{"total":56,"rows":[{"id":"2402.07841","title":"Do Membership Inference Attacks Work on Large Language Models?","created":"2024-02-12","cited_by_count":195,"area":"safety"},{"id":"2404.02936","title":"Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Models","created":"2024-04-03","cited_by_count":103,"area":null},{"id":"2406.16201","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","created":"2024-06-23","cited_by_count":69,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2409.19798","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","created":"2024-09-29","cited_by_count":50,"area":"safety"},{"id":"2402.09363","title":"Copyright Traps for Large Language Models","created":"2024-02-14","cited_by_count":37,"area":null},{"id":"2406.19234","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","created":"2024-06-27","cited_by_count":25,"area":"rag"},{"id":"2411.01705","title":"Data Extraction Attacks in Retrieval-Augmented Generation via Backdoors","created":"2024-11-03","cited_by_count":23,"area":"rag"},{"id":"2502.14921","title":"The Canary's Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text","created":"2025-02-19","cited_by_count":18,"area":"synth"},{"id":"2503.19338","title":"Membership Inference Attacks on Large-Scale Models: A Survey","created":"2025-03-25","cited_by_count":18,"area":"mllm"},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2410.07582","title":"Detecting Training Data of Large Language Models via Expectation Maximization","created":"2024-10-10","cited_by_count":13,"area":"safety"},{"id":"2404.00699","title":"A Comprehensive Survey of Contamination Detection Methods in Large Language Models","created":"2024-03-31","cited_by_count":12,"area":null},{"id":"2405.15523","title":"The Mosaic Memory of Large Language Models","created":"2024-05-24","cited_by_count":10,"area":null},{"id":"2411.19876","title":"LUMIA: Linear probing for Unimodal and MultiModal Membership Inference Attacks leveraging internal LLM states","created":"2024-11-29","cited_by_count":10,"area":"safety"},{"id":"2506.10424","title":"SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks","created":"2025-06-12","cited_by_count":10,"area":"safety"},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2412.06619","title":"Copyright-Protected Language Generation via Adaptive Model Fusion","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2601.02751","title":"Window-based Membership Inference Attacks Against Fine-tuned Large Language Models","created":"2026-01-06","cited_by_count":7,"area":"safety"},{"id":"2507.21412","title":"Cascading and Proxy Membership Inference Attacks","created":"2025-07-29","cited_by_count":6,"area":"safety"},{"id":"2509.14278","title":"Beyond Data Privacy: New Privacy Risks for Large Language Models","created":"2025-09-16","cited_by_count":6,"area":null},{"id":"2408.05968","title":"Nob-MIAs: Non-biased Membership Inference Attacks Assessment on Large Language Models with Ex-Post Dataset Construction","created":"2024-08-12","cited_by_count":5,"area":"safety"},{"id":"2510.02962","title":"Leave No TRACE: Black-box Detection of Copyrighted Dataset Usage in Large Language Models via Watermarking","created":"2025-10-03","cited_by_count":5,"area":"safety"},{"id":"2407.20105","title":"Strong Copyright Protection for Language Models via Adaptive Model Fusion","created":"2024-07-29","cited_by_count":4,"area":null},{"id":"2506.00808","title":"Unlearning Inversion Attacks for Graph Neural Networks","created":"2025-06-01","cited_by_count":4,"area":null},{"id":"2507.11128","title":"What Should LLMs Forget? Quantifying Personal Data in LLMs for Right-to-Be-Forgotten Requests","created":"2025-07-15","cited_by_count":4,"area":"safety"},{"id":"2511.01952","title":"Black-Box Membership Inference Attack for LVLMs via Prior Knowledge-Calibrated Memory Probing","created":"2025-11-03","cited_by_count":4,"area":"mllm"},{"id":"2403.15740","title":"Protecting Copyrighted Material with Unique Identifiers in Large Language Model Training","created":"2024-03-23","cited_by_count":3,"area":"safety"},{"id":"2507.16872","title":"CompLeak: Deep Learning Model Compression Exacerbates Privacy