{"total":101,"rows":[{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2311.06062","title":"Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibration","created":"2023-11-10","cited_by_count":98,"area":"safety"},{"id":"2210.00968","title":"Membership Inference Attacks Against Text-to-image Generation Models","created":"2022-10-03","cited_by_count":69,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2301.09956","title":"Membership Inference of Diffusion Models","created":"2023-01-24","cited_by_count":46,"area":"diffusion"},{"id":"2409.01380","title":"Membership Inference Attacks Against In-Context Learning","created":"2024-09-02","cited_by_count":43,"area":"safety"},{"id":"2308.06405","title":"White-box Membership Inference Attacks against Diffusion Models","created":"2023-08-11","cited_by_count":42,"area":"diffusion"},{"id":"2210.10750","title":"Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queries","created":"2022-10-19","cited_by_count":40,"area":"safety"},{"id":"2502.18943","title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models","created":"2025-02-26","cited_by_count":37,"area":"safety"},{"id":"2312.08207","title":"Black-box Membership Inference Attacks against Fine-tuned Diffusion Models","created":"2023-12-13","cited_by_count":35,"area":"diffusion"},{"id":"2408.03400","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","created":"2024-08-06","cited_by_count":32,"area":"diffusion"},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2409.00426","title":"Is Difficulty Calibration All We Need? Towards More Practical Membership Inference Attacks","created":"2024-08-31","cited_by_count":21,"area":"safety"},{"id":"2407.10494","title":"Learning to Unlearn for Robust Machine Unlearning","created":"2024-07-15","cited_by_count":19,"area":"safety"},{"id":"2311.16136","title":"ERASER: Machine Unlearning in MLaaS via an Inference Serving-Aware Approach","created":"2023-11-03","cited_by_count":15,"area":"safety"},{"id":"2309.07983","title":"SLMIA-SR: Speaker-Level Membership Inference Attacks against Speaker Recognition Systems","created":"2023-09-14","cited_by_count":14,"area":"safety"},{"id":"2405.16978","title":"OSLO: One-Shot Label-Only Membership Inference Attacks","created":"2024-05-27","cited_by_count":13,"area":"safety"},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2506.13972","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2503.07384","title":"Is My Text in Your AI Model? Gradient-based Membership Inference Test applied to LLMs","created":"2025-03-10","cited_by_count":10,"area":"safety"},{"id":"2506.10424","title":"SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks","created":"2025-06-12","cited_by_count":10,"area":"safety"},{"id":"2407.01251","title":"QUEEN: Query Unlearning against Model Extraction","created":"2024-07-01","cited_by_count":9,"area":"safety"},{"id":"2310.11970","title":"Quantifying Privacy Risks of Prompts in Visual Prompt Learning","created":"2023-10-18","cited_by_count":8,"area":"safety"},{"id":"2505.12442","title":"IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems","created":"2025-05-18","cited_by_count":8,"area":"agents"},{"id":"2405.07562","title":"GLiRA: Black-Box Membership Inference Attack via Knowledge Distillation","created":"2024-05-13","cited_by_count":7,"area":"safety"},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2411.05743","title":"Free Record-Level Privacy Risk Evaluation Through Artifact-Based Methods","created":"2024-11-08","cited_by_count":7,"area":"safety"},{"id":"2601.02751","title":"Window-based Membership Inference Attacks Against Fine-tuned Large Language Models","created":"2026-01-06","cited_by_count":7,"area":"safety"},{"id":"2606.14748","title":"Is My Vision-Language Data in Your AI? Membership Inference Test (MINT) Demo 2","created":"2026-06-05","cited_by_count":7,"area":"safety"},{"id":"2404.00673","title":"A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasures","created":"2024-03-31","cited_by_count":6,"area":null},{"id":"2501.11577","title":"Rethinking Membership Inference Attacks Against Transfer Learning","created":"2025-01-20","cited_by_count":6,"area":"safety"},{"id":"2507.21412","title":"Cascading and Proxy Membership Inference Attacks","created":"2025-07-29","cited_by_count":6,"area":"safety"},{"id":"2310.03838","title":"Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning","created":"2023-10-05","cited_by_count":5,"area":"safety"},{"id":"2406.07314","title":"Rethinking the impact of noisy labels in graph classification: A utility and privacy perspective","created":"2024-06-11","cited_by_count":5,"area":null},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2505.24089","title":"Practical Bayes-Optimal Membership Inference Attacks","created":"2025-05-30","cited_by_count":5,"area":"safety"},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2601.20125","title":"Membership Inference Attacks Against Fine-tuned Diffusion Language