{"total":107,"rows":[{"id":"2210.17546","title":"Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacy","created":"2022-10-31","cited_by_count":100,"area":null},{"id":"2208.12591","title":"On the Implicit Bias in Deep-Learning Algorithms","created":"2022-08-26","cited_by_count":86,"area":null},{"id":"2307.09542","title":"Can Neural Network Memorization Be Localized?","created":"2023-07-18","cited_by_count":69,"area":null},{"id":"2210.00038","title":"Differentially Private Optimization on Large Model at Small Cost","created":"2022-09-30","cited_by_count":65,"area":null},{"id":"2305.15560","title":"Differentially Private Synthetic Data via Foundation Model APIs 1: Images","created":"2023-05-24","cited_by_count":65,"area":null},{"id":"2303.11165","title":"Computationally Budgeted Continual Learning: What Does Matter?","created":"2023-03-20","cited_by_count":61,"area":null},{"id":"2311.11908","title":"Continual Learning: Applications and the Road Forward","created":"2023-11-20","cited_by_count":59,"area":null},{"id":"2210.00036","title":"Differentially Private Bias-Term Fine-tuning of Foundation Models","created":"2022-09-30","cited_by_count":48,"area":null},{"id":"2305.16157","title":"Training Data Extraction From Pre-trained Language Models: A Survey","created":"2023-05-25","cited_by_count":45,"area":null},{"id":"2302.03098","title":"One-shot Empirical Privacy Estimation for Federated Learning","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2307.01827","title":"Deconstructing Data Reconstruction: Multiclass, Weight Decay and General Losses","created":"2023-07-04","cited_by_count":26,"area":null},{"id":"2305.14822","title":"Can Copyright be Reduced to Privacy?","created":"2023-05-24","cited_by_count":24,"area":null},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23,"area":null},{"id":"2410.04207","title":"Learning on LoRAs: GL-Equivariant Processing of Low-Rank Weight Spaces for Large Finetuned Models","created":"2024-10-05","cited_by_count":22,"area":null},{"id":"2303.17046","title":"Have it your way: Individualized Privacy Assignment for DP-SGD","created":"2023-03-29","cited_by_count":21,"area":null},{"id":"2309.17310","title":"Leave-one-out Distinguishability in Machine Learning","created":"2023-09-29","cited_by_count":20,"area":null},{"id":"2405.14457","title":"Tighter Privacy Auditing of DP-SGD in the Hidden State Threat Model","created":"2024-05-23","cited_by_count":18,"area":null},{"id":"2410.22069","title":"Flavors of Margin: Implicit Bias of Steepest Descent in Homogeneous Neural Networks","created":"2024-10-29","cited_by_count":18,"area":null},{"id":"2302.01622","title":"Private, fair and accurate: Training large-scale, privacy-preserving AI models in medical imaging","created":"2023-02-03","cited_by_count":17,"area":null},{"id":"2306.06479","title":"Learning a Neuron by a Shallow ReLU Network: Dynamics and Implicit Bias for Correlated Inputs","created":"2023-06-10","cited_by_count":16,"area":null},{"id":"2302.01428","title":"Understanding Reconstruction Attacks with the Neural Tangent Kernel and Dataset Distillation","created":"2023-02-02","cited_by_count":14,"area":null},{"id":"2312.05114","title":"The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against \"Truly Anonymous\" Synthetic Datasets","created":"2023-12-08","cited_by_count":14,"area":null},{"id":"2402.09327","title":"Information Complexity of Stochastic Convex Optimization: Applications to Generalization and Memorization","created":"2024-02-14","cited_by_count":14,"area":null},{"id":"2504.19373","title":"Doxing via the Lens: Revealing Location-related Privacy Leakage on Multi-modal Large Reasoning Models","created":"2025-04-27","cited_by_count":14,"area":null},{"id":"2309.17319","title":"Building Privacy-Preserving and Secure Geospatial Artificial Intelligence Foundation