{"total":96,"rows":[{"id":"2310.17884","title":"Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theory","created":"2023-10-27","cited_by_count":230,"area":null},{"id":"2406.15968","title":"ReCaLL: Membership Inference via Relative Conditional Log-Likelihoods","created":"2024-06-23","cited_by_count":64,"area":"safety"},{"id":"2312.03724","title":"DP-OPT: Make Large Language Model Your Privacy-Preserving Prompt Engineer","created":"2023-11-27","cited_by_count":57,"area":null},{"id":"2406.14773","title":"Mitigating the Privacy Issues in Retrieval-Augmented Generation (RAG) via Pure Synthetic Data","created":"2024-06-20","cited_by_count":52,"area":"rag"},{"id":"2407.11438","title":"Trust No Bot: Discovering Personal Disclosures in Human-LLM Conversations in the Wild","created":"2024-07-16","cited_by_count":47,"area":null},{"id":"2409.01380","title":"Membership Inference Attacks Against In-Context Learning","created":"2024-09-02","cited_by_count":43,"area":"safety"},{"id":"2401.04343","title":"Private Fine-tuning of Large Language Models with Zeroth-order Optimization","created":"2024-01-09","cited_by_count":41,"area":null},{"id":"2408.12787","title":"LLM-PBE: Assessing Data Privacy in Large Language Models","created":"2024-08-23","cited_by_count":41,"area":null},{"id":"2412.04697","title":"Privacy-Preserving Retrieval-Augmented Generation with Differential Privacy","created":"2024-12-06","cited_by_count":39,"area":"rag"},{"id":"2402.13659","title":"Privacy-Preserving Instructions for Aligning Large Language Models","created":"2024-02-21","cited_by_count":35,"area":"alignment"},{"id":"2310.01424","title":"Identifying and Mitigating Privacy Risks Stemming from Language Models: A Survey","created":"2023-09-27","cited_by_count":30,"area":null},{"id":"2406.02958","title":"PrE-Text: Training Language Models on Private Federated Data in the Age of LLMs","created":"2024-06-05","cited_by_count":29,"area":null},{"id":"2310.09639","title":"DPZero: Private Fine-Tuning of Language Models without Backpropagation","created":"2023-10-14","cited_by_count":26,"area":null},{"id":"2502.18509","title":"Protecting Users From Themselves: Safeguarding Contextual Privacy in Interactions with Conversational Agents","created":"2025-02-22","cited_by_count":26,"area":"agents"},{"id":"2404.06001","title":"Privacy Preserving Prompt Engineering: A Survey","created":"2024-04-09","cited_by_count":25,"area":null},{"id":"2406.14322","title":"Mind the Privacy Unit! User-Level Differential Privacy for Language Model Fine-Tuning","created":"2024-06-20","cited_by_count":24,"area":null},{"id":"2407.12108","title":"Private prediction for large-scale synthetic text generation","created":"2024-07-16","cited_by_count":24,"area":null},{"id":"2406.05392","title":"Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Survey","created":"2024-06-08","cited_by_count":23,"area":null},{"id":"2503.06808","title":"Privacy Auditing of Large Language Models","created":"2025-03-09","cited_by_count":23,"area":"safety"},{"id":"2409.03363","title":"Con-ReCall: Detecting Pre-training Data in LLMs via Contrastive Decoding","created":"2024-09-05","cited_by_count":20,"area":null},{"id":"2502.14921","title":"The Canary's Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text","created":"2025-02-19","cited_by_count":18,"area":"synth"},{"id":"2412.12775","title":"RemoteRAG: A Privacy-Preserving LLM Cloud RAG Service","created":"2024-12-17","cited_by_count":17,"area":"rag"},{"id":"2503.12347","title":"Synthesizing Privacy-Preserving Text Data via Finetuning without Finetuning Billion-Scale LLMs","created":"2025-03-16","cited_by_count":16,"area":null},{"id":"2501.18532","title":"Differentially Private Steering for Large Language Model Alignment","created":"2025-01-30","cited_by_count":15,"area":"alignment"},{"id":"2310.11397","title":"Last One Standing: