{"total":36,"rows":[{"id":"2505.24832","title":"How much do language models memorize?","created":"2025-05-30","cited_by_count":61,"area":null},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51,"area":null},{"id":"2310.18362","title":"SoK: Memorization in General-Purpose Large Language Models","created":"2023-10-24","cited_by_count":37,"area":null},{"id":"2301.10053","title":"A Linear Reconstruction Approach for Attribute Inference Attacks against Synthetic Data","created":"2023-01-24","cited_by_count":24,"area":null},{"id":"2304.13850","title":"Do SSL Models Have D\\'ej\\`a Vu? A Case of Unintended Memorization in Self-supervised Learning","created":"2023-04-26","cited_by_count":19,"area":null},{"id":"2211.10209","title":"On the Alignment of Group Fairness with Attribute Privacy","created":"2022-11-18","cited_by_count":9,"area":null},{"id":"2505.19139","title":"The Eye of Sherlock Holmes: Uncovering User Private Attribute Profiling via Vision-Language Model Agentic Framework","created":"2025-05-25","cited_by_count":9,"area":null},{"id":"2210.11049","title":"How Does a Deep Learning Model Architecture Impact Its Privacy? A Comprehensive Study of Privacy Attacks on CNNs and Transformers","created":"2022-10-20","cited_by_count":8,"area":null},{"id":"2306.00578","title":"Does Black-box Attribute Inference Attacks on Graph Neural Networks Constitute Privacy Risk?","created":"2023-06-01","cited_by_count":7,"area":null},{"id":"2407.07926","title":"Synthetic Data: Revisiting the Privacy-Utility Trade-off","created":"2024-07-09","cited_by_count":7,"area":null},{"id":"2412.12836","title":"A Survey on Recommendation Unlearning: Fundamentals, Taxonomy, Evaluation, and Open Questions","created":"2024-12-17","cited_by_count":7,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2408.16913","title":"Analyzing Inference Privacy Risks Through Gradients in Machine Learning","created":"2024-08-29","cited_by_count":4,"area":null},{"id":"2504.04033","title":"Disparate Privacy Vulnerability: Targeted Attribute Inference Attacks and Defenses","created":"2025-04-05","cited_by_count":3,"area":null},{"id":"2303.09289","title":"Class Attribute Inference Attacks: Inferring Sensitive Class Information by Diffusion-Based Attribute Manipulations","created":"2023-03-16","cited_by_count":2,"area":null},{"id":"2309.11022","title":"Information Leakage from Data Updates in Machine Learning Models","created":"2023-09-20","cited_by_count":2,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2401.12824","title":"MAPPING: Debiasing Graph Neural Networks for Fair Node Classification with Limited Sensitive Information Leakage","created":"2024-01-23","cited_by_count":2,"area":null},{"id":"2504.05651","title":"Measuring D\\'ej\\`a vu Memorization Efficiently","created":"2025-04-08","cited_by_count":2,"area":null},{"id":"2506.19836","title":"Machine Learning with Privacy for Protected Attributes","created":"2025-06-24","cited_by_count":2,"area":null},{"id":"2510.00909","title":"\"We are not Future-ready\": Understanding AI Privacy Risks and Existing Mitigation Strategies from the Perspective of AI Developers in Europe","created":"2025-10-01","cited_by_count":2,"area":null},{"id":"2504.11510","title":"RAID: An In-Training Defense against Attribute Inference Attacks in Recommender Systems","created":"2025-04-15","cited_by_count":1,"area":null},{"id":"2606.31208","title":"Probing Memorization of Tabular In-Context Learning","created":"2026-06-30","cited_by_count":1,"area":null},{"id":"2312.07389","title":"Eroding Trust In Aerial Imagery: Comprehensive Analysis and Evaluation Of Adversarial Attacks In Geospatial Systems","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2504.18497","title":"DeSIA: Attribute Inference Attacks Against Limited Fixed Aggregate Statistics","created":"2025-04-25","cited_by_count":0,"area":null},{"id":"2511.14084","title":"Observational Auditing of Label Privacy","created":"2025-11-18","cited_by_count":0,"area":null},{"id":"2601.09460","title":"SoK: Enhancing Cryptographic Collaborative Learning with Differential Privacy","created":"2026-01-14","cited_by_count":0,"area":null},{"id":"2601.17360","title":"Robust Privacy: Inference-Stage Privacy through Certified Robustness","created":"2026-01-24","cited_by_count":0,"area":null},{"id":"2602.06700","title":"Taipan: A Query-free Transfer-based Multiple Sensitive Attribute Inference Attack Solely from Auxiliary Graphs","created":"2026-02-06","cited_by_count":0,"area":null},{"id":"2603.15842","title":"Informationally Compressive Anonymization: Non-Degrading Sensitive Input Protection for Privacy-Preserving Supervised Machine Learning","created":"2026-03-16","cited_by_count":0,"area":null},{"id":"2604.05256","title":"Protecting and Preserving Protest Dynamics for Responsible Analysis","created":"2026-04-06","cited_by_count":0,"area":null},{"id":"2606.08372","title":"SoK: Reconstruction Attacks on Synthetic Tabular Data (Insights from Winning the NIST CRC)","created":"2026-06-06","cited_by_count":0,"area":null},{"id":"2606.09865","title":"LLM-as-a-Discriminator: When Synthetic Tables Still Look Real","created":"2026-06-01","cited_by_count":0,"area":null},{"id":"2606.10091","title":"SoK: Colluding Adversaries in Machine Learning Pipelines","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2606.15209","title":"Attribute Inference from Interactive Targeted Ads","created":"2026-06-13","cited_by_count":0,"area":null},{"id":"2609.17995","title":"QuanText: Protecting Dataset-Level Secrets in Textual Data Sharing","created":"2026-09-16","cited_by_count":0,"area":null}],"next_cursor":null}