{"total":62,"rows":[{"id":"2210.01504","title":"Knowledge Unlearning for Mitigating Privacy Risks in Language Models","created":"2022-10-04","cited_by_count":437,"area":"safety"},{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2308.07061","title":"Machine Unlearning: Solutions and Challenges","created":"2023-08-14","cited_by_count":93,"area":"safety"},{"id":"2406.01257","title":"What makes unlearning hard and what to do about it","created":"2024-06-03","cited_by_count":89,"area":"safety"},{"id":"2403.01218","title":"Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy","created":"2024-03-02","cited_by_count":82,"area":"safety"},{"id":"2410.02879","title":"Position: LLM Unlearning Benchmarks are Weak Measures of Progress","created":"2024-10-03","cited_by_count":63,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2404.03233","title":"Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning","created":"2024-04-04","cited_by_count":48,"area":"safety"},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2210.10750","title":"Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queries","created":"2022-10-19","cited_by_count":40,"area":"safety"},{"id":"2406.17216","title":"Machine Unlearning Fails to Remove Data Poisoning Attacks","created":"2024-06-25","cited_by_count":37,"area":"safety"},{"id":"2303.03446","title":"Students Parrot Their Teachers: Membership Inference on Model Distillation","created":"2023-03-06","cited_by_count":33,"area":"safety"},{"id":"2210.08196","title":"Deep Regression Unlearning","created":"2022-10-15","cited_by_count":32,"area":"safety"},{"id":"2312.11658","title":"Traces of Memorisation in Large Language Models for Code","created":"2023-12-18","cited_by_count":29,"area":"safety"},{"id":"2503.06808","title":"Privacy Auditing of Large Language Models","created":"2025-03-09","cited_by_count":23,"area":"safety"},{"id":"2403.10557","title":"Second-Order Information Matters: Revisiting Machine Unlearning for Large Language Models","created":"2024-03-13","cited_by_count":18,"area":"safety"},{"id":"2406.10218","title":"Semantic Membership Inference Attack against Large Language Models","created":"2024-06-14","cited_by_count":17,"area":"safety"},{"id":"2410.09591","title":"Unlearn and Burn: Adversarial Machine Unlearning Requests Destroy Model Accuracy","created":"2024-10-12","cited_by_count":17,"area":"safety"},{"id":"2307.10476","title":"What can we learn from Data Leakage and Unlearning for Law?","created":"2023-07-19","cited_by_count":15,"area":"safety"},{"id":"2402.15109","title":"Remaining-data-free Machine Unlearning by Suppressing Sample Contribution","created":"2024-02-23","cited_by_count":13,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2306.15744","title":"Ticketed Learning-Unlearning Schemes","created":"2023-06-27","cited_by_count":11,"area":"safety"},{"id":"2506.13009","title":"Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective","created":"2025-06-16","cited_by_count":9,"area":"safety"},{"id":"2411.05743","title":"Free Record-Level Privacy Risk Evaluation Through Artifact-Based Methods","created":"2024-11-08","cited_by_count":7,"area":"safety"},{"id":"2501.16614","title":"FUNU: Boosting Machine Unlearning Efficiency by Filtering Unnecessary Unlearning","created":"2025-01-28","cited_by_count":7,"area":"safety"},{"id":"2502.12430","title":"Position: Bridge the Gaps between Machine Unlearning and AI Regulation","created":"2025-02-18","cited_by_count":7,"area":"safety"},{"id":"2403.12830","title":"Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Approximate Unlearning Completeness","created":"2024-03-19","cited_by_count":6,"area":"safety"},{"id":"2506.05126","title":"Membership Inference Attacks on Sequence Models","created":"2025-06-05","cited_by_count":6,"area":"safety"},{"id":"2507.21412","title":"Cascading and Proxy Membership Inference Attacks","created":"2025-07-29","cited_by_count":6,"area":"safety"},{"id":"2310.13786","title":"Fundamental Limits of Membership Inference Attacks on Machine Learning Models","created":"2023-10-20","cited_by_count":5,"area":"safety"},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2410.16516","title":"Scalability of memorization-based machine unlearning","created":"2024-10-21","cited_by_count":5,"area":"safety"},{"id":"2502.10450","title":"Trustworthy AI: Safety, Bias, and Privacy -- A Survey","created":"2025-02-11","cited_by_count":5,"area":"safety"},{"id":"2507.19894","title":"Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols","created":"2025-07-26","cited_by_count":4,"area":"safety"},{"id":"2508.18671","title":"Auditing