A Comparative Analysis of Security and Privacy of Soft Prompt Tuning, LoRA, and In-Context Learning","created":"2023-10-17","cited_by_count":14,"area":"safety"},{"id":"2311.09069","title":"How Well Do Large Language Models Truly Ground?","created":"2023-11-15","cited_by_count":14,"area":null},{"id":"2406.14318","title":"The Fire Thief Is Also the Keeper: Balancing Usability and Privacy in Prompts","created":"2024-06-20","cited_by_count":13,"area":null},{"id":"2411.05818","title":"Open LLMs are Necessary for Current Private Adaptations and Outperform their Closed Alternatives","created":"2024-11-02","cited_by_count":12,"area":null},{"id":"2403.05681","title":"DP-TabICL: In-Context Learning with Differentially Private Tabular Data","created":"2024-03-08","cited_by_count":11,"area":null},{"id":"2503.14681","title":"DPImageBench: A Unified Benchmark for Differentially Private Image Synthesis","created":"2025-03-18","cited_by_count":11,"area":null},{"id":"2410.12085","title":"Data-adaptive Differentially Private Prompt Synthesis for In-Context Learning","created":"2024-10-15","cited_by_count":10,"area":null},{"id":"2507.02974","title":"InvisibleInk: High-Utility and Low-Cost Text Generation with Differential Privacy","created":"2025-06-30","cited_by_count":10,"area":"rag"},{"id":"2505.22061","title":"Safeguarding Privacy of Retrieval Data against Membership Inference Attacks: Is This Query Too Close to Home?","created":"2025-05-28","cited_by_count":9,"area":"rag"},{"id":"2507.07229","title":"SynthTextEval: Synthetic Text Data Generation and Evaluation for High-Stakes Domains","created":"2025-07-09","cited_by_count":7,"area":null},{"id":"2509.10696","title":"Struct-Bench: A Benchmark for Differentially Private Structured Text Generation","created":"2025-09-12","cited_by_count":7,"area":null},{"id":"2604.11523","title":"PAC-BENCH: Evaluating Multi-Agent Collaboration under Privacy Constraints","created":"2026-04-13","cited_by_count":7,"area":null},{"id":"2506.00400","title":"Scaling Textual Gradients via Sampling-Based Momentum","created":"2025-05-31","cited_by_count":6,"area":null},{"id":"2506.17336","title":"PPMI: Privacy-Preserving LLM Interaction with Socratic Chain-of-Thought Reasoning and Homomorphically Encrypted Vector Databases","created":"2025-06-19","cited_by_count":6,"area":"lr"},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2510.06719","title":"Differentially Private Synthetic Text Generation for Retrieval-Augmented Generation (RAG)","created":"2025-10-08","cited_by_count":6,"area":"rag"},{"id":"2506.04566","title":"Clustering and Median Aggregation Improve Differentially Private Inference","created":"2025-06-05","cited_by_count":5,"area":null},{"id":"2410.02016","title":"Adaptively Private Next-Token Prediction of Large Language Models","created":"2024-10-02","cited_by_count":4,"area":null},{"id":"2509.14594","title":"SynBench: A Benchmark for Differentially Private Text Generation","created":"2025-09-18","cited_by_count":4,"area":"safety"},{"id":"2512.16059","title":"ContextLeak: Auditing Leakage in Private In-Context Learning Methods","created":"2025-12-18","cited_by_count":4,"area":null},{"id":"2603.22751","title":"Observable Channels, Not Just Storage: Evaluating Privacy Leakage in LLM Agent Pipelines","created":"2026-03-24","cited_by_count":4,"area":"agents"},{"id":"2312.02132","title":"Hot PATE: Private Aggregation of Distributions for Diverse Task","created":"2023-12-04","cited_by_count":3,"area":null},{"id":"2510.18232","title":"ACTG-ARL: Differentially Private Conditional Text Generation with RL-Boosted Control","created":"2025-10-21","cited_by_count":3,"area":null},{"id":"2511.07637","title":"Private-RAG: Answering Multiple Queries with LLMs while Keeping Your Data Private","created":"2025-11-10","cited_by_count":3,"area":"rag"},{"id":"2606.04067","title":"Need