{"total":27,"rows":[{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2309.17410","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","created":"2023-09-29","cited_by_count":158,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2311.04235","title":"Can LLMs Follow Simple Rules?","created":"2023-11-06","cited_by_count":46,"area":null},{"id":"2310.18362","title":"SoK: Memorization in General-Purpose Large Language Models","created":"2023-10-24","cited_by_count":37,"area":null},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2310.01424","title":"Identifying and Mitigating Privacy Risks Stemming from Language Models: A Survey","created":"2023-09-27","cited_by_count":30,"area":null},{"id":"2404.01231","title":"Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models","created":"2024-04-01","cited_by_count":30,"area":null},{"id":"2403.09751","title":"What Was Your Prompt? A Remote Keylogging Attack on AI Assistants","created":"2024-03-14","cited_by_count":26,"area":null},{"id":"2406.07954","title":"Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition","created":"2024-06-12","cited_by_count":20,"area":null},{"id":"2312.05114","title":"The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against \"Truly Anonymous\" Synthetic Datasets","created":"2023-12-08","cited_by_count":14,"area":null},{"id":"2411.10242","title":"Measuring Non-Adversarial Reproduction of Training Data in Large Language Models","created":"2024-11-15","cited_by_count":14,"area":null},{"id":"2411.09973","title":"Establishing and Evaluating Trustworthy AI: Overview and Research Challenges","created":"2024-11-15","cited_by_count":12,"area":null},{"id":"2410.10880","title":"Fine-tuning can Help Detect Pretraining Data from Large Language Models","created":"2024-10-09","cited_by_count":8,"area":null},{"id":"2501.03941","title":"Synthetic Data Privacy Metrics","created":"2025-01-07","cited_by_count":8,"area":null},{"id":"2502.11910","title":"Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectives","created":"2025-02-17","cited_by_count":8,"area":null},{"id":"2411.10614","title":"To Shuffle or not to Shuffle: Auditing DP-SGD with Shuffling","created":"2024-11-15","cited_by_count":6,"area":null},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2411.15796","title":"Data Lineage Inference: Uncovering Privacy Vulnerabilities of Dataset Pruning","created":"2024-11-24","cited_by_count":5,"area":null},{"id":"2506.16666","title":"The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditing","created":"2025-06-20","cited_by_count":5,"area":null},{"id":"2403.13041","title":"Provable Privacy with Non-Private Pre-Processing","created":"2024-03-19","cited_by_count":2,"area":null},{"id":"2411.03730","title":"NeurIPS 2023 Competition: Privacy Preserving Federated Learning Document VQA","created":"2024-11-06","cited_by_count":2,"area":null},{"id":"2505.05872","title":"A Taxonomy of Attacks and Defenses in Split Learning","created":"2025-05-09","cited_by_count":2,"area":null},{"id":"2411.13459","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","created":"2024-11-20","cited_by_count":1,"area":null},{"id":"2608.02774","title":"Privacy-Preserving AI Verification via Minimal Information Disclosure","created":"2026-08-03","cited_by_count":0,"area":null},{"id":"2609.38289","title":"Privacy in Personalized AI Is a System Property, Not Just a Model Property","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2610.13083","title":"The Limits of Query Monitoring against Distributed Model Extraction","created":"2026-10-09","cited_by_count":0,"area":null}],"next_cursor":null}