Models","created":"2026-01-27","cited_by_count":5,"area":"diffusion"},{"id":"2211.06582","title":"Provable Membership Inference Privacy","created":"2022-11-12","cited_by_count":4,"area":"safety"},{"id":"2401.00996","title":"Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment","created":"2024-01-02","cited_by_count":4,"area":"safety"},{"id":"2402.10686","title":"On the Impact of Uncertainty and Calibration on Likelihood-Ratio Membership Inference Attacks","created":"2024-02-16","cited_by_count":4,"area":"safety"},{"id":"2403.04149","title":"MAP: MAsk-Pruning for Source-Free Model Intellectual Property Protection","created":"2024-03-07","cited_by_count":4,"area":null},{"id":"2409.01952","title":"Exploiting the Vulnerability of Large Language Models via Defense-Aware Architectural Backdoor","created":"2024-09-03","cited_by_count":3,"area":"safety"},{"id":"2409.19417","title":"Subject Data Auditing via Source Inference Attack in Cross-Silo Federated Learning","created":"2024-09-28","cited_by_count":3,"area":null},{"id":"2507.16872","title":"CompLeak: Deep Learning Model Compression Exacerbates Privacy Leakage","created":"2025-07-22","cited_by_count":3,"area":null},{"id":"2509.06796","title":"Imitative Membership Inference Attack","created":"2025-09-08","cited_by_count":3,"area":"safety"},{"id":"2509.11080","title":"Membership Inference Attacks on Recommender System: A Survey","created":"2025-09-14","cited_by_count":3,"area":"safety"},{"id":"2512.15460","title":"From Risk to Resilience: Towards Assessing and Mitigating the Risk of Data Reconstruction Attacks in Federated Learning","created":"2025-12-17","cited_by_count":3,"area":null},{"id":"2603.07567","title":"Revisiting the LiRA Membership Inference Attack Under Realistic Assumptions","created":"2026-03-08","cited_by_count":3,"area":"safety"},{"id":"2604.21197","title":"Toward Efficient Membership Inference Attacks against Federated Large Language Models: A Projection Residual Approach","created":"2026-04-23","cited_by_count":3,"area":"safety"},{"id":"2605.26161","title":"TSFMAudit: Data Contamination Auditing in Forecasting Time Series Foundation Models","created":"2026-05-24","cited_by_count":3,"area":null},{"id":"2211.13535","title":"DeepTaster: Adversarial Perturbation-Based Fingerprinting to Identify Proprietary Dataset Use in Deep Neural Networks","created":"2022-11-24","cited_by_count":2,"area":"safety"},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2311.17750","title":"Privacy and Accuracy Implications of Model Complexity and Integration in Heterogeneous Federated Learning","created":"2023-11-29","cited_by_count":2,"area":null},{"id":"2407.00866","title":"Silver Linings in the Shadows: Harnessing Membership Inference for Machine Unlearning","created":"2024-07-01","cited_by_count":2,"area":"safety"},{"id":"2408.08642","title":"The Power of Bias: Optimizing Client Selection in Federated Learning with Heterogeneous Differential Privacy","created":"2024-08-16","cited_by_count":2,"area":null},{"id":"2502.06374","title":"Hyperparameters in Score-Based Membership Inference Attacks","created":"2025-02-10","cited_by_count":2,"area":"safety"},{"id":"2511.16792","title":"Membership Inference Attacks Beyond Overfitting","created":"2025-11-20","cited_by_count":2,"area":"safety"},{"id":"2511.19536","title":"AttackPilot: Autonomous Inference Attacks Against ML Services With LLM-Based Agents","created":"2025-11-24","cited_by_count":2,"area":"agents"},{"id":"2511.20710","title":"Are Neuro-Inspired Multi-Modal Vision-Language Models Resilient to Membership Inference Privacy Leakage?","created":"2025-11-24","cited_by_count":2,"area":"mllm"},{"id":"2605.01129","title":"Revisiting Privacy Leakage in Machine Unlearning: Membership Inference Beyond the Forgotten Set","created":"2026-05-01","cited_by_count":2,"area":"safety"},{"id":"2302.14769","title":"Membership Inference Attack for Beluga Whales Discrimination","created":"2023-02-28","cited_by_count":1,"area":"safety"},{"id":"2306.04109","title":"Membership inference attack with relative decision boundary distance","created":"2023-06-07","cited_by_count":1,"area":"safety"},{"id":"2307.03118","title":"Quantum Solutions to the Privacy vs. Utility Tradeoff","created":"2023-07-06","cited_by_count":1,"area":null},{"id":"2307.05193","title":"Membership Inference Attacks on DNNs using Adversarial Perturbations","created":"2023-07-11","cited_by_count":1,"area":"safety"},{"id":"2408.13221","title":"Protecting against simultaneous data poisoning attacks","created":"2024-08-23","cited_by_count":1,"area":"safety"},{"id":"2411.16763","title":"Hide in Plain Sight: Clean-Label Backdoor for Auditing Membership Inference","created":"2024-11-24","cited_by_count":1,"area":null},{"id":"2505.20095","title":"Spurious Privacy Leakage in Neural Networks","created":"2025-05-26","cited_by_count":1,"area":null},{"id":"2506.06488","title":"Membership Inference Attacks for Unseen Classes","created":"2025-06-06","cited_by_count":1,"area":"safety"},{"id":"2506.09923","title":"Apollo: A Posteriori