to Know: Contextual-Integrity-Grounded Query Rewriting for Privacy-Conscious LLM Delegation","created":"2026-06-02","cited_by_count":3,"area":null},{"id":"2402.06701","title":"Privacy Profiles for Private Selection","created":"2024-02-09","cited_by_count":2,"area":null},{"id":"2409.17642","title":"AI Delegates with a Dual Focus: Ensuring Privacy and Strategic Self-Disclosure","created":"2024-09-26","cited_by_count":2,"area":null},{"id":"2502.13193","title":"Private Text Generation by Seeding Large Language Model Prompts","created":"2025-02-18","cited_by_count":2,"area":null},{"id":"2503.04990","title":"DP-GTR: Differentially Private Prompt Protection via Group Text Rewriting","created":"2025-03-06","cited_by_count":2,"area":null},{"id":"2504.02793","title":"A Framework for Situating Innovations, Opportunities, and Challenges in Advancing Vertical Systems with Large AI Models","created":"2025-04-03","cited_by_count":2,"area":null},{"id":"2505.02828","title":"Privacy Risks and Preservation Methods in Explainable Artificial Intelligence: A Scoping Review","created":"2025-05-05","cited_by_count":2,"area":null},{"id":"2505.15252","title":"An Efficient Private GPT Never Autoregressively Decodes","created":"2025-05-21","cited_by_count":2,"area":null},{"id":"2509.13625","title":"Privacy Preserving In-Context-Learning Framework for Large Language Models","created":"2025-09-17","cited_by_count":2,"area":null},{"id":"2602.11513","title":"Differentially Private and Communication Efficient Large Language Model Split Inference via Stochastic Quantization and Soft Prompt","created":"2026-02-12","cited_by_count":2,"area":null},{"id":"2602.14374","title":"Differentially Private Retrieval-Augmented Generation","created":"2026-02-16","cited_by_count":2,"area":"rag"},{"id":"2603.01499","title":"Towards Privacy-Preserving LLM Inference via Covariant Obfuscation (Technical Report)","created":"2026-03-02","cited_by_count":2,"area":null},{"id":"2409.19134","title":"Confidential Prompting: Privacy-preserving LLM Inference on Cloud","created":"2024-09-27","cited_by_count":1,"area":null},{"id":"2410.18114","title":"Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond","created":"2024-10-09","cited_by_count":1,"area":null},{"id":"2505.11837","title":"On Membership Inference Attacks in Knowledge Distillation","created":"2025-05-17","cited_by_count":1,"area":"safety"},{"id":"2506.16196","title":"Efficient and Privacy-Preserving Soft Prompt Transfer for LLMs","created":"2025-06-19","cited_by_count":1,"area":null},{"id":"2506.19563","title":"PrivacyXray: Detecting Privacy Breaches in LLMs through Semantic Consistency and Probability Certainty","created":"2025-06-24","cited_by_count":1,"area":null},{"id":"2508.18929","title":"Diverse And Private Synthetic Datasets Generation for RAG evaluation: A multi-agent framework","created":"2025-08-26","cited_by_count":1,"area":"rag"},{"id":"2509.10932","title":"Public Data Assisted Differentially Private In-Context Learning","created":"2025-09-13","cited_by_count":1,"area":null},{"id":"2509.24488","title":"Sanitize Your Responses: Mitigating Privacy Leakage in Large Language Models","created":"2025-09-29","cited_by_count":1,"area":"safety"},{"id":"2510.07304","title":"Cocoon: A System Architecture for Differentially Private Training with Correlated Noises","created":"2025-10-08","cited_by_count":1,"area":null},{"id":"2511.04332","title":"Differentially Private In-Context Learning with Nearest Neighbor Search","created":"2025-11-06","cited_by_count":1,"area":null},{"id":"2601.06641","title":"Leveraging Soft Prompts for Privacy Attacks in Federated Prompt Tuning","created":"2026-01-10","cited_by_count":1,"area":"safety"},{"id":"2601.16354","title":"NOIR: Privacy-Preserving Generation of Code with Open-Source LLMs","created":"2026-01-22","cited_by_count":1,"area":null},{"id":"2603.04894","title":"Differentially