Leak: An Exploration of Synthetic Training Data","created":"2023-10-12","cited_by_count":1,"area":null},{"id":"2504.11510","title":"RAID: An In-Training Defense against Attribute Inference Attacks in Recommender Systems","created":"2025-04-15","cited_by_count":1,"area":null},{"id":"2603.08913","title":"Quantifying Memorization and Privacy Risks in Genomic Language Models","created":"2026-03-09","cited_by_count":1,"area":null},{"id":"2604.19653","title":"A Dual Perspective on Synthetic Trajectory Generators: Utility Framework and Privacy Vulnerabilities","created":"2026-04-21","cited_by_count":1,"area":null},{"id":"2203.02121","title":"Adversarial Patterns: Building Robust Android Malware Classifiers","created":"2022-03-04","cited_by_count":0,"area":null},{"id":"2504.18497","title":"DeSIA: Attribute Inference Attacks Against Limited Fixed Aggregate Statistics","created":"2025-04-25","cited_by_count":0,"area":null},{"id":"2601.17360","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","created":"2026-01-24","cited_by_count":0,"area":null},{"id":"2602.06700","title":"Taipan: A Query-free Transfer-based Multiple Sensitive Attribute Inference Attack Solely from Auxiliary Graphs","created":"2026-02-06","cited_by_count":0,"area":null},{"id":"2605.11386","title":"Revisiting Privacy Preservation in Brain-Computer Interfaces: Conceptual Boundaries, Risk Pathways, and a Protection-Strength Grading Framework","created":"2026-05-12","cited_by_count":0,"area":null},{"id":"2607.12354","title":"Reducing information dependency does not cause training data privacy. Adversarially non-robust features do","created":"2026-07-14","cited_by_count":0,"area":null},{"id":"2607.15469","title":"FLINT: Fingerprinting Federated Learning Architectures from 5G PHY-Layer Side Channels","created":"2026-07-16","cited_by_count":0,"area":null},{"id":"2609.17995","title":"QuanText: Protecting Dataset-Level Secrets in Textual Data Sharing","created":"2026-09-16","cited_by_count":0,"area":null}],"next_cursor":null}