{"total":69,"rows":[{"id":"2301.13188","title":"Extracting Training Data from Diffusion Models","created":"2023-01-30","cited_by_count":732,"area":"diffusion"},{"id":"2303.07909","title":"Text-to-image Diffusion Models in Generative AI: A Survey","created":"2023-03-14","cited_by_count":265,"area":"diffusion"},{"id":"2303.04226","title":"A Comprehensive Survey of AI-Generated Content (AIGC): A History of Generative AI from GAN to ChatGPT","created":"2023-03-07","cited_by_count":224,"area":null},{"id":"2305.12082","title":"SneakyPrompt: Jailbreaking Text-to-image Generative Models","created":"2023-05-20","cited_by_count":189,"area":"diffusion"},{"id":"2302.01316","title":"Are Diffusion Models Vulnerable to Membership Inference Attacks?","created":"2023-02-02","cited_by_count":136,"area":"diffusion"},{"id":"2302.03262","title":"Membership Inference Attacks against Diffusion Models","created":"2023-02-07","cited_by_count":86,"area":"diffusion"},{"id":"2405.15304","title":"Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradient","created":"2024-05-24","cited_by_count":69,"area":"diffusion"},{"id":"2406.16201","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","created":"2024-06-23","cited_by_count":69,"area":"safety"},{"id":"2311.01797","title":"On the Generalization Properties of Diffusion Models","created":"2023-11-03","cited_by_count":68,"area":"diffusion"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2302.09923","title":"Prompt Stealing Attacks Against Text-to-Image Generation Models","created":"2023-02-20","cited_by_count":51,"area":null},{"id":"2301.09956","title":"Membership Inference of Diffusion Models","created":"2023-01-24","cited_by_count":46,"area":"diffusion"},{"id":"2409.01380","title":"Membership Inference Attacks Against In-Context Learning","created":"2024-09-02","cited_by_count":43,"area":"safety"},{"id":"2308.06405","title":"White-box Membership Inference Attacks against Diffusion Models","created":"2023-08-11","cited_by_count":42,"area":"diffusion"},{"id":"2306.12983","title":"Towards More Realistic Membership Inference Attacks on Large Diffusion Models","created":"2023-06-22","cited_by_count":41,"area":"diffusion"},{"id":"2306.00905","title":"T2IAT: Measuring Valence and Stereotypical Biases in Text-to-Image Generation","created":"2023-06-01","cited_by_count":39,"area":null},{"id":"2310.00108","title":"Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot Study","created":"2023-09-29","cited_by_count":38,"area":"safety"},{"id":"2405.14800","title":"Membership Inference on Text-to-Image Diffusion Models via Conditional Likelihood Discrepancy","created":"2024-05-23","cited_by_count":38,"area":"diffusion"},{"id":"2312.08207","title":"Black-box Membership Inference Attacks against Fine-tuned Diffusion Models","created":"2023-12-13","cited_by_count":35,"area":"diffusion"},{"id":"2408.03400","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","created":"2024-08-06","cited_by_count":32,"area":"diffusion"},{"id":"2311.17695","title":"Fair Text-to-Image Diffusion via Fair Mapping","created":"2023-11-29","cited_by_count":31,"area":"diffusion"},{"id":"2305.15759","title":"DP-LDMs: Differentially Private Latent Diffusion Models","created":"2023-05-25","cited_by_count":29,"area":"diffusion"},{"id":"2505.16959","title":"Bigger Isn't Always Memorizing: Early Stopping Overparameterized Diffusion Models","created":"2025-05-22","cited_by_count":25,"area":"diffusion"},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2406.01355","title":"Differentially Private Fine-Tuning of Diffusion Models","created":"2024-06-03","cited_by_count":20,"area":"diffusion"},{"id":"2403.09450","title":"Shake to Leak: Fine-tuning Diffusion Models Can Amplify the Generative Privacy Risk","created":"2024-03-14","cited_by_count":17,"area":"diffusion"},{"id":"2307.16680","title":"On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook","created":"2023-07-31","cited_by_count":15,"area":"diffusion"},{"id":"2405.20771","title":"Towards Black-Box Membership Inference Attack for Diffusion Models","created":"2024-05-25","cited_by_count":14,"area":"diffusion"},{"id":"2307.12980","title":"A Systematic Survey of Prompt Engineering on Vision-Language Foundation Models","created":"2023-07-24","cited_by_count":12,"area":"mllm"},{"id":"2408.00376","title":"On the Limitations and Prospects of Machine Unlearning for Generative AI","created":"2024-08-01","cited_by_count":12,"area":"safety"},{"id":"2408.05131","title":"Range Membership Inference Attacks","created":"2024-08-09","cited_by_count":12,"area":"safety"},{"id":"2304.04639","title":"EKILA: Synthetic Media Provenance and Attribution for Generative Art","created":"2023-04-10","cited_by_count":11,"area":null},{"id":"2310.00222","title":"Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learning","created":"2023-09-30","cited_by_count":11,"area":"safety"},{"id":"2408.00001","title":"Replication in Visual Diffusion Models: A Survey and Outlook","created":"2024-07-07","cited_by_count":11,"area":"diffusion"},{"id":"2302.07801","title":"Data Forensics in Diffusion Models: A Systematic Analysis of Membership Privacy","created":"2023-02-15","cited_by_count":10,"area":"diffusion"},{"id":"2402.11989","title":"Privacy-Preserving Low-Rank Adaptation against Membership Inference Attacks