{"total":101,"rows":[{"id":"2308.03825","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","created":"2023-08-07","cited_by_count":489,"area":"safety"},{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290,"area":null},{"id":"2206.10469","title":"The Privacy Onion Effect: Memorization is Relative","created":"2022-06-21","cited_by_count":136,"area":null},{"id":"2207.00099","title":"Measuring Forgetting of Memorized Training Examples","created":"2022-06-30","cited_by_count":118,"area":null},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116,"area":"safety"},{"id":"2402.05668","title":"JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMs","created":"2024-02-08","cited_by_count":95,"area":"safety"},{"id":"2302.03262","title":"Membership Inference Attacks against Diffusion Models","created":"2023-02-07","cited_by_count":86,"area":"diffusion"},{"id":"2403.17336","title":"Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models","created":"2024-03-26","cited_by_count":86,"area":"safety"},{"id":"2305.15560","title":"Differentially Private Synthetic Data via Foundation Model APIs 1: Images","created":"2023-05-24","cited_by_count":65,"area":null},{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2309.05610","title":"Privacy Side Channels in Machine Learning Systems","created":"2023-09-11","cited_by_count":40,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2303.03446","title":"Students Parrot Their Teachers: Membership Inference on Model Distillation","created":"2023-03-06","cited_by_count":33,"area":"safety"},{"id":"2403.00871","title":"Teach LLMs to Phish: Stealing Private Information from Language Models","created":"2024-03-01","cited_by_count":32,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2404.01231","title":"Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models","created":"2024-04-01","cited_by_count":30,"area":null},{"id":"2307.01610","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction","created":"2023-07-04","cited_by_count":29,"area":"safety"},{"id":"2205.08443","title":"On the (In)security of Peer-to-Peer Decentralized Machine Learning","created":"2022-05-17","cited_by_count":23,"area":null},{"id":"2403.09562","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","created":"2024-03-14","cited_by_count":23,"area":"safety"},{"id":"2404.00473","title":"Privacy Backdoors: Stealing Data with Corrupted Pretrained Models","created":"2024-03-30","cited_by_count":22,"area":null},{"id":"2406.16565","title":"Noisy Neighbors: Efficient membership inference attacks against LLMs","created":"2024-06-24","cited_by_count":21,"area":"safety"},{"id":"2206.02617","title":"Individual Privacy Accounting for Differentially Private Stochastic Gradient Descent","created":"2022-06-06","cited_by_count":20,"area":null},{"id":"2305.18447","title":"Unleashing the Power of Randomization in Auditing Differentially Private ML","created":"2023-05-29","cited_by_count":20,"area":null},{"id":"2402.13459","title":"Learning to Poison Large Language Models for Downstream Manipulation","created":"2024-02-21","cited_by_count":16,"area":"lr"},{"id":"2306.01181","title":"TMI! Finetuned Models Leak Private Information from their Pretraining Data","created":"2023-06-01","cited_by_count":14,"area":null},{"id":"2406.18566","title":"Memorized Images in Diffusion Models share a Subspace that can be Located and Deleted","created":"2024-06-01","cited_by_count":13,"area":"diffusion"},{"id":"2207.01991","title":"Conflicting Interactions Among Protection Mechanisms for Machine Learning Models","created":"2022-07-05","cited_by_count":12,"area":null},{"id":"2301.12576","title":"Uncovering Adversarial Risks of Test-Time Adaptation","created":"2023-01-29","cited_by_count":12,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2405.11034","title":"Safety in Graph Machine Learning: Threats and Safeguards","created":"2024-05-17","cited_by_count":11,"area":null},{"id":"2403.08917","title":"Efficiently Computing Similarities to Private Datasets","created":"2024-03-13","cited_by_count":9,"area":null},{"id":"2506.13009","title":"Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective","created":"2025-06-16","cited_by_count":9,"area":"safety"},{"id":"2312.07861","title":"GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networks","created":"2023-12-13","cited_by_count":8,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2207.10802","title":"Combing for Credentials: Active Pattern Extraction from Smart Reply","created":"2022-07-14","cited_by_count":7,"area":null},{"id":"2212.01082","title":"Membership