{"total":133,"rows":[{"id":"2210.17546","title":"Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacy","created":"2022-10-31","cited_by_count":100,"area":null},{"id":"2208.12591","title":"On the Implicit Bias in Deep-Learning Algorithms","created":"2022-08-26","cited_by_count":86,"area":null},{"id":"2307.09542","title":"Can Neural Network Memorization Be Localized?","created":"2023-07-18","cited_by_count":69,"area":null},{"id":"2210.00038","title":"Differentially Private Optimization on Large Model at Small Cost","created":"2022-09-30","cited_by_count":65,"area":null},{"id":"2305.15560","title":"Differentially Private Synthetic Data via Foundation Model APIs 1: Images","created":"2023-05-24","cited_by_count":65,"area":null},{"id":"2303.11165","title":"Computationally Budgeted Continual Learning: What Does Matter?","created":"2023-03-20","cited_by_count":61,"area":null},{"id":"2311.11908","title":"Continual Learning: Applications and the Road Forward","created":"2023-11-20","cited_by_count":59,"area":null},{"id":"2210.00036","title":"Differentially Private Bias-Term Fine-tuning of Foundation Models","created":"2022-09-30","cited_by_count":48,"area":null},{"id":"2302.07225","title":"Bounding Training Data Reconstruction in DP-SGD","created":"2023-02-14","cited_by_count":46,"area":"safety"},{"id":"2305.16157","title":"Training Data Extraction From Pre-trained Language Models: A Survey","created":"2023-05-25","cited_by_count":45,"area":null},{"id":"2302.03098","title":"One-shot Empirical Privacy Estimation for Federated Learning","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2307.01827","title":"Deconstructing Data Reconstruction: Multiclass, Weight Decay and General Losses","created":"2023-07-04","cited_by_count":26,"area":null},{"id":"2305.14822","title":"Can Copyright be Reduced to Privacy?","created":"2023-05-24","cited_by_count":24,"area":null},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23,"area":null},{"id":"2410.04207","title":"Learning on LoRAs: GL-Equivariant Processing of Low-Rank Weight Spaces for Large Finetuned Models","created":"2024-10-05","cited_by_count":22,"area":null},{"id":"2303.17046","title":"Have it your way: Individualized Privacy Assignment for DP-SGD","created":"2023-03-29","cited_by_count":21,"area":null},{"id":"2306.07273","title":"Gaussian Membership Inference Privacy","created":"2023-06-12","cited_by_count":21,"area":"safety"},{"id":"2309.17310","title":"Leave-one-out Distinguishability in Machine Learning","created":"2023-09-29","cited_by_count":20,"area":null},{"id":"2405.14457","title":"Tighter Privacy Auditing of DP-SGD in the Hidden State Threat Model","created":"2024-05-23","cited_by_count":18,"area":null},{"id":"2410.22069","title":"Flavors of Margin: Implicit Bias of Steepest Descent in Homogeneous Neural Networks","created":"2024-10-29","cited_by_count":18,"area":null},{"id":"2302.01622","title":"Private, fair and accurate: Training large-scale, privacy-preserving AI models in medical imaging","created":"2023-02-03","cited_by_count":17,"area":null},{"id":"2306.06479","title":"Learning a Neuron by a Shallow ReLU Network: Dynamics and Implicit Bias for Correlated Inputs","created":"2023-06-10","cited_by_count":16,"area":null},{"id":"2302.01428","title":"Understanding Reconstruction Attacks with the Neural Tangent Kernel and Dataset Distillation","created":"2023-02-02","cited_by_count":14,"area":null},{"id":"2312.05114","title":"The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against \"Truly Anonymous\" Synthetic Datasets","created":"2023-12-08","cited_by_count":14,"area":null},{"id":"2402.09327","title":"Information Complexity of Stochastic Convex Optimization: Applications to Generalization and