Models","created":"2023-09-29","cited_by_count":12,"area":null},{"id":"2209.08660","title":"Learn the Time to Learn: Replay Scheduling in Continual Learning","created":"2022-09-18","cited_by_count":11,"area":null},{"id":"2306.00127","title":"Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning","created":"2023-05-31","cited_by_count":11,"area":null},{"id":"2402.19232","title":"Trained Random Forests Completely Reveal your Dataset","created":"2024-02-29","cited_by_count":11,"area":null},{"id":"2602.16340","title":"The Implicit Bias of Adam and Muon on Smooth Homogeneous Neural Networks","created":"2026-02-18","cited_by_count":11,"area":null},{"id":"2305.09275","title":"Rapid Adaptation in Online Continual Learning: Are We Evaluating It Right?","created":"2023-05-16","cited_by_count":10,"area":null},{"id":"2310.20579","title":"Initialization Matters: Privacy-Utility Analysis of Overparameterized Neural Networks","created":"2023-10-31","cited_by_count":10,"area":null},{"id":"2309.07809","title":"Communication Efficient Private Federated Learning Using Dithering","created":"2023-09-14","cited_by_count":9,"area":null},{"id":"2403.08917","title":"Efficiently Computing Similarities to Private Datasets","created":"2024-03-13","cited_by_count":9,"area":null},{"id":"2303.00783","title":"Adversarial Examples Exist in Two-Layer ReLU Networks for Low Dimensional Linear Subspaces","created":"2023-03-01","cited_by_count":8,"area":null},{"id":"2305.18497","title":"Collaborative Learning via Prediction Consensus","created":"2023-05-29","cited_by_count":8,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2305.03350","title":"Reconstructing Training Data from Multiclass Neural Networks","created":"2023-05-05","cited_by_count":7,"area":null},{"id":"2310.15826","title":"One or Two Things We know about Concept Drift -- A Survey on Monitoring Evolving Environments","created":"2023-10-24","cited_by_count":7,"area":null},{"id":"2506.00660","title":"Differential privacy for medical deep learning: methods, tradeoffs, and deployment implications","created":"2025-05-31","cited_by_count":7,"area":null},{"id":"2309.13016","title":"Understanding Deep Gradient Leakage via Inversion Influence Functions","created":"2023-09-22","cited_by_count":6,"area":null},{"id":"2402.09478","title":"Data Reconstruction Attacks and Defenses: A Systematic Evaluation","created":"2024-02-13","cited_by_count":6,"area":null},{"id":"2311.06231","title":"Learning Human Action Recognition Representations Without Real Humans","created":"2023-11-10","cited_by_count":5,"area":null},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2311.07389","title":"Transpose Attack: Stealing Datasets with Bidirectional Training","created":"2023-11-13","cited_by_count":4,"area":null},{"id":"2312.02470","title":"Generator Born from Classifier","created":"2023-12-05","cited_by_count":4,"area":null},{"id":"2403.01268","title":"Defending Against Data Reconstruction Attacks in Federated Learning: An Information Theory Approach","created":"2024-03-02","cited_by_count":4,"area":null},{"id":"2408.16913","title":"Analyzing Inference Privacy Risks Through Gradients in Machine Learning","created":"2024-08-29","cited_by_count":4,"area":null},{"id":"2412.08544","title":"Training Data Reconstruction: Privacy due to Uncertainty?","created":"2024-12-11","cited_by_count":4,"area":null},{"id":"2502.09150","title":"Shortcut Learning Susceptibility in Vision Classifiers","created":"2025-02-13","cited_by_count":4,"area":null},{"id":"2506.15553","title":"Approximating Language Model Training Data from Weights","created":"2025-06-18","cited_by_count":4,"area":null},{"id":"2211.16488","title":"Taming Normalizing Flows","created":"2022-11-29","cited_by_count":3,"area":null},{"id":"2310.01304","title":"Coupling public and private gradient provably helps