Inference Attacks Against Semantic Segmentation Models","created":"2022-12-02","cited_by_count":7,"area":"safety"},{"id":"2308.11521","title":"Self-Deception: Reverse Penetrating the Semantic Firewall of Large Language Models","created":"2023-08-16","cited_by_count":7,"area":"safety"},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2306.00133","title":"A Note On Interpreting Canary Exposure","created":"2023-05-31","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2408.17354","title":"Forget to Flourish: Leveraging Machine-Unlearning on Pretrained Language Models for Privacy Leakage","created":"2024-08-30","cited_by_count":6,"area":"safety"},{"id":"2502.19537","title":"No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2506.05126","title":"Membership Inference Attacks on Sequence Models","created":"2025-06-05","cited_by_count":6,"area":"safety"},{"id":"2510.05159","title":"Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain","created":"2025-10-03","cited_by_count":6,"area":"agents"},{"id":"2205.09986","title":"SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning","created":"2022-05-20","cited_by_count":5,"area":null},{"id":"2308.01469","title":"VertexSerum: Poisoning Graph Neural Networks for Link Inference","created":"2023-08-02","cited_by_count":5,"area":null},{"id":"2310.03838","title":"Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning","created":"2023-10-05","cited_by_count":5,"area":"safety"},{"id":"2310.11739","title":"Unintended Memorization in Large ASR Models, and How to Mitigate It","created":"2023-10-18","cited_by_count":5,"area":null},{"id":"2406.07314","title":"Rethinking the impact of noisy labels in graph classification: A utility and privacy perspective","created":"2024-06-11","cited_by_count":5,"area":null},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2410.11205","title":"Adversarially Guided Stateful Defense Against Backdoor Attacks in Federated Deep Learning","created":"2024-10-15","cited_by_count":5,"area":null},{"id":"2505.15656","title":"Be Careful When Fine-tuning On Open-Source LLMs: Your Fine-tuning Data Could Be Secretly Stolen!","created":"2025-05-21","cited_by_count":5,"area":"safety"},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2310.08320","title":"Defending Our Privacy With Backdoors","created":"2023-10-12","cited_by_count":4,"area":null},{"id":"2311.07389","title":"Transpose Attack: Stealing Datasets with Bidirectional Training","created":"2023-11-13","cited_by_count":4,"area":null},{"id":"2409.06280","title":"Anonymity Unveiled: A Practical Framework for Auditing Data Use in Deep Learning Models","created":"2024-09-10","cited_by_count":4,"area":null},{"id":"2510.13451","title":"Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts","created":"2025-10-15","cited_by_count":4,"area":"safety"},{"id":"2601.18110","title":"AttenMIA: LLM Membership Inference Attack through Attention Signals","created":"2026-01-26","cited_by_count":4,"area":"safety"},{"id":"2603.04459","title":"Benchmark of Benchmarks: Unpacking Influence and Code Repository Quality in LLM Safety Benchmarks","created":"2026-03-03","cited_by_count":4,"area":"safety"},{"id":"2606.09401","title":"Benchmarking Empirical Privacy Protection for Adaptations of Large Language Models","created":"2026-06-08","cited_by_count":4,"area":null},{"id":"2404.09481","title":"SpamDam: Towards Privacy-Preserving and Adversary-Resistant SMS Spam Detection","created":"2024-04-15","cited_by_count":3,"area":null},{"id":"2405.05611","title":"Privacy-Preserving Edge Federated Learning for Intelligent Mobile-Health Systems","created":"2024-05-09","cited_by_count":3,"area":null},{"id":"2409.01688","title":"Differentially Private Kernel Density Estimation","created":"2024-09-03","cited_by_count":3,"area":null},{"id":"2411.14516","title":"Memory Backdoor Attacks on Neural Networks","created":"2024-11-21","cited_by_count":3,"area":null},{"id":"2503.07697","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","created":"2025-03-10","cited_by_count":3,"area":"safety"},{"id":"2504.04033","title":"Disparate Privacy Vulnerability: Targeted Attribute Inference Attacks and Defenses","created":"2025-04-05","cited_by_count":3,"area":null},{"id":"2506.05743","title":"When Better Features Mean Greater Risks: The Performance-Privacy Trade-Off in Contrastive Learning","created":"2025-06-06","cited_by_count":3,"area":"safety"},{"id":"2210.16205","title":"Local Model Reconstruction Attacks in Federated Learning and their