{"total":75,"rows":[{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2201.12179","title":"Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks","created":"2022-01-28","cited_by_count":60,"area":null},{"id":"2302.04012","title":"CodeLMSec Benchmark: Systematically Evaluating and Finding Security Vulnerabilities in Black-Box Code Language Models","created":"2023-02-08","cited_by_count":55,"area":null},{"id":"2304.01669","title":"Re-thinking Model Inversion Attacks Against Deep Neural Networks","created":"2023-04-04","cited_by_count":39,"area":null},{"id":"2304.04625","title":"Reinforcement Learning-Based Black-Box Model Inversion Attacks","created":"2023-04-10","cited_by_count":33,"area":null},{"id":"2209.10505","title":"Text Revealer: Private Text Reconstruction via Model Inversion Attacks against Transformers","created":"2022-09-21","cited_by_count":31,"area":null},{"id":"2206.05483","title":"Bilateral Dependency Optimization: Defending Against Model-inversion Attacks","created":"2022-06-11","cited_by_count":30,"area":null},{"id":"2402.04013","title":"Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses","created":"2024-02-06","cited_by_count":30,"area":null},{"id":"2302.09814","title":"Pseudo Label-Guided Model Inversion Attack via Conditional Generative Adversarial Network","created":"2023-02-20","cited_by_count":28,"area":null},{"id":"2310.19342","title":"Label-Only Model Inversion Attacks via Knowledge Transfer","created":"2023-10-30","cited_by_count":21,"area":null},{"id":"2309.01172","title":"FusionAI: Decentralized Training and Deploying LLMs with Massive Consumer-Level GPUs","created":"2023-09-03","cited_by_count":20,"area":null},{"id":"2209.07341","title":"Does CLIP Know My Face?","created":"2022-09-15","cited_by_count":19,"area":null},{"id":"2404.12922","title":"Is Retain Set All You Need in Machine Unlearning? Restoring Performance of Unlearned Models with Out-Of-Distribution Images","created":"2024-04-19","cited_by_count":18,"area":"safety"},{"id":"2407.13863","title":"A Closer Look at GAN Priors: Exploiting Intermediate Features for Enhanced Model Inversion Attacks","created":"2024-07-18","cited_by_count":18,"area":null},{"id":"2302.01622","title":"Private, fair and accurate: Training large-scale, privacy-preserving AI models in medical imaging","created":"2023-02-03","cited_by_count":17,"area":null},{"id":"2306.09104","title":"On Strengthening and Defending Graph Reconstruction Attack with Markov Chain Approximation","created":"2023-06-15","cited_by_count":16,"area":null},{"id":"2310.06549","title":"Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks","created":"2023-10-10","cited_by_count":13,"area":null},{"id":"2405.05588","title":"Model Inversion Robustness: Can Transfer Learning Help?","created":"2024-05-09","cited_by_count":12,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2206.05136","title":"Fast Deep Autoencoder for Federated learning","created":"2022-06-10","cited_by_count":10,"area":null},{"id":"2311.11995","title":"BrainWash: A Poisoning Attack to Forget in Continual Learning","created":"2023-11-20","cited_by_count":9,"area":null},{"id":"2409.01696","title":"On the Vulnerability of Skip Connections to Model Inversion Attacks","created":"2024-09-03","cited_by_count":9,"area":null},{"id":"2306.13965","title":"Boosting Model Inversion Attacks with Adversarial Examples","created":"2023-06-24","cited_by_count":8,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2407.11424","title":"Model Inversion Attacks Through Target-Specific Conditional Diffusion Models","created":"2024-07-16","cited_by_count":8,"area":"diffusion"},{"id":"2309.00013","title":"Model Inversion Attack via Dynamic Memory Learning","created":"2023-08-24","cited_by_count":7,"area":null},{"id":"2402.00906","title":"BrainLeaks: On the Privacy-Preserving Properties of Neuromorphic Architectures against Model Inversion Attacks","created":"2024-02-01","cited_by_count":7,"area":null},{"id":"2506.00660","title":"Differential privacy for medical deep learning: methods, tradeoffs, and deployment implications","created":"2025-05-31","cited_by_count":7,"area":null},{"id":"2503.00383","title":"Theoretical Insights in Model Inversion Robustness and Conditional Entropy Maximization for Collaborative Inference Systems","created":"2025-03-01","cited_by_count":6,"area":null},{"id":"2308.09490","title":"Balancing Transparency and Risk: The Security and Privacy Risks of Open-Source Machine Learning Models","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2410.05159","title":"MIBench: A Comprehensive Framework for Benchmarking Model Inversion Attack and Defense","created":"2024-10-07","cited_by_count":5,"area":null},{"id":"2411.08460","title":"Trap-MID: Trapdoor-based Defense against Model Inversion Attacks","created":"2024-11-13","cited_by_count":5,"area":null},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2310.08320","title":"Defending Our Privacy With Backdoors","created":"2023-10-12","cited_by_count":4,"area":null},{"id":"2408.16913","title":"Analyzing Inference Privacy Risks Through Gradients in Machine Learning","created":"2024-08-29","cited_by_count":4,"area":null},{"id":"2412.08544","title":"Training Data Reconstruction: Privacy due to Uncertainty?","created":"2024-12-11","cited_by_count":4,"area":null},{"id":"2402.04375","title":"Bounding the Excess Risk for Linear Models Trained on Marginal-Preserving, Differentially-Private, Synthetic Data","created":"2024-02-06","cited_by_count":3,"area":null},{"id":"2403.01628","title":"Recent Advances, Applications, and Open Challenges in Machine Learning for Health: Reflections from Research Roundtables