Memorization","created":"2024-02-14","cited_by_count":14,"area":null},{"id":"2504.19373","title":"Doxing via the Lens: Revealing Location-related Privacy Leakage on Multi-modal Large Reasoning Models","created":"2025-04-27","cited_by_count":14,"area":null},{"id":"2402.09225","title":"Is My Data in Your AI? Membership Inference Test (MINT) applied to Face Biometrics","created":"2024-02-14","cited_by_count":13,"area":"safety"},{"id":"2309.17319","title":"Building Privacy-Preserving and Secure Geospatial Artificial Intelligence Foundation Models","created":"2023-09-29","cited_by_count":12,"area":null},{"id":"2407.15845","title":"Reconstructing Training Data From Real World Models Trained with Transfer Learning","created":"2024-07-22","cited_by_count":12,"area":"wm"},{"id":"2209.08660","title":"Learn the Time to Learn: Replay Scheduling in Continual Learning","created":"2022-09-18","cited_by_count":11,"area":null},{"id":"2306.00127","title":"Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning","created":"2023-05-31","cited_by_count":11,"area":null},{"id":"2402.19232","title":"Trained Random Forests Completely Reveal your Dataset","created":"2024-02-29","cited_by_count":11,"area":null},{"id":"2602.16340","title":"The Implicit Bias of Adam and Muon on Smooth Homogeneous Neural Networks","created":"2026-02-18","cited_by_count":11,"area":null},{"id":"2305.09275","title":"Rapid Adaptation in Online Continual Learning: Are We Evaluating It Right?","created":"2023-05-16","cited_by_count":10,"area":null},{"id":"2310.20579","title":"Initialization Matters: Privacy-Utility Analysis of Overparameterized Neural Networks","created":"2023-10-31","cited_by_count":10,"area":null},{"id":"2309.07809","title":"Communication Efficient Private Federated Learning Using Dithering","created":"2023-09-14","cited_by_count":9,"area":null},{"id":"2403.08917","title":"Efficiently Computing Similarities to Private Datasets","created":"2024-03-13","cited_by_count":9,"area":null},{"id":"2407.01251","title":"QUEEN: Query Unlearning against Model Extraction","created":"2024-07-01","cited_by_count":9,"area":"safety"},{"id":"2303.00783","title":"Adversarial Examples Exist in Two-Layer ReLU Networks for Low Dimensional Linear Subspaces","created":"2023-03-01","cited_by_count":8,"area":null},{"id":"2305.18497","title":"Collaborative Learning via Prediction Consensus","created":"2023-05-29","cited_by_count":8,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2305.03350","title":"Reconstructing Training Data from Multiclass Neural Networks","created":"2023-05-05","cited_by_count":7,"area":null},{"id":"2310.15826","title":"One or Two Things We know about Concept Drift -- A Survey on Monitoring Evolving Environments","created":"2023-10-24","cited_by_count":7,"area":null},{"id":"2406.19395","title":"Dataset Size Recovery from LoRA Weights","created":"2024-06-27","cited_by_count":7,"area":"safety"},{"id":"2506.00660","title":"Differential privacy for medical deep learning: methods, tradeoffs, and deployment implications","created":"2025-05-31","cited_by_count":7,"area":null},{"id":"2507.18725","title":"The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Models","created":"2025-07-24","cited_by_count":7,"area":"safety"},{"id":"2309.13016","title":"Understanding Deep Gradient Leakage via Inversion Influence Functions","created":"2023-09-22","cited_by_count":6,"area":null},{"id":"2402.09478","title":"Data Reconstruction Attacks and Defenses: A Systematic Evaluation","created":"2024-02-13","cited_by_count":6,"area":null},{"id":"2310.03838","title":"Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning","created":"2023-10-05","cited_by_count":5,"area":"safety"},{"id":"2311.06231","title":"Learning Human Action Recognition Representations Without Real