{"list":"other","total":56,"rows":[{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1602.05629","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data","created":"2016-02-17","cited_by_count":7669},{"id":"1802.03426","title":"UMAP: Uniform Manifold Approximation and Projection for Dimension Reduction","created":"2018-02-09","cited_by_count":2898},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"2012.07805","title":"Extracting Training Data from Large Language Models","created":"2020-12-14","cited_by_count":2189},{"id":"1610.05492","title":"Federated Learning: Strategies for Improving Communication Efficiency","created":"2016-10-18","cited_by_count":1475},{"id":"2106.12423","title":"Alias-Free Generative Adversarial Networks","created":"2021-06-23","cited_by_count":1184},{"id":"1902.01046","title":"Towards Federated Learning at Scale: System Design","created":"2019-02-04","cited_by_count":832},{"id":"2301.13188","title":"Extracting Training Data from Diffusion Models","created":"2023-01-30","cited_by_count":732},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1812.00564","title":"Split learning for health: Distributed deep learning without sharing raw patient data","created":"2018-12-03","cited_by_count":395},{"id":"2007.14321","title":"Label-Only Membership Inference Attacks","created":"2020-07-28","cited_by_count":388},{"id":"1702.07464","title":"Deep Models Under the GAN: Information Leakage from Collaborative Deep Learning","created":"2017-02-24","cited_by_count":334},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321},{"id":"2003.10595","title":"Systematic Evaluation of Privacy Risks of Machine Learning Models","created":"2020-03-24","cited_by_count":292},{"id":"1908.11229","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","created":"2019-08-29","cited_by_count":271},{"id":"1812.00535","title":"Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learning","created":"2018-12-03","cited_by_count":246},{"id":"1805.02628","title":"PRADA: Protecting against DNN Model Stealing Attacks","created":"2018-05-07","cited_by_count":165},{"id":"2007.07646","title":"A Survey of Privacy Attacks in Machine Learning","created":"2020-07-15","cited_by_count":146},{"id":"2206.10469","title":"The Privacy Onion Effect: Memorization is Relative","created":"2022-06-21","cited_by_count":136},{"id":"2206.07758","title":"Reconstructing Training Data from Trained Neural Networks","created":"2022-06-15","cited_by_count":133},{"id":"1904.01067","title":"Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning","created":"2019-04-01","cited_by_count":122},{"id":"2009.04131","title":"SoK: Certified Robustness for Deep Neural Networks","created":"2020-09-09","cited_by_count":105},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101},{"id":"1409.7938","title":"Lazier Than Lazy Greedy","created":"2014-09-28","cited_by_count":99},{"id":"2005.03161","title":"MAZE: Data-Free Model Stealing Attack Using Zeroth-Order Gradient Estimation","created":"2020-05-06","cited_by_count":99},{"id":"2201.10787","title":"Variational Model Inversion Attacks","created":"2022-01-26","cited_by_count":75},{"id":"2210.00968","title":"Membership Inference Attacks Against Text-to-image Generation Models","created":"2022-10-03","cited_by_count":69},{"id":"2004.10397","title":"A Framework for Evaluating Gradient Leakage Attacks in Federated Learning","created":"2020-04-22","cited_by_count":64},{"id":"2201.12179","title":"Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks","created":"2022-01-28","cited_by_count":60},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58},{"id":"2203.01925","title":"Label-Only Model Inversion Attacks via Boundary Repulsion","created":"2022-03-03","cited_by_count":56},{"id":"2009.05241","title":"Improving Robustness to Model Inversion Attacks via Mutual Information Regularization","created":"2020-09-11","cited_by_count":52},{"id":"2003.12365","title":"Can We Use Split Learning on 1D CNN Models for Privacy Preserving Training?","created":"2020-03-16","cited_by_count":50},{"id":"2104.12669","title":"Exploiting Explanations for Model Inversion Attacks","created":"2021-04-26","cited_by_count":49},{"id":"2302.07225","title":"Bounding Training Data Reconstruction in DP-SGD","created":"2023-02-14","cited_by_count":46},{"id":"1903.11257","title":"How Can We Be So Dense? The Benefits of Using Highly Sparse Representations","created":"2019-03-27","cited_by_count":45},{"id":"2308.04699","title":"GIFD: A Generative Gradient Inversion Method with Feature Domain Optimization","created":"2023-08-09","cited_by_count":45},{"id":"2201.09370","title":"Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Models","created":"2022-01-23","cited_by_count":43},{"id":"1606.05893","title":"You are Who You Know and How You Behave: Attribute Inference Attacks via Users' Social Friends and Behaviors","created":"2016-06-19","cited_by_count":34},{"id":"2205.06504","title":"DualCF: Efficient Model Extraction Attack from Counterfactual Explanations","created":"2022-05-13","cited_by_count":32},{"id":"1812.00037","title":"Adversarial Defense by Stratified Convolutional Sparse Coding","created":"2018-11-30","cited_by_count":31},{"id":"2103.07101","title":"On the (In)Feasibility of Attribute Inference Attacks on Machine Learning Models","created":"2021-03-12","cited_by_count":31},{"id":"2206.05483","title":"Bilateral Dependency Optimization: Defending Against Model-inversion Attacks","created":"2022-06-11","cited_by_count":30},{"id":"2104.05743","title":"Practical Defences Against Model Inversion Attacks for Split Neural Networks","created":"2021-04-12","cited_by_count":29},{"id":"2009.09560","title":"ES Attack: Model Stealing against Deep Neural Networks without Data Hurdles","created":"2020-09-21","cited_by_count":25},{"id":"2209.01100","title":"Group Property Inference Attacks Against Graph Neural Networks","created":"2022-09-02","cited_by_count":21},{"id":"1909.11835","title":"GAMIN: An Adversarial Approach to Black-Box Model Inversion","created":"2019-09-26","cited_by_count":19},{"id":"1907.06173","title":"The FAST Algorithm for Submodular Maximization","created":"2019-07-14","cited_by_count":13},{"id":"2308.12882","title":"LCANets++: Robust Audio Classification using Multi-layer Neural Networks with Lateral Competition","created":"2023-08-23","cited_by_count":6},{"id":"1805.07337","title":"Reconstruction of training samples from loss functions","created":"2018-05-18","cited_by_count":5},{"id":"2111.07917","title":"Best of Both Worlds: Practical and Theoretically Optimal Submodular Maximization in Parallel","created":"2021-11-15","cited_by_count":5},{"id":"2212.03282","title":"MobilePTX: Sparse Coding for Pneumothorax Detection Given Limited Training Examples","created":"2022-12-06","cited_by_count":4},{"id":"2308.05353","title":"Preemptive Detection of Fake Accounts on Social Networks via Multi-Class Preferential Attachment Classifiers","created":"2023-08-10","cited_by_count":2},{"id":"2307.10788","title":"Adversarial attacks for mixtures of classifiers","created":"2023-07-20","cited_by_count":1}],"next_cursor":null}