at ML4H 2023 Symposium","created":"2024-03-03","cited_by_count":3,"area":null},{"id":"2510.26311","title":"Model Inversion with Layer-Specific Modeling and Alignment for Data-Free Continual Learning","created":"2025-10-30","cited_by_count":3,"area":null},{"id":"2303.09289","title":"Class Attribute Inference Attacks: Inferring Sensitive Class Information by Diffusion-Based Attribute Manipulations","created":"2023-03-16","cited_by_count":2,"area":null},{"id":"2309.04427","title":"Robust Representation Learning for Privacy-Preserving Machine Learning: A Multi-Objective Autoencoder Approach","created":"2023-09-08","cited_by_count":2,"area":null},{"id":"2311.12999","title":"CovarNav: Machine Unlearning via Model Inversion and Covariance Navigation","created":"2023-11-21","cited_by_count":2,"area":"safety"},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2407.08127","title":"Prediction Exposes Your Face: Black-box Model Inversion via Prediction Alignment","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2206.07018","title":"Turning a Curse into a Blessing: Enabling In-Distribution-Data-Free Backdoor Removal via Stabilized Model Inversion","created":"2022-06-14","cited_by_count":1,"area":null},{"id":"2310.08775","title":"When Machine Learning Models Leak: An Exploration of Synthetic Training Data","created":"2023-10-12","cited_by_count":1,"area":null},{"id":"2312.04590","title":"Reconciling AI Performance and Data Reconstruction Resilience for Medical Imaging","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2404.00696","title":"Privacy Re-identification Attacks on Tabular GANs","created":"2024-03-31","cited_by_count":1,"area":null},{"id":"2404.03348","title":"Knowledge Distillation-Based Model Extraction Attack using GAN-based Private Counterfactual Explanations","created":"2024-04-04","cited_by_count":1,"area":null},{"id":"2404.13860","title":"Distributional Black-Box Model Inversion Attack with Multi-Agent Reinforcement Learning","created":"2024-04-22","cited_by_count":1,"area":null},{"id":"2412.20798","title":"Reconciling Privacy and Explainability in High-Stakes: A Systematic Inquiry","created":"2024-12-30","cited_by_count":1,"area":null},{"id":"2505.03519","title":"Revisiting Model Inversion Evaluation: From Misleading Standards to Reliable Privacy Assessment","created":"2025-05-06","cited_by_count":1,"area":null},{"id":"2509.20177","title":"Generative Model Inversion Through the Lens of the Manifold Hypothesis","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2303.04980","title":"Decision-BADGE: Decision-based Adversarial Batch Attack with Directional Gradient Estimation","created":"2023-03-09","cited_by_count":0,"area":null},{"id":"2310.12590","title":"PrivacyGAN: robust generative image privacy","created":"2023-10-19","cited_by_count":0,"area":null},{"id":"2312.07040","title":"Rethinking Model Inversion Attacks With Patch-Wise Reconstruction","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2402.18027","title":"Breaking the Black-Box: Confidence-Guided Model Inversion Attack for Distribution Shift","created":"2024-02-28","cited_by_count":0,"area":null},{"id":"2403.10558","title":"Adaptive Hybrid Masking Strategy for Privacy-Preserving Face Recognition Against Model Inversion Attack","created":"2024-03-14","cited_by_count":0,"area":null},{"id":"2502.02913","title":"Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage","created":"2025-02-05","cited_by_count":0,"area":null},{"id":"2502.14370","title":"PPO-MI: Efficient Black-Box Model Inversion via Proximal Policy Optimization","created":"2025-02-20","cited_by_count":0,"area":"deeprl"},{"id":"2504.06410","title":"PEEL the Layers and Find Yourself: Revisiting Inference-time Data Leakage for Residual Neural Networks","created":"2025-04-08","cited_by_count":0,"area":null},{"id":"2505.14323","title":"Securing Transfer-Learned Networks with Reverse Homomorphic Encryption","created":"2025-05-20","cited_by_count":0,"area":null},{"id":"2508.04097","title":"Do Vision-Language Models Leak What They Learn? Adaptive Token-Weighted Model Inversion Attacks","created":"2025-08-06","cited_by_count":0,"area":"mllm"},{"id":"2509.10635","title":"Accurate and Private Diagnosis of Rare Genetic Syndromes from Facial Images with Federated Deep Learning","created":"2025-09-12","cited_by_count":0,"area":null},{"id":"2510.22909","title":"Rethinking Inference Placement for Deep Learning across Edge and Cloud Platforms: A Multi-Objective Optimization Perspective and Future Directions","created":"2025-10-27","cited_by_count":0,"area":"lr"},{"id":"2510.25687","title":"Model Inversion meets Cryptographic Fuzzy Extractors","created":"2025-10-29","cited_by_count":0,"area":null},{"id":"2511.12233","title":"Model Inversion Attack Against Deep Hashing","created":"2025-11-15","cited_by_count":0,"area":null},{"id":"2604.05993","title":"Data Distribution Valuation Using Generalized Bayesian Inference","created":"2026-04-07","cited_by_count":0,"area":null},{"id":"2606.29748","title":"Rethinking Generative Reconstruction Attacks against Graph Neural Network Models","created":"2026-06-29","cited_by_count":0,"area":null},{"id":"2607.12354","title":"Reducing information dependency does not cause training data privacy. Adversarially non-robust features do","created":"2026-07-14","cited_by_count":0,"area":null},{"id":"2608.16791","title":"Steering the Flow: Inverting Face Recognition Models via Gradient-Guided Flow Matching","created":"2026-08-17","cited_by_count":0,"area":"diffusion"},{"id":"2609.31356","title":"Open Vocabulary Domain Unlearning","created":"2026-09-25","cited_by_count":0,"area":"mllm"}],"next_cursor":null}