Label-Only Membership Inference Attack Towards Machine Unlearning","created":"2025-06-11","cited_by_count":1,"area":"safety"},{"id":"2510.19773","title":"Estimating Model-Level Membership Inference Vulnerability Without Reference Models","created":"2025-10-22","cited_by_count":1,"area":"safety"},{"id":"2601.03429","title":"DeepLeak: Privacy Enhancing Hardening of Model Explanations Against Membership Leakage","created":"2026-01-06","cited_by_count":1,"area":null},{"id":"2602.01645","title":"Membership Inference Attack Against Music Diffusion Models via Generative Manifold Perturbation","created":"2026-02-02","cited_by_count":1,"area":"diffusion"},{"id":"2605.25819","title":"On Reliability of Membership Inference Vulnerability Evaluation","created":"2026-05-25","cited_by_count":1,"area":"safety"},{"id":"2307.10997","title":"DREAM: Domain-free Reverse Engineering Attributes of Black-box Model","created":"2023-07-20","cited_by_count":0,"area":null},{"id":"2310.12063","title":"Black-Box Training Data Identification in GANs via Detector Networks","created":"2023-10-18","cited_by_count":0,"area":"safety"},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2412.05842","title":"DREAM: Domain-agnostic Reverse Engineering Attributes of Black-box Model","created":"2024-12-08","cited_by_count":0,"area":null},{"id":"2412.20456","title":"Sub-optimal Learning in Meta-Classifier Attacks: A Study of Membership Inference on Differentially Private Location Aggregates","created":"2024-12-29","cited_by_count":0,"area":"safety"},{"id":"2501.09328","title":"Neural Honeytrace: Plug&Play Watermarking Framework against Model Extraction Attacks","created":"2025-01-16","cited_by_count":0,"area":"safety"},{"id":"2502.08001","title":"Unveiling Client Privacy Leakage from Public Dataset Usage in Federated Distillation","created":"2025-02-11","cited_by_count":0,"area":"safety"},{"id":"2504.21042","title":"What's Pulling the Strings? Evaluating Integrity and Attribution in AI Training and Inference through Concept Shift","created":"2025-04-28","cited_by_count":0,"area":"safety"},{"id":"2505.03490","title":"A new membership inference attack that spots memorization in generative and predictive models: Loss-Based with Reference Model algorithm (LBRM)","created":"2025-05-06","cited_by_count":0,"area":"safety"},{"id":"2508.18665","title":"Membership Inference Attacks on In-Context Examples in LLM-based Recommender Systems","created":"2025-08-26","cited_by_count":0,"area":"safety"},{"id":"2509.04169","title":"Privacy Risks in Time Series Forecasting: User- and Record-Level Membership Inference","created":"2025-09-04","cited_by_count":0,"area":"safety"},{"id":"2510.05753","title":"Empirical Comparison of Membership Inference Attacks in Deep Transfer Learning","created":"2025-10-07","cited_by_count":0,"area":"safety"},{"id":"2602.05748","title":"LeakBoost: Perceptual-Loss-Based Membership Inference Attack","created":"2026-02-05","cited_by_count":0,"area":"safety"},{"id":"2603.22987","title":"A Critical Review on the Effectiveness and Privacy Threats of Membership Inference Attacks","created":"2026-03-24","cited_by_count":0,"area":"safety"},{"id":"2603.24213","title":"Uncovering Memorization in Timeseries Imputation models: LBRM Membership Inference and its link to attribute Leakage","created":"2026-03-25","cited_by_count":0,"area":"safety"},{"id":"2603.28942","title":"ReproMIA: A Comprehensive Analysis of Model Reprogramming for Proactive Membership Inference Attacks","created":"2026-03-30","cited_by_count":0,"area":"diffusion"},{"id":"2604.01014","title":"AutoMIA: Improved Baselines for Membership Inference Attack via Agentic Self-Exploration","created":"2026-04-01","cited_by_count":0,"area":"agents"},{"id":"2605.17341","title":"Single-Sample Black-Box Membership Inference Attack against Vision-Language Models via Cross-modal Semantic Alignment","created":"2026-05-17","cited_by_count":0,"area":"mllm"},{"id":"2605.30462","title":"idSCD: Identifying Training Datasets through Semantic Correlation Descriptors","created":"2026-05-28","cited_by_count":0,"area":"safety"},{"id":"2606.23030","title":"Have You Ever Seen Them? Entity-level Membership Inference through Interrogating Large Language Models","created":"2026-06-22","cited_by_count":0,"area":"safety"},{"id":"2606.30081","title":"Discard the Dross and Select the Essential: Pre-query Sample Selection for Black-box Membership Inference Attacks","created":"2026-06-29","cited_by_count":0,"area":"safety"},{"id":"2607.13541","title":"When T2I Synthetic Data Backfires: Amplified Privacy Risks in Real-Synthetic Mix Training","created":"2026-07-15","cited_by_count":0,"area":null},{"id":"2609.36331","title":"Calibrating One-Round Membership Inference with Neighbors","created":"2026-09-28","cited_by_count":0,"area":"safety"},{"id":"2610.18051","title":"inLoRA-MINT: Internal Representations for Auditing Training Data in Domain-adapted LLMs","created":"2026-10-13","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}