Leakage","created":"2025-07-22","cited_by_count":3,"area":null},{"id":"2510.05699","title":"Membership Inference Attacks on Tokenizers of Large Language Models","created":"2025-10-07","cited_by_count":3,"area":"safety"},{"id":"2511.20497","title":"Quantifying the Privacy Implications of High-Fidelity Synthetic Network Traffic","created":"2025-11-25","cited_by_count":3,"area":"safety"},{"id":"2405.08134","title":"Many-Shot Regurgitation (MSR) Prompting","created":"2024-05-13","cited_by_count":2,"area":"safety"},{"id":"2505.03392","title":"Automatic Calibration for Membership Inference Attack on Large Language Models","created":"2025-05-06","cited_by_count":2,"area":"safety"},{"id":"2511.21758","title":"A Longitudinal Measurement of Privacy Policy Evolution for Large Language Models","created":"2025-11-24","cited_by_count":2,"area":"agents"},{"id":"2602.02819","title":"Causal Evaluation of Membership Inference Attacks","created":"2026-02-02","cited_by_count":2,"area":"safety"},{"id":"2410.18824","title":"PSY: Posterior Sampling Based Privacy Enhancer in Large Language Models","created":"2024-10-24","cited_by_count":1,"area":"safety"},{"id":"2502.17358","title":"DIS-CO: Discovering Copyrighted Content in VLMs Training Data","created":"2025-02-24","cited_by_count":1,"area":"mllm"},{"id":"2505.11837","title":"On Membership Inference Attacks in Knowledge Distillation","created":"2025-05-17","cited_by_count":1,"area":"safety"},{"id":"2507.00258","title":"Impact of Fine-Tuning Methods on Memorization in Large Language Models","created":"2025-06-30","cited_by_count":1,"area":null},{"id":"2508.01268","title":"Win-k: Improved Membership Inference Attacks on Small Language Models","created":"2025-08-02","cited_by_count":1,"area":"safety"},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2506.20481","title":"Counterfactual Influence as a Distributional Quantity","created":"2025-06-25","cited_by_count":0,"area":null},{"id":"2509.04169","title":"Privacy Risks in Time Series Forecasting: User- and Record-Level Membership Inference","created":"2025-09-04","cited_by_count":0,"area":"safety"},{"id":"2511.00192","title":"EL-MIA: Quantifying Membership Inference Risks of Sensitive Entities in LLMs","created":"2025-10-31","cited_by_count":0,"area":"safety"},{"id":"2511.15192","title":"As If We've Met Before: LLMs Exhibit Certainty in Recognizing Seen Files","created":"2025-11-19","cited_by_count":0,"area":null},{"id":"2601.12937","title":"On the Evidentiary Limits of Membership Inference for Copyright Auditing","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2605.00955","title":"E-MIA: Exam-Style Black-Box Membership Inference Attacks against RAG Systems","created":"2026-05-01","cited_by_count":0,"area":"rag"},{"id":"2605.06423","title":"Pop Quiz Attack: Black-box Membership Inference Attacks Against Large Language Models","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.07088","title":"Membership Inference Attacks on Vision-Language-Action Models","created":"2026-05-08","cited_by_count":0,"area":"safety"},{"id":"2606.02920","title":"Fast Unlearning at Scale via Margin Self-Correction","created":"2026-06-01","cited_by_count":0,"area":"safety"},{"id":"2606.06502","title":"Subtle Injection for Ground-truth Inference of LLM Training Data","created":"2026-05-18","cited_by_count":0,"area":"safety"},{"id":"2606.23030","title":"Have You Ever Seen Them? Entity-level Membership Inference through Interrogating Large Language Models","created":"2026-06-22","cited_by_count":0,"area":"safety"},{"id":"2607.13541","title":"When T2I Synthetic Data Backfires: Amplified Privacy Risks in Real-Synthetic Mix Training","created":"2026-07-15","cited_by_count":0,"area":null},{"id":"2609.00492","title":"The Privacy-Hallucination Tradeoff in Differentially Private Language Models","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2609.21888","title":"Detecting Pretraining Data in Large Language Models from a Free-Energy Perspective","created":"2026-09-18","cited_by_count":0,"area":null},{"id":"2609.35408","title":"\"Nothing to See Here'': Unintended Disclosure through Revision Traces of LLM Deliverables","created":"2026-09-28","cited_by_count":0,"area":null}],"next_cursor":null}