{"list":"other","total":53,"rows":[{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"2012.07805","title":"Extracting Training Data from Large Language Models","created":"2020-12-14","cited_by_count":2189},{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878},{"id":"1802.08232","title":"The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks","created":"2018-02-22","cited_by_count":864},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"2007.14321","title":"Label-Only Membership Inference Attacks","created":"2020-07-28","cited_by_count":388},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"1908.11229","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","created":"2019-08-29","cited_by_count":271},{"id":"2006.07709","title":"Auditing Differentially Private Machine Learning: How Private is Private SGD?","created":"2020-06-13","cited_by_count":218},{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199},{"id":"1906.11798","title":"Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inference","created":"2019-06-27","cited_by_count":175},{"id":"2007.15528","title":"Membership Leakage in Label-Only Exposures","created":"2020-07-30","cited_by_count":168},{"id":"2201.04845","title":"Reconstructing Training Data with Informed Adversaries","created":"2022-01-13","cited_by_count":148},{"id":"2007.07646","title":"A Survey of Privacy Attacks in Machine Learning","created":"2020-07-15","cited_by_count":146},{"id":"1306.4447","title":"Hacking Smart Machines with Smarter Ones: How to Extract Meaningful Data from Machine Learning Classifiers","created":"2013-06-19","cited_by_count":130},{"id":"1904.01067","title":"Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning","created":"2019-04-01","cited_by_count":122},{"id":"1906.03006","title":"Reconstruction and Membership Inference Attacks against Generative Models","created":"2019-06-07","cited_by_count":122},{"id":"1802.05351","title":"Stealing Hyperparameters in Machine Learning","created":"2018-02-14","cited_by_count":118},{"id":"2005.10881","title":"Revisiting Membership Inference Under Realistic Assumptions","created":"2020-05-21","cited_by_count":112},{"id":"2011.07018","title":"Synthetic Data -- Anonymisation Groundhog Day","created":"2020-11-13","cited_by_count":108},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101},{"id":"1912.07942","title":"Analyzing Information Leakage of Updates to Natural Language Models","created":"2019-12-17","cited_by_count":90},{"id":"2011.03731","title":"On the Privacy Risks of Algorithmic Fairness","created":"2020-11-07","cited_by_count":82},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78},{"id":"2108.11023","title":"EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning","created":"2021-08-25","cited_by_count":73},{"id":"2011.11819","title":"When Machine Learning Meets Privacy: A Survey and Outlook","created":"2020-11-24","cited_by_count":68},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57},{"id":"2009.05241","title":"Improving Robustness to Model Inversion Attacks via Mutual Information Regularization","created":"2020-09-11","cited_by_count":52},{"id":"2106.03408","title":"Antipodes of Label Differential Privacy: PATE and ALIBI","created":"2021-06-07","cited_by_count":52},{"id":"2110.08760","title":"Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implications","created":"2021-10-17","cited_by_count":52},{"id":"2209.01292","title":"Are Attribute Inference Attacks Just Imputation?","created":"2022-09-02","cited_by_count":49},{"id":"2006.07267","title":"Leakage of Dataset Properties in Multi-Party Machine Learning","created":"2020-06-12","cited_by_count":47},{"id":"2109.06024","title":"Formalizing and Estimating Distribution Inference Risks","created":"2021-09-13","cited_by_count":43},{"id":"2202.12219","title":"Debugging Differential Privacy: A Case Study for Privacy Auditing","created":"2022-02-24","cited_by_count":40},{"id":"1906.00389","title":"Disparate Vulnerability to Membership Inference Attacks","created":"2019-06-02","cited_by_count":35},{"id":"2106.11384","title":"Membership Inference on Word Embedding and Beyond","created":"2021-06-21","cited_by_count":35},{"id":"1906.01337","title":"SoK: Differential Privacies","created":"2019-06-04","cited_by_count":34},{"id":"2111.07608","title":"Property Inference Attacks Against GANs","created":"2021-11-15","cited_by_count":33},{"id":"2206.05199","title":"Bayesian Estimation of Differential Privacy","created":"2022-06-10","cited_by_count":33},{"id":"1912.09685","title":"Segmentations-Leak: Membership Inference Attacks and Defenses in Semantic Image Segmentation","created":"2019-12-20","cited_by_count":32},{"id":"2010.12112","title":"Investigating Membership Inference Attacks under Data Dependencies","created":"2020-10-23","cited_by_count":32},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31},{"id":"1705.07663","title":"LOGAN: Membership Inference Attacks Against Generative Models","created":"2017-05-22","cited_by_count":28},{"id":"1904.06009","title":"Towards Formalizing the GDPR's Notion of Singling Out","created":"2019-04-12","cited_by_count":26},{"id":"2202.03460","title":"Deletion Inference, Reconstruction, and Compliance in Machine (Un)Learning","created":"2022-02-07","cited_by_count":24},{"id":"2206.03317","title":"Subject Membership Inference Attacks in Federated Learning","created":"2022-06-07","cited_by_count":20},{"id":"2209.08541","title":"Distribution inference risks: Identifying and mitigating sources of leakage","created":"2022-09-18","cited_by_count":17},{"id":"1908.03566","title":"That which we call private","created":"2019-08-08","cited_by_count":16},{"id":"2212.07591","title":"Dissecting Distribution Inference","created":"2022-12-15","cited_by_count":15},{"id":"2206.03617","title":"Subject Granular Differential Privacy in Federated Learning","created":"2022-06-07","cited_by_count":4}],"next_cursor":null}