optimization","created":"2023-10-02","cited_by_count":3,"area":null},{"id":"2407.12669","title":"Enhancing the Utility of Privacy-Preserving Cancer Classification using Synthetic Data","created":"2024-07-17","cited_by_count":3,"area":null},{"id":"2409.01688","title":"Differentially Private Kernel Density Estimation","created":"2024-09-03","cited_by_count":3,"area":null},{"id":"2411.14516","title":"Memory Backdoor Attacks on Neural Networks","created":"2024-11-21","cited_by_count":3,"area":null},{"id":"2509.22214","title":"A Law of Data Reconstruction for Random Features (and Beyond)","created":"2025-09-26","cited_by_count":3,"area":null},{"id":"2512.15460","title":"From Risk to Resilience: Towards Assessing and Mitigating the Risk of Data Reconstruction Attacks in Federated Learning","created":"2025-12-17","cited_by_count":3,"area":null},{"id":"2402.02407","title":"Defining Neural Network Architecture through Polytope Structures of Dataset","created":"2024-02-04","cited_by_count":2,"area":null},{"id":"2408.04261","title":"Unveiling Hidden Visual Information: A Reconstruction Attack Against Adversarial Visual Information Hiding","created":"2024-08-08","cited_by_count":2,"area":null},{"id":"2411.15831","title":"Efficient and Private: Memorisation under differentially private parameter-efficient fine-tuning in language models","created":"2024-11-24","cited_by_count":2,"area":null},{"id":"2503.09649","title":"Technical and Legal Aspects of Federated Learning in Bioinformatics: Applications, Challenges and Opportunities","created":"2025-03-12","cited_by_count":2,"area":null},{"id":"2507.17228","title":"P3SL: Personalized Privacy-Preserving Split Learning on Heterogeneous Edge Devices","created":"2025-07-23","cited_by_count":2,"area":null},{"id":"2305.15563","title":"Fantastic DNN Classifiers and How to Identify them without Data","created":"2023-05-24","cited_by_count":1,"area":null},{"id":"2306.06414","title":"Revealing Model Biases: Assessing Deep Neural Networks via Recovered Sample Analysis","created":"2023-06-10","cited_by_count":1,"area":null},{"id":"2311.06816","title":"On original and latent space connectivity in deep neural networks","created":"2023-11-12","cited_by_count":1,"area":null},{"id":"2312.04590","title":"Reconciling AI Performance and Data Reconstruction Resilience for Medical Imaging","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2401.10859","title":"Ensembler: Protect Collaborative Inference Privacy from Model Inversion Attack via Selective Ensemble","created":"2024-01-19","cited_by_count":1,"area":null},{"id":"2403.17329","title":"Deep Support Vectors","created":"2024-03-26","cited_by_count":1,"area":null},{"id":"2404.08847","title":"LazyDP: Co-Designing Algorithm-Software for Scalable Training of Differentially Private Recommendation Models","created":"2024-04-12","cited_by_count":1,"area":null},{"id":"2405.00348","title":"Practical Dataset Distillation Based on Deep Support Vectors","created":"2024-05-01","cited_by_count":1,"area":null},{"id":"2410.16884","title":"Network Inversion for Training-Like Data Reconstruction","created":"2024-10-22","cited_by_count":1,"area":null},{"id":"2504.10190","title":"Differentially Private 2D Human Pose Estimation","created":"2025-04-14","cited_by_count":1,"area":null},{"id":"2505.20026","title":"Gradient Inversion Transcript: Leveraging Robust Generative Priors to Reconstruct Training Data from Gradient Leakage","created":"2025-05-26","cited_by_count":1,"area":null},{"id":"2506.23296","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","created":"2025-06-29","cited_by_count":1,"area":null},{"id":"2509.21296","title":"No Prior, No Leakage: Revisiting Reconstruction Attacks in Trained Neural Networks","created":"2025-09-25","cited_by_count":1,"area":null},{"id":"2602.08723","title":"Data Reconstruction: Identifiability and Optimization with Sample Splitting","created":"2026-02-09","cited_by_count":1,"area":null},{"id":"2603.01053","title":"Turning Black Box into White Box: Dataset Distillation Leaks","created":"2026-03-01","cited_by_count":1,"area":null},{"id":"2312.07040","title":"Rethinking Model Inversion Attacks With Patch-Wise Reconstruction","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2312.15897","title":"Recursive Distillation for Open-Set Distributed Robot Localization","created":"2023-12-26","cited_by_count":0,"area":null},{"id":"2402.15968","title":"CoDream: Exchanging dreams instead of models for federated aggregation with heterogeneous models","created":"2024-02-25","cited_by_count":0,"area":null},{"id":"2402.17621","title":"Supervised machine learning for microbiomics: bridging the gap between current and best practices","created":"2024-02-27","cited_by_count":0,"area":null},{"id":"2406.02600","title":"Data Quality in Edge Machine Learning: A State-of-the-Art Survey","created":"2024-06-01","cited_by_count":0,"area":null},{"id":"2407.13000","title":"Novel Deep Neural Network Classifier Characterization Metrics with Applications to Dataless Evaluation","created":"2024-07-17","cited_by_count":0,"area":null},{"id":"2408.12119","title":"Understanding Data Reconstruction Leakage in Federated Learning from a Theoretical Perspective","created":"2024-08-22","cited_by_count":0,"area":null},{"id":"2409.13466","title":"Global Outlier Detection in a Federated Learning Setting with Isolation Forest","created":"2024-09-20","cited_by_count":0,"area":null},{"id":"2409.19138","title":"Sequencing the Neurome: Towards Scalable Exact Parameter Reconstruction of Black-Box Neural Networks","created":"2024-09-27","cited_by_count":0,"area":null},{"id":"2411.06916","title":"Slowing Down Forgetting in Continual Learning","created":"2024-11-11","cited_by_count":0,"area":null},{"id":"2411.16458","title":"On the Reconstruction of Training Data from Group Invariant Networks","created":"2024-11-25","cited_by_count":0,"area":null},{"id":"2411.17777","title":"Network Inversion and Its Applications","created":"2024-11-26","cited_by_count":0,"area":null},{"id":"2412.01756","title":"Adversarial Sample-Based Approach for Tighter Privacy Auditing in Final Model-Only Scenarios","created":"2024-12-02","cited_by_count":0,"area":null},{"id":"2502.05307","title":"Training Set Reconstruction from Differentially Private Forests: How Effective is DP?","created":"2025-02-07","cited_by_count":0,"area":null},{"id":"2505.14323","title":"Securing Transfer-Learned Networks with Reverse Homomorphic Encryption","created":"2025-05-20","cited_by_count":0,"area":null},{"id":"2505.19019","title":"Querying Kernel Methods Suffices for Reconstructing their Training Data","created":"2025-05-25","cited_by_count":0,"area":null},{"id":"2507.18372","title":"On Reconstructing Training Data From Bayesian Posteriors and Trained Models","created":"2025-07-24","cited_by_count":0,"area":null},{"id":"2601.13122","title":"Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forward","created":"2026-01-19","cited_by_count":0,"area":null},{"id":"2602.06110","title":"Private and interpretable clinical prediction with quantum-inspired tensor train models","created":"2026-02-05","cited_by_count":0,"area":null},{"id":"2602.07999","title":"Tighter Information-Theoretic Generalization Bounds via a Novel Class of Change of Measure Inequalities","created":"2026-02-08","cited_by_count":0,"area":null},{"id":"2605.06519","title":"Efficient Techniques for Data Reconstruction, with Finite-Width Recovery Guarantees","created":"2026-05-07","cited_by_count":0,"area":null},{"id":"2606.17995","title":"Differential Privacy of Gaussian Process Posterior Sampling","created":"2026-06-16","cited_by_count":0,"area":null}],"next_cursor":"100"}