Humans","created":"2023-11-10","cited_by_count":5,"area":null},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2311.07389","title":"Transpose Attack: Stealing Datasets with Bidirectional Training","created":"2023-11-13","cited_by_count":4,"area":null},{"id":"2312.02470","title":"Generator Born from Classifier","created":"2023-12-05","cited_by_count":4,"area":null},{"id":"2403.01268","title":"Defending Against Data Reconstruction Attacks in Federated Learning: An Information Theory Approach","created":"2024-03-02","cited_by_count":4,"area":null},{"id":"2404.17674","title":"Center-Based Relaxed Learning Against Membership Inference Attacks","created":"2024-04-26","cited_by_count":4,"area":"safety"},{"id":"2408.08184","title":"Not Every Image is Worth a Thousand Words: Quantifying Originality in Stable Diffusion","created":"2024-08-15","cited_by_count":4,"area":"diffusion"},{"id":"2408.16913","title":"Analyzing Inference Privacy Risks Through Gradients in Machine Learning","created":"2024-08-29","cited_by_count":4,"area":null},{"id":"2410.07632","title":"Provable Privacy Attacks on Trained Shallow Neural Networks","created":"2024-10-10","cited_by_count":4,"area":"safety"},{"id":"2412.08544","title":"Training Data Reconstruction: Privacy due to Uncertainty?","created":"2024-12-11","cited_by_count":4,"area":null},{"id":"2502.09150","title":"Shortcut Learning Susceptibility in Vision Classifiers","created":"2025-02-13","cited_by_count":4,"area":null},{"id":"2506.15553","title":"Approximating Language Model Training Data from Weights","created":"2025-06-18","cited_by_count":4,"area":null},{"id":"2211.16488","title":"Taming Normalizing Flows","created":"2022-11-29","cited_by_count":3,"area":null},{"id":"2310.01304","title":"Coupling public and private gradient provably helps optimization","created":"2023-10-02","cited_by_count":3,"area":null},{"id":"2407.12669","title":"Enhancing the Utility of Privacy-Preserving Cancer Classification using Synthetic Data","created":"2024-07-17","cited_by_count":3,"area":null},{"id":"2409.01688","title":"Differentially Private Kernel Density Estimation","created":"2024-09-03","cited_by_count":3,"area":null},{"id":"2409.06067","title":"MLLM-LLaVA-FL: Multimodal Large Language Model Assisted Federated Learning","created":"2024-09-09","cited_by_count":3,"area":"mllm"},{"id":"2410.10120","title":"Evaluating of Machine Unlearning: Robustness Verification Without Prior Modifications","created":"2024-10-14","cited_by_count":3,"area":"safety"},{"id":"2411.14516","title":"Memory Backdoor Attacks on Neural Networks","created":"2024-11-21","cited_by_count":3,"area":null},{"id":"2509.22214","title":"A Law of Data Reconstruction for Random Features (and Beyond)","created":"2025-09-26","cited_by_count":3,"area":null},{"id":"2512.15460","title":"From Risk to Resilience: Towards Assessing and Mitigating the Risk of Data Reconstruction Attacks in Federated Learning","created":"2025-12-17","cited_by_count":3,"area":null},{"id":"2402.02407","title":"Defining Neural Network Architecture through Polytope Structures of Dataset","created":"2024-02-04","cited_by_count":2,"area":null},{"id":"2403.07588","title":"Visual Privacy Auditing with Diffusion Models","created":"2024-03-12","cited_by_count":2,"area":"diffusion"},{"id":"2408.04261","title":"Unveiling Hidden Visual Information: A Reconstruction Attack Against Adversarial Visual Information Hiding","created":"2024-08-08","cited_by_count":2,"area":null},{"id":"2409.06955","title":"Privacy-Preserving Federated Learning with Consistency via Knowledge Distillation Using Conditional Generator","created":"2024-09-11","cited_by_count":2,"area":"distill"},{"id":"2411.15831","title":"Efficient and Private: Memorisation under differentially private parameter-efficient fine-tuning