Private Multimodal In-Context Learning","created":"2026-03-05","cited_by_count":1,"area":"mllm"},{"id":"2603.20208","title":"RedacBench: Can AI Erase Your Secrets?","created":"2026-03-02","cited_by_count":1,"area":null},{"id":"2605.30808","title":"Differentially Private Preference Data Synthesis for Large Language Model Alignment","created":"2026-05-29","cited_by_count":1,"area":"alignment"},{"id":"2606.26021","title":"Privacy Vulnerabilities of Attention Layers in Tabular Foundation Models and Protection of High-Risk Queries","created":"2026-06-24","cited_by_count":1,"area":"safety"},{"id":"2609.05676","title":"PAC-Private Autoregressive Generation: Calibrating Noise to Ensemble Disagreement","created":"2026-09-04","cited_by_count":1,"area":null},{"id":"2502.21236","title":"Transforming Tuberculosis Care: Optimizing Large Language Models For Enhanced Clinician-Patient Communication","created":"2025-02-28","cited_by_count":0,"area":null},{"id":"2504.05148","title":"Stereo-LiDAR Fusion by Semi-Global Matching With Discrete Disparity-Matching Cost and Semidensification","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2506.23855","title":"Differentially Private Synthetic Data Release for Topics API Outputs","created":"2025-06-30","cited_by_count":0,"area":null},{"id":"2601.06368","title":"From Easy to Hard++: Promoting Differentially Private Image Synthesis Through Spatial-Frequency Curriculum","created":"2026-01-10","cited_by_count":0,"area":null},{"id":"2602.05012","title":"Private PoEtry: Private In-Context Learning via Product of Experts","created":"2026-02-04","cited_by_count":0,"area":null},{"id":"2602.18633","title":"DP-RFT: Learning to Generate Synthetic Text via Differentially Private Reinforcement Fine-Tuning","created":"2026-02-20","cited_by_count":0,"area":null},{"id":"2605.01425","title":"Barriers to Counterfactual Credit Attribution for Autoregressive Models","created":"2026-05-02","cited_by_count":0,"area":null},{"id":"2605.04116","title":"Membership Inference Attacks for Retrieval Based In-Context Learning for Document Question Answering","created":"2026-05-05","cited_by_count":0,"area":"safety"},{"id":"2605.06423","title":"Pop Quiz Attack: Black-box Membership Inference Attacks Against Large Language Models","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2606.01413","title":"Differentially Private Datastore Generation for Retrieval-Augmented Inference","created":"2026-05-31","cited_by_count":0,"area":null},{"id":"2606.06865","title":"Are Large Language Models Suitable for Graph Computation? Progress and Prospects","created":"2026-06-05","cited_by_count":0,"area":null},{"id":"2606.16952","title":"Phantoms and Disclosures: A Statistical Framework for Auditing Privacy in Synthetic Data","created":"2026-06-15","cited_by_count":0,"area":"synth"},{"id":"2606.26627","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2606.31474","title":"TabPATE: Differentially Private Tabular In-Context Learning Without Public Data","created":"2026-06-30","cited_by_count":0,"area":"safety"},{"id":"2608.29624","title":"PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatization","created":"2026-08-30","cited_by_count":0,"area":null},{"id":"2609.10611","title":"Black-Box Membership Inference via Word-Level Probability Estimation","created":"2026-09-08","cited_by_count":0,"area":"safety"},{"id":"2609.21686","title":"CIPL: A Channel-Aware Framework for Recoverable Privacy Leakage in LLM Agents","created":"2026-09-18","cited_by_count":0,"area":"agents"},{"id":"2610.01195","title":"Federated Agent Optimization","created":"2026-10-01","cited_by_count":0,"area":"agents"},{"id":"2610.06236","title":"DP-ES: Differentially Private Evolution Strategies for Prompt Optimization","created":"2026-10-05","cited_by_count":0,"area":null}],"next_cursor":null}