for Latent Diffusion Models","created":"2024-02-19","cited_by_count":9,"area":"diffusion"},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2403.07842","title":"DP-TLDM: Differentially Private Tabular Latent Diffusion Model","created":"2024-03-12","cited_by_count":5,"area":"diffusion"},{"id":"2601.11210","title":"VidLeaks: Membership Inference Attacks Against Text-to-Video Models","created":"2026-01-16","cited_by_count":5,"area":"safety"},{"id":"2601.20125","title":"Membership Inference Attacks Against Fine-tuned Diffusion Language Models","created":"2026-01-27","cited_by_count":5,"area":"diffusion"},{"id":"2306.03054","title":"Discriminative Adversarial Privacy: Balancing Accuracy and Membership Privacy in Neural Networks","created":"2023-06-05","cited_by_count":4,"area":null},{"id":"2306.05208","title":"PriSampler: Mitigating Property Inference of Diffusion Models","created":"2023-06-08","cited_by_count":4,"area":"diffusion"},{"id":"2502.00808","title":"Synthetic Artifact Auditing: Tracing LLM-Generated Synthetic Data Usage in Downstream Applications","created":"2025-02-02","cited_by_count":4,"area":"synth"},{"id":"2409.07025","title":"CPSample: Classifier Protected Sampling for Guarding Training Data During Diffusion","created":"2024-09-11","cited_by_count":3,"area":"diffusion"},{"id":"2410.16657","title":"Dual-Model Defense: Safeguarding Diffusion Models from Membership Inference Attacks through Disjoint Data Splitting","created":"2024-10-22","cited_by_count":3,"area":"diffusion"},{"id":"2509.22723","title":"Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models","created":"2025-09-25","cited_by_count":3,"area":"diffusion"},{"id":"2310.15524","title":"On the Inherent Privacy Properties of Discrete Denoising Diffusion Models","created":"2023-10-24","cited_by_count":2,"area":"diffusion"},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2408.06825","title":"Membership Inference Attack Against Masked Image Modeling","created":"2024-08-13","cited_by_count":2,"area":"safety"},{"id":"2410.08406","title":"Promptly Yours? A Human Subject Study on Prompt Inference in AI-Generated Art","created":"2024-10-10","cited_by_count":2,"area":null},{"id":"2501.06399","title":"GenAI Confessions: Black-box Membership Inference for Generative Image Models","created":"2025-01-11","cited_by_count":2,"area":"safety"},{"id":"2506.11434","title":"Auditing Data Provenance in Real-world Text-to-Image Diffusion Models for Privacy and Copyright Protection","created":"2025-06-13","cited_by_count":2,"area":"diffusion"},{"id":"2508.06837","title":"Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models","created":"2025-08-09","cited_by_count":2,"area":"diffusion"},{"id":"2511.20710","title":"Are Neuro-Inspired Multi-Modal Vision-Language Models Resilient to Membership Inference Privacy Leakage?","created":"2025-11-24","cited_by_count":2,"area":"mllm"},{"id":"2601.03701","title":"Inference Attacks Against Graph Generative Diffusion Models","created":"2026-01-07","cited_by_count":2,"area":"diffusion"},{"id":"2405.15140","title":"Better Membership Inference Privacy Measurement through Discrepancy","created":"2024-05-24","cited_by_count":1,"area":"safety"},{"id":"2405.20380","title":"Gradient Inversion of Federated Diffusion Models","created":"2024-05-30","cited_by_count":1,"area":"diffusion"},{"id":"2410.10177","title":"Identity-Focused Inference and Extraction Attacks on Diffusion Models","created":"2024-10-14","cited_by_count":1,"area":"diffusion"},{"id":"2506.19360","title":"SoK: Can Synthetic Images Replace Real Data? A Survey of Utility and Privacy of Synthetic Image Generation","created":"2025-06-24","cited_by_count":1,"area":null},{"id":"2601.06866","title":"United We Defend: Collaborative Membership Inference Defenses in Federated Learning","created":"2026-01-11","cited_by_count":1,"area":"safety"},{"id":"2610.05601","title":"Your Unlearning Gives You Away: Identifying Erased Concepts in Diffusion Models","created":"2026-10-04","cited_by_count":1,"area":"diffusion"},{"id":"2406.13933","title":"EnTruth: Enhancing the Traceability of Unauthorized Dataset Usage in Text-to-image Diffusion Models with Minimal and Robust Alterations","created":"2024-06-20","cited_by_count":0,"area":"diffusion"},{"id":"2601.17379","title":"Prompt and Circumstances: Evaluating the Efficacy of Human Prompt Inference in AI-Generated Art","created":"2026-01-24","cited_by_count":0,"area":null},{"id":"2601.21628","title":"Noise as a Probe: Membership Inference Attacks on Diffusion Models Leveraging Initial Noise","created":"2026-01-29","cited_by_count":0,"area":"diffusion"},{"id":"2605.29202","title":"Auditing Training Data in Generative Music Models via Black-Box Membership Inference","created":"2026-05-28","cited_by_count":0,"area":"safety"},{"id":"2606.26772","title":"Escaping Iterative Parameter-Space Noise: Differentially Private Learning with a Hypernetwork","created":"2026-06-25","cited_by_count":0,"area":null},{"id":"2608.13671","title":"PROVE: Training-Free Prompt Recovery using Verifiable Evidence","created":"2026-08-13","cited_by_count":0,"area":null},{"id":"2609.01723","title":"Hearing the Whispers: Black-Box Membership Inference Attacks on Finetuned TTS Models","created":"2026-09-01","cited_by_count":0,"area":"safety"}],"next_cursor":null}