Uses","created":"2022-10-28","cited_by_count":2,"area":null},{"id":"2310.18606","title":"Where have you been? A Study of Privacy Risk for Point-of-Interest Recommendation","created":"2023-10-28","cited_by_count":2,"area":null},{"id":"2407.00866","title":"Silver Linings in the Shadows: Harnessing Membership Inference for Machine Unlearning","created":"2024-07-01","cited_by_count":2,"area":"safety"},{"id":"2506.02711","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","created":"2025-06-03","cited_by_count":2,"area":"safety"},{"id":"2605.01129","title":"Revisiting Privacy Leakage in Machine Unlearning: Membership Inference Beyond the Forgotten Set","created":"2026-05-01","cited_by_count":2,"area":"safety"},{"id":"2307.05193","title":"Membership Inference Attacks on DNNs using Adversarial Perturbations","created":"2023-07-11","cited_by_count":1,"area":"safety"},{"id":"2311.03075","title":"SoK: Memorisation in machine learning","created":"2023-11-06","cited_by_count":1,"area":null},{"id":"2312.14461","title":"Attacking Byzantine Robust Aggregation in High Dimensions","created":"2023-12-22","cited_by_count":1,"area":null},{"id":"2505.11586","title":"The Ripple Effect: On Unforeseen Complications of Backdoor Attacks","created":"2025-05-16","cited_by_count":1,"area":null},{"id":"2505.17092","title":"Covert Attacks on Machine Learning Training in Passively Secure MPC","created":"2025-05-21","cited_by_count":1,"area":null},{"id":"2505.20095","title":"Spurious Privacy Leakage in Neural Networks","created":"2025-05-26","cited_by_count":1,"area":null},{"id":"2605.25073","title":"Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions","created":"2026-05-24","cited_by_count":1,"area":"safety"},{"id":"2606.17110","title":"Loss Landscape Poisoning: Targeted Extraction of Unseen Training Data from LLMs","created":"2026-06-15","cited_by_count":1,"area":null},{"id":"2607.06815","title":"Behavioral Privacy Leakage in Agentic Negotiation: Formalizing and Mitigating Inference Attacks via Randomized Policies","created":"2026-07-07","cited_by_count":1,"area":"agents"},{"id":"2303.09067","title":"Secret-Keeping in Question Answering","created":"2023-03-16","cited_by_count":0,"area":null},{"id":"2303.12589","title":"Do Backdoors Assist Membership Inference Attacks?","created":"2023-03-22","cited_by_count":0,"area":null},{"id":"2304.00083","title":"A Generative Framework for Low-Cost Result Validation of Machine Learning-as-a-Service Inference","created":"2023-03-31","cited_by_count":0,"area":null},{"id":"2307.08811","title":"Co(ve)rtex: ML Models as storage channels and their (mis-)applications","created":"2023-07-17","cited_by_count":0,"area":null},{"id":"2408.02814","title":"Pre-trained Encoder Inference: Revealing Upstream Encoders In Downstream Machine Learning Services","created":"2024-08-05","cited_by_count":0,"area":null},{"id":"2412.07575","title":"Defending Against Neural Network Model Inversion Attacks via Data Poisoning","created":"2024-12-10","cited_by_count":0,"area":"safety"},{"id":"2503.09365","title":"Membership Inference Attacks fueled by Few-Short Learning to detect privacy leakage tackling data integrity","created":"2025-03-12","cited_by_count":0,"area":"safety"},{"id":"2506.11413","title":"Byzantine Outside, Curious Inside: Reconstructing Data Through Malicious Updates","created":"2025-06-13","cited_by_count":0,"area":null},{"id":"2512.08291","title":"Exposing and Defending Membership Leakage in Vulnerability Prediction Models","created":"2025-12-09","cited_by_count":0,"area":"safety"},{"id":"2601.09460","title":"SoK: Enhancing Cryptographic Collaborative Learning with Differential Privacy","created":"2026-01-14","cited_by_count":0,"area":null},{"id":"2602.19020","title":"Learning to Detect Language Model Training Data via Active Reconstruction","created":"2026-02-22","cited_by_count":0,"area":"safety"},{"id":"2604.27426","title":"Secret Stealing Attacks on Local LLM Fine-Tuning through Supply-Chain Model Code Backdoors","created":"2026-04-30","cited_by_count":0,"area":"safety"},{"id":"2606.10091","title":"SoK: Colluding Adversaries in Machine Learning Pipelines","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2606.31474","title":"TabPATE: Differentially Private Tabular In-Context Learning Without Public Data","created":"2026-06-30","cited_by_count":0,"area":"safety"},{"id":"2608.17722","title":"MemCatalyst: Amplifying Data Auditing on Vision-Language Models via Data Poisoning","created":"2026-08-18","cited_by_count":0,"area":"mllm"}],"next_cursor":"100"}