Approximate Machine Unlearning for Differentially Private Models","created":"2025-08-26","cited_by_count":4,"area":"safety"},{"id":"2602.16697","title":"Protecting the Undeleted in Machine Unlearning","created":"2026-02-18","cited_by_count":4,"area":"safety"},{"id":"2402.10065","title":"Some Targets Are Harder to Identify than Others: Quantifying the Target-dependent Membership Leakage","created":"2024-02-15","cited_by_count":3,"area":"safety"},{"id":"2412.21123","title":"ExpShield: Safeguarding Web Text from Unauthorized Crawling and LLM Exploitation","created":"2024-12-30","cited_by_count":3,"area":"safety"},{"id":"2501.17501","title":"How Much Do Code Language Models Remember? An Investigation on Data Extraction Attacks before and after Fine-tuning","created":"2025-01-29","cited_by_count":3,"area":"safety"},{"id":"2509.11080","title":"Membership Inference Attacks on Recommender System: A Survey","created":"2025-09-14","cited_by_count":3,"area":"safety"},{"id":"2511.05865","title":"CGCE: Classifier-Guided Concept Erasure in Generative Models","created":"2025-11-08","cited_by_count":3,"area":"safety"},{"id":"2310.08015","title":"Why Train More? Effective and Efficient Membership Inference via Memorization","created":"2023-10-12","cited_by_count":2,"area":"safety"},{"id":"2404.11056","title":"LMEraser: Large Model Unlearning through Adaptive Prompt Tuning","created":"2024-04-17","cited_by_count":2,"area":"safety"},{"id":"2405.08134","title":"Many-Shot Regurgitation (MSR) Prompting","created":"2024-05-13","cited_by_count":2,"area":"safety"},{"id":"2411.01357","title":"WaKA: Data Attribution using K-Nearest Neighbors and Membership Privacy Principles","created":"2024-11-02","cited_by_count":2,"area":"safety"},{"id":"2510.03263","title":"Memory Self-Regeneration: Uncovering Hidden Knowledge in Unlearned Models","created":"2025-09-26","cited_by_count":2,"area":"safety"},{"id":"2605.01129","title":"Revisiting Privacy Leakage in Machine Unlearning: Membership Inference Beyond the Forgotten Set","created":"2026-05-01","cited_by_count":2,"area":"safety"},{"id":"2509.15861","title":"ToFU: Transforming How Federated Learning Systems Forget User Data","created":"2025-09-19","cited_by_count":1,"area":"safety"},{"id":"2510.19773","title":"Estimating Model-Level Membership Inference Vulnerability Without Reference Models","created":"2025-10-22","cited_by_count":1,"area":"safety"},{"id":"2512.00272","title":"WARP: Weight Teleportation for Attack-Resilient Unlearning Protocols","created":"2025-11-29","cited_by_count":1,"area":"safety"},{"id":"2602.16596","title":"Sequential Membership Inference Attacks","created":"2026-02-18","cited_by_count":1,"area":"safety"},{"id":"2405.15423","title":"Lost in the Averages: A New Specific Setup to Evaluate Membership Inference Attacks Against Machine Learning Models","created":"2024-05-24","cited_by_count":0,"area":"safety"},{"id":"2410.22673","title":"Calibrating Practical Privacy Risks for Differentially Private Machine Learning","created":"2024-10-30","cited_by_count":0,"area":"safety"},{"id":"2411.03363","title":"TDDBench: A Benchmark for Training data detection","created":"2024-11-05","cited_by_count":0,"area":"safety"},{"id":"2602.15919","title":"Assessing Per-Sample Membership Inference Vulnerability without Retraining","created":"2026-02-17","cited_by_count":0,"area":"safety"},{"id":"2603.00811","title":"Curation Leaks: Membership Inference Attacks against Data Curation for Machine Learning","created":"2026-02-28","cited_by_count":0,"area":"safety"},{"id":"2606.14518","title":"Characterizing Privacy-Audit Alignment in Behavioral Audit of Machine Unlearning","created":"2026-06-12","cited_by_count":0,"area":"safety"},{"id":"2606.30081","title":"Discard the Dross and Select the Essential: Pre-query Sample Selection for Black-box Membership Inference Attacks","created":"2026-06-29","cited_by_count":0,"area":"safety"},{"id":"2606.31474","title":"TabPATE: Differentially Private Tabular In-Context Learning Without Public Data","created":"2026-06-30","cited_by_count":0,"area":"safety"},{"id":"2609.05329","title":"Machine Unlearning as Private Retroactive Algorithms","created":"2026-09-04","cited_by_count":0,"area":"safety"},{"id":"2609.09848","title":"Subgroup Membership Inference Audits of Differentially Private Synthetic Text","created":"2026-09-09","cited_by_count":0,"area":"safety"},{"id":"2610.04310","title":"Modeling Deletion Requests in Machine Unlearning","created":"2026-10-03","cited_by_count":0,"area":"safety"}],"next_cursor":null}