{"total":56,"rows":[{"id":"2304.01669","title":"Re-thinking Model Inversion Attacks Against Deep Neural Networks","created":"2023-04-04","cited_by_count":39,"area":null},{"id":"2304.04625","title":"Reinforcement Learning-Based Black-Box Model Inversion Attacks","created":"2023-04-10","cited_by_count":33,"area":null},{"id":"2209.10505","title":"Text Revealer: Private Text Reconstruction via Model Inversion Attacks against Transformers","created":"2022-09-21","cited_by_count":31,"area":null},{"id":"2402.04013","title":"Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses","created":"2024-02-06","cited_by_count":30,"area":null},{"id":"2302.09814","title":"Pseudo Label-Guided Model Inversion Attack via Conditional Generative Adversarial Network","created":"2023-02-20","cited_by_count":28,"area":null},{"id":"2211.00525","title":"The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Training","created":"2022-11-01","cited_by_count":23,"area":null},{"id":"2310.19342","title":"Label-Only Model Inversion Attacks via Knowledge Transfer","created":"2023-10-30","cited_by_count":21,"area":null},{"id":"2404.12922","title":"Is Retain Set All You Need in Machine Unlearning? Restoring Performance of Unlearned Models with Out-Of-Distribution Images","created":"2024-04-19","cited_by_count":18,"area":"safety"},{"id":"2407.13863","title":"A Closer Look at GAN Priors: Exploiting Intermediate Features for Enhanced Model Inversion Attacks","created":"2024-07-18","cited_by_count":18,"area":null},{"id":"2306.09104","title":"On Strengthening and Defending Graph Reconstruction Attack with Markov Chain Approximation","created":"2023-06-15","cited_by_count":16,"area":null},{"id":"2307.08424","title":"Unstoppable Attack: Label-Only Model Inversion via Conditional Diffusion Model","created":"2023-07-17","cited_by_count":14,"area":"diffusion"},{"id":"2310.06549","title":"Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks","created":"2023-10-10","cited_by_count":13,"area":null},{"id":"2405.05588","title":"Model Inversion Robustness: Can Transfer Learning Help?","created":"2024-05-09","cited_by_count":12,"area":null},{"id":"2405.11336","title":"UPAM: Unified Prompt Attack in Text-to-Image Generation Models Against Both Textual Filters and Visual Checkers","created":"2024-05-18","cited_by_count":12,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2409.01696","title":"On the Vulnerability of Skip Connections to Model Inversion Attacks","created":"2024-09-03","cited_by_count":9,"area":null},{"id":"2306.13965","title":"Boosting Model Inversion Attacks with Adversarial Examples","created":"2023-06-24","cited_by_count":8,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2405.03911","title":"Federated Graph Condensation with Information Bottleneck Principles","created":"2024-05-07","cited_by_count":8,"area":null},{"id":"2402.08227","title":"Privacy-Preserving Language Model Inference with Instance Obfuscation","created":"2024-02-13","cited_by_count":7,"area":null},{"id":"2410.05159","title":"MIBench: A Comprehensive Framework for Benchmarking Model Inversion Attack and Defense","created":"2024-10-07","cited_by_count":5,"area":null},{"id":"2411.08460","title":"Trap-MID: Trapdoor-based Defense against Model Inversion Attacks","created":"2024-11-13","cited_by_count":5,"area":null},{"id":"2210.11728","title":"Distilling the Undistillable: Learning from a Nasty Teacher","created":"2022-10-21","cited_by_count":4,"area":"distill"},{"id":"2309.07415","title":"Client-side Gradient Inversion Against Federated Learning from Poisoning","created":"2023-09-14","cited_by_count":4,"area":null},{"id":"2312.05264","title":"All Rivers Run to the Sea: Private Learning with Asymmetric Flows","created":"2023-12-05","cited_by_count":4,"area":null},{"id":"2405.15316","title":"Decaf: Data Distribution Decompose Attack against Federated Learning","created":"2024-05-24","cited_by_count":4,"area":"safety"},{"id":"2405.17472","title":"FreezeAsGuard: Mitigating Illegal Adaptation of Diffusion Models via Selective Tensor Freezing","created":"2024-05-24","cited_by_count":4,"area":"diffusion"},{"id":"2508.00756","title":"LeakyCLIP: Extracting Training Data from