in language models","created":"2024-11-24","cited_by_count":2,"area":null},{"id":"2503.09649","title":"Technical and Legal Aspects of Federated Learning in Bioinformatics: Applications, Challenges and Opportunities","created":"2025-03-12","cited_by_count":2,"area":null},{"id":"2507.02850","title":"LLM Hypnosis: Exploiting User Feedback for Unauthorized Knowledge Injection to All Users","created":"2025-07-03","cited_by_count":2,"area":"alignment"},{"id":"2507.17228","title":"P3SL: Personalized Privacy-Preserving Split Learning on Heterogeneous Edge Devices","created":"2025-07-23","cited_by_count":2,"area":null},{"id":"2510.10625","title":"ImpMIA: Leveraging Implicit Bias for Membership Inference Attack","created":"2025-10-12","cited_by_count":2,"area":"safety"},{"id":"2604.10636","title":"Mitigating Privacy Risk via Forget Set-Free Unlearning","created":"2026-04-12","cited_by_count":2,"area":"safety"},{"id":"2305.15563","title":"Fantastic DNN Classifiers and How to Identify them without Data","created":"2023-05-24","cited_by_count":1,"area":null},{"id":"2306.06414","title":"Revealing Model Biases: Assessing Deep Neural Networks via Recovered Sample Analysis","created":"2023-06-10","cited_by_count":1,"area":null},{"id":"2311.06816","title":"On original and latent space connectivity in deep neural networks","created":"2023-11-12","cited_by_count":1,"area":null},{"id":"2312.04590","title":"Reconciling AI Performance and Data Reconstruction Resilience for Medical Imaging","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2401.10859","title":"Ensembler: Protect Collaborative Inference Privacy from Model Inversion Attack via Selective Ensemble","created":"2024-01-19","cited_by_count":1,"area":null},{"id":"2403.17329","title":"Deep Support Vectors","created":"2024-03-26","cited_by_count":1,"area":null},{"id":"2404.08847","title":"LazyDP: Co-Designing Algorithm-Software for Scalable Training of Differentially Private Recommendation Models","created":"2024-04-12","cited_by_count":1,"area":null},{"id":"2405.00348","title":"Practical Dataset Distillation Based on Deep Support Vectors","created":"2024-05-01","cited_by_count":1,"area":null},{"id":"2410.16884","title":"Network Inversion for Training-Like Data Reconstruction","created":"2024-10-22","cited_by_count":1,"area":null},{"id":"2504.10190","title":"Differentially Private 2D Human Pose Estimation","created":"2025-04-14","cited_by_count":1,"area":null},{"id":"2505.20026","title":"Gradient Inversion Transcript: Leveraging Robust Generative Priors to Reconstruct Training Data from Gradient Leakage","created":"2025-05-26","cited_by_count":1,"area":null},{"id":"2506.09923","title":"Apollo: A Posteriori Label-Only Membership Inference Attack Towards Machine Unlearning","created":"2025-06-11","cited_by_count":1,"area":"safety"},{"id":"2506.23296","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","created":"2025-06-29","cited_by_count":1,"area":null},{"id":"2507.01752","title":"Tuning without Peeking: Provable Generalization Bounds and Robust LLM Post-Training","created":"2025-07-02","cited_by_count":1,"area":"safety"},{"id":"2507.07947","title":"Reconstructing Template-Memorized Images from Natural Prompts","created":"2025-07-10","cited_by_count":1,"area":"diffusion"},{"id":"2509.21296","title":"No Prior, No Leakage: Revisiting Reconstruction Attacks in Trained Neural Networks","created":"2025-09-25","cited_by_count":1,"area":null},{"id":"2602.08723","title":"Data Reconstruction: Identifiability and Optimization with Sample Splitting","created":"2026-02-09","cited_by_count":1,"area":null},{"id":"2603.01053","title":"Turning Black Box into White Box: Dataset Distillation Leaks","created":"2026-03-01","cited_by_count":1,"area":null}],"next_cursor":"100"}