{"total":60,"rows":[{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2406.02366","title":"Finding NeMo: Localizing Neurons Responsible For Memorization in Diffusion Models","created":"2024-06-04","cited_by_count":37,"area":"diffusion"},{"id":"2402.04013","title":"Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses","created":"2024-02-06","cited_by_count":30,"area":null},{"id":"2209.08891","title":"Exploiting Cultural Biases via Homoglyphs in Text-to-Image Synthesis","created":"2022-09-19","cited_by_count":29,"area":"diffusion"},{"id":"2302.09814","title":"Pseudo Label-Guided Model Inversion Attack via Conditional Generative Adversarial Network","created":"2023-02-20","cited_by_count":28,"area":null},{"id":"2310.19342","title":"Label-Only Model Inversion Attacks via Knowledge Transfer","created":"2023-10-30","cited_by_count":21,"area":null},{"id":"2209.07341","title":"Does CLIP Know My Face?","created":"2022-09-15","cited_by_count":19,"area":null},{"id":"2407.13863","title":"A Closer Look at GAN Priors: Exploiting Intermediate Features for Enhanced Model Inversion Attacks","created":"2024-07-18","cited_by_count":18,"area":null},{"id":"2306.09104","title":"On Strengthening and Defending Graph Reconstruction Attack with Markov Chain Approximation","created":"2023-06-15","cited_by_count":16,"area":null},{"id":"2307.08424","title":"Unstoppable Attack: Label-Only Model Inversion via Conditional Diffusion Model","created":"2023-07-17","cited_by_count":14,"area":"diffusion"},{"id":"2405.05369","title":"Model Reconstruction Using Counterfactual Explanations: A Perspective From Polytope Theory","created":"2024-05-08","cited_by_count":14,"area":null},{"id":"2310.06549","title":"Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks","created":"2023-10-10","cited_by_count":13,"area":null},{"id":"2405.05588","title":"Model Inversion Robustness: Can Transfer Learning Help?","created":"2024-05-09","cited_by_count":12,"area":null},{"id":"2409.01696","title":"On the Vulnerability of Skip Connections to Model Inversion Attacks","created":"2024-09-03","cited_by_count":9,"area":null},{"id":"2306.13965","title":"Boosting Model Inversion Attacks with Adversarial Examples","created":"2023-06-24","cited_by_count":8,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2407.11424","title":"Model Inversion Attacks Through Target-Specific Conditional Diffusion Models","created":"2024-07-16","cited_by_count":8,"area":"diffusion"},{"id":"2309.00013","title":"Model Inversion Attack via Dynamic Memory Learning","created":"2023-08-24","cited_by_count":7,"area":null},{"id":"2310.10427","title":"DANAA: Towards transferable attacks with double adversarial neuron attribution","created":"2023-10-16","cited_by_count":7,"area":null},{"id":"2503.00383","title":"Theoretical Insights in Model Inversion Robustness and Conditional Entropy Maximization for Collaborative Inference Systems","created":"2025-03-01","cited_by_count":6,"area":null},{"id":"2308.09490","title":"Balancing Transparency and Risk: The Security and Privacy Risks of Open-Source Machine Learning Models","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2406.07314","title":"Rethinking the impact of noisy labels in graph classification: A utility and privacy perspective","created":"2024-06-11","cited_by_count":5,"area":null},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2410.05159","title":"MIBench: A Comprehensive Framework for Benchmarking Model Inversion Attack and Defense","created":"2024-10-07","cited_by_count":5,"area":null},{"id":"2411.08460","title":"Trap-MID: Trapdoor-based Defense against Model Inversion Attacks","created":"2024-11-13","cited_by_count":5,"area":null},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2309.07415","title":"Client-side Gradient Inversion Against Federated Learning from Poisoning","created":"2023-09-14","cited_by_count":4,"area":null},{"id":"2310.08320","title":"Defending Our Privacy With Backdoors","created":"2023-10-12","cited_by_count":4,"area":null},{"id":"2312.05264","title":"All Rivers Run to the Sea: Private Learning with Asymmetric Flows","created":"2023-12-05","cited_by_count":4,"area":null},{"id":"2403.04149","title":"MAP: MAsk-Pruning for Source-Free Model Intellectual Property Protection","created":"2024-03-07","cited_by_count":4,"area":null},{"id":"2410.05814","title":"Rank Matters: Understanding and Defending Model Inversion Attacks via Low-Rank Feature Filtering","created":"2024-10-08","cited_by_count":4,"area":null},{"id":"2508.00756","title":"LeakyCLIP: Extracting Training Data from CLIP","created":"2025-08-01","cited_by_count":4,"area":"diffusion"},{"id":"2504.18015","title":"DiffMI: Breaking Face Recognition Privacy via Diffusion-Driven Training-Free Model Inversion","created":"2025-04-25","cited_by_count":3,"area":null},{"id":"2508.19641","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","created":"2025-08-27","cited_by_count":3,"area":null},{"id":"2303.09289","title":"Class Attribute Inference Attacks: Inferring Sensitive Class Information by Diffusion-Based Attribute Manipulations","created":"2023-03-16","cited_by_count":2,"area":null},{"id":"2407.08127","title":"Prediction Exposes Your Face: Black-box Model Inversion via Prediction Alignment","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2409.01062","title":"Random Erasing vs. Model Inversion: A Promising Defense or a False Hope?","created":"2024-09-02","cited_by_count":2,"area":null},{"id":"2206.07018","title":"Turning a Curse into a Blessing: Enabling In-Distribution-Data-Free Backdoor Removal via Stabilized Model Inversion","created":"2022-06-14","cited_by_count":1,"area":null},{"id":"2401.13719","title":"Inference Attacks Against Face Recognition Model without Classification Layers","created":"2024-01-24","cited_by_count":1,"area":"safety"},{"id":"2404.08847","title":"LazyDP: Co-Designing Algorithm-Software for Scalable Training of Differentially Private Recommendation Models","created":"2024-04-12","cited_by_count":1,"area":null},{"id":"2502.05509","title":"Do Spikes Protect Privacy? Investigating Black-Box Model Inversion Attacks in Spiking Neural Networks","created":"2025-02-08","cited_by_count":1,"area":null},{"id":"2505.03519","title":"Revisiting Model Inversion Evaluation: From Misleading Standards to Reliable Privacy Assessment","created":"2025-05-06","cited_by_count":1,"area":null},{"id":"2506.09777","title":"Inverting Black-Box Face Recognition Systems via Zero-Order Optimization in Eigenface Space","created":"2025-06-11","cited_by_count":1,"area":null},{"id":"2509.20177","title":"Generative Model Inversion Through the Lens of the Manifold Hypothesis","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2310.15590","title":"Facial Data Minimization: Shallow Model as Your Privacy Filter","created":"2023-10-24","cited_by_count":0,"area":null},{"id":"2312.07040","title":"Rethinking Model Inversion Attacks With Patch-Wise Reconstruction","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2402.18027","title":"Breaking the Black-Box: Confidence-Guided Model Inversion Attack for Distribution Shift","created":"2024-02-28","cited_by_count":0,"area":null},{"id":"2403.07611","title":"Efficient Knowledge Deletion from Trained Models through Layer-wise Partial Machine Unlearning","created":"2024-03-12","cited_by_count":0,"area":"safety"},{"id":"2403.10558","title":"Adaptive Hybrid Masking Strategy for Privacy-Preserving Face Recognition Against Model Inversion Attack","created":"2024-03-14","cited_by_count":0,"area":null},{"id":"2412.07575","title":"Defending Against Neural Network Model Inversion Attacks via Data Poisoning","created":"2024-12-10","cited_by_count":0,"area":"safety"},{"id":"2508.04097","title":"Do Vision-Language Models Leak What They Learn? Adaptive Token-Weighted Model Inversion Attacks","created":"2025-08-06","cited_by_count":0,"area":"mllm"},{"id":"2601.13122","title":"Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forward","created":"2026-01-19","cited_by_count":0,"area":null},{"id":"2604.05296","title":"From Measurement to Mitigation: Quantifying and Reducing Identity Leakage in Image Representation Encoders with Linear Subspace Removal","created":"2026-04-07","cited_by_count":0,"area":null},{"id":"2607.04484","title":"TrustCLIP: Learning Private Visual Features via Adversarial Reconstruction","created":"2026-07-05","cited_by_count":0,"area":"mllm"},{"id":"2607.12354","title":"Reducing information dependency does not cause training data privacy. Adversarially non-robust features do","created":"2026-07-14","cited_by_count":0,"area":null},{"id":"2608.16791","title":"Steering the Flow: Inverting Face Recognition Models via Gradient-Guided Flow Matching","created":"2026-08-17","cited_by_count":0,"area":"diffusion"},{"id":"2609.38136","title":"CLeaR: A Unified Framework for Resolving the Leakage-Degradation Dilemma in Style Transfer","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2610.00382","title":"On the Relationship between Model Quantization and Model Inversion Attacks","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.07677","title":"Adaptive Model Inversion Attacks Generalize a Privacy-Robustness Tradeoff","created":"2026-10-06","cited_by_count":0,"area":null}],"next_cursor":null}