CLIP","created":"2025-08-01","cited_by_count":4,"area":"diffusion"},{"id":"2410.10091","title":"Out-of-Bounding-Box Triggers: A Stealthy Approach to Cheat Object Detectors","created":"2024-10-14","cited_by_count":3,"area":null},{"id":"2412.01495","title":"Adversarial Attacks on Hyperbolic Networks","created":"2024-12-02","cited_by_count":3,"area":null},{"id":"2502.19070","title":"A Sample-Level Evaluation and Generative Framework for Model Inversion Attacks","created":"2025-02-26","cited_by_count":3,"area":null},{"id":"2303.09289","title":"Class Attribute Inference Attacks: Inferring Sensitive Class Information by Diffusion-Based Attribute Manipulations","created":"2023-03-16","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2407.08127","title":"Prediction Exposes Your Face: Black-box Model Inversion via Prediction Alignment","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2409.01062","title":"Random Erasing vs. Model Inversion: A Promising Defense or a False Hope?","created":"2024-09-02","cited_by_count":2,"area":null},{"id":"2511.15316","title":"What Your Features Reveal: Data-Efficient Black-Box Feature Inversion Attack for Split DNNs","created":"2025-11-19","cited_by_count":2,"area":null},{"id":"2401.10859","title":"Ensembler: Protect Collaborative Inference Privacy from Model Inversion Attack via Selective Ensemble","created":"2024-01-19","cited_by_count":1,"area":null},{"id":"2404.13860","title":"Distributional Black-Box Model Inversion Attack with Multi-Agent Reinforcement Learning","created":"2024-04-22","cited_by_count":1,"area":null},{"id":"2405.00348","title":"Practical Dataset Distillation Based on Deep Support Vectors","created":"2024-05-01","cited_by_count":1,"area":null},{"id":"2501.16671","title":"Data-Free Model-Related Attacks: Unleashing the Potential of Generative AI","created":"2025-01-28","cited_by_count":1,"area":null},{"id":"2502.05509","title":"Do Spikes Protect Privacy? Investigating Black-Box Model Inversion Attacks in Spiking Neural Networks","created":"2025-02-08","cited_by_count":1,"area":null},{"id":"2505.03519","title":"Revisiting Model Inversion Evaluation: From Misleading Standards to Reliable Privacy Assessment","created":"2025-05-06","cited_by_count":1,"area":null},{"id":"2508.06244","title":"Membership Inference Attack with Partial Features","created":"2025-08-08","cited_by_count":1,"area":"safety"},{"id":"2509.20177","title":"Generative Model Inversion Through the Lens of the Manifold Hypothesis","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2603.01053","title":"Turning Black Box into White Box: Dataset Distillation Leaks","created":"2026-03-01","cited_by_count":1,"area":null},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2402.18027","title":"Breaking the Black-Box: Confidence-Guided Model Inversion Attack for Distribution Shift","created":"2024-02-28","cited_by_count":0,"area":null},{"id":"2502.14370","title":"PPO-MI: Efficient Black-Box Model Inversion via Proximal Policy Optimization","created":"2025-02-20","cited_by_count":0,"area":"deeprl"},{"id":"2503.09306","title":"Revealing Unintentional Information Leakage in Low-Dimensional Facial Portrait Representations","created":"2025-03-12","cited_by_count":0,"area":null},{"id":"2508.04097","title":"Do Vision-Language Models Leak What They Learn? Adaptive Token-Weighted Model Inversion Attacks","created":"2025-08-06","cited_by_count":0,"area":"mllm"},{"id":"2511.12233","title":"Model Inversion Attack Against Deep Hashing","created":"2025-11-15","cited_by_count":0,"area":null},{"id":"2601.17360","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","created":"2026-01-24","cited_by_count":0,"area":null},{"id":"2607.12354","title":"Reducing information dependency does not cause training data privacy. Adversarially non-robust features do","created":"2026-07-14","cited_by_count":0,"area":null},{"id":"2609.38136","title":"CLeaR: A Unified Framework for Resolving the Leakage-Degradation Dilemma in Style Transfer","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2610.00382","title":"On the Relationship between Model Quantization and Model Inversion Attacks","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}