{"list":"other","total":74,"rows":[{"id":"2005.14165","title":"Language Models are Few-Shot Learners","created":"2020-05-28","cited_by_count":32419},{"id":"1602.05629","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data","created":"2016-02-17","cited_by_count":7669},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1704.04861","title":"MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applications","created":"2017-04-17","cited_by_count":3845},{"id":"1411.7766","title":"Deep Learning Face Attributes in the Wild","created":"2014-11-28","cited_by_count":3693},{"id":"1703.05175","title":"Prototypical Networks for Few-shot Learning","created":"2017-03-15","cited_by_count":3015},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1906.08935","title":"Deep Leakage from Gradients","created":"2019-06-21","cited_by_count":1021},{"id":"1612.00410","title":"Deep Variational Information Bottleneck","created":"2016-12-01","cited_by_count":930},{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878},{"id":"2301.13188","title":"Extracting Training Data from Diffusion Models","created":"2023-01-30","cited_by_count":732},{"id":"2003.14053","title":"Inverting Gradients -- How easy is it to break privacy in federated learning?","created":"2020-03-31","cited_by_count":712},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1811.03604","title":"Federated Learning for Mobile Keyboard Prediction","created":"2018-11-08","cited_by_count":572},{"id":"1802.04434","title":"signSGD: Compressed Optimisation for Non-Convex Problems","created":"2018-02-13","cited_by_count":571},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"1702.08423","title":"Age Progression/Regression by Conditional Adversarial Autoencoder","created":"2017-02-27","cited_by_count":429},{"id":"1912.08795","title":"Dreaming to Distill: Data-free Knowledge Transfer via DeepInversion","created":"2019-12-18","cited_by_count":423},{"id":"1605.02065","title":"Concentrated Differential Privacy: Simplifications, Extensions, and Lower Bounds","created":"2016-05-06","cited_by_count":346},{"id":"2104.07586","title":"See through Gradients: Image Batch Recovery via GradInversion","created":"2021-04-15","cited_by_count":326},{"id":"1311.0776","title":"The Composition Theorem for Differential Privacy","created":"2013-11-04","cited_by_count":297},{"id":"2003.10595","title":"Systematic Evaluation of Privacy Risks of Machine Learning Models","created":"2020-03-24","cited_by_count":292},{"id":"1908.11229","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","created":"2019-08-29","cited_by_count":271},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248},{"id":"1911.07135","title":"The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks","created":"2019-11-17","cited_by_count":246},{"id":"2006.07709","title":"Auditing Differentially Private Machine Learning: How Private is Private SGD?","created":"2020-06-13","cited_by_count":218},{"id":"1812.03224","title":"A Hybrid Approach to Privacy-Preserving Federated Learning","created":"2018-12-07","cited_by_count":210},{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199},{"id":"1909.10594","title":"MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples","created":"2019-09-23","cited_by_count":197},{"id":"2112.00059","title":"Evaluating Gradient Inversion Attacks and Defenses in Federated Learning","created":"2021-11-30","cited_by_count":196},{"id":"1906.11798","title":"Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inference","created":"2019-06-27","cited_by_count":175},{"id":"2201.04845","title":"Reconstructing Training Data with Informed Adversaries","created":"2022-01-13","cited_by_count":148},{"id":"2206.07758","title":"Reconstructing Training Data from Trained Neural Networks","created":"2022-06-15","cited_by_count":133},{"id":"1306.4447","title":"Hacking Smart Machines with Smarter Ones: How to Extract Meaningful Data from Machine Learning Classifiers","created":"2013-06-19","cited_by_count":130},{"id":"1904.01067","title":"Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning","created":"2019-04-01","cited_by_count":122},{"id":"1802.05351","title":"Stealing Hyperparameters in Machine Learning","created":"2018-02-14","cited_by_count":118},{"id":"2012.06043","title":"Provable Defense against Privacy Leakage in Federated Learning from Representation Perspective","created":"2020-12-08","cited_by_count":94},{"id":"1905.11742","title":"Overlearning Reveals Sensitive Attributes","created":"2019-05-28","cited_by_count":76},{"id":"2201.10787","title":"Variational Model Inversion Attacks","created":"2022-01-26","cited_by_count":75},{"id":"2203.15696","title":"Auditing Privacy Defenses in Federated Learning via Generative Gradient Leakage","created":"2022-03-29","cited_by_count":72},{"id":"2205.08514","title":"Recovering Private Text in Federated Learning of Language Models","created":"2022-05-17","cited_by_count":70},{"id":"1805.04810","title":"AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning","created":"2018-05-13","cited_by_count":60},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51},{"id":"2209.01292","title":"Are Attribute Inference Attacks Just Imputation?","created":"2022-09-02","cited_by_count":49},{"id":"2010.15965","title":"Training Speech Recognition Models with Federated Learning: A Quality/Cost Framework","created":"2020-10-29","cited_by_count":46},{"id":"2302.07225","title":"Bounding Training Data Reconstruction in DP-SGD","created":"2023-02-14","cited_by_count":46},{"id":"1608.03677","title":"Differential Privacy as a Mutual Information Constraint","created":"2016-08-12","cited_by_count":45},{"id":"2106.06089","title":"Gradient Disaggregation: Breaking Privacy in Federated Learning by Reconstructing the User Participant Matrix","created":"2021-06-10","cited_by_count":43},{"id":"2109.06024","title":"Formalizing and Estimating Distribution Inference Risks","created":"2021-09-13","cited_by_count":43},{"id":"2201.09370","title":"Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Models","created":"2022-01-23","cited_by_count":43},{"id":"2206.04055","title":"Gradient Obfuscation Gives a False Sense of Security in Federated Learning","created":"2022-06-08","cited_by_count":39},{"id":"2302.03098","title":"One-shot Empirical Privacy Estimation for Federated Learning","created":"2023-02-06","cited_by_count":36},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31},{"id":"2106.09779","title":"Private Federated Learning Without a Trusted Server: Optimal Algorithms for Convex Losses","created":"2021-06-17","cited_by_count":30},{"id":"2210.10880","title":"Learning to Invert: Simple Adaptive Attacks for Gradient Inversion in Federated Learning","created":"2022-10-19","cited_by_count":30},{"id":"2108.04725","title":"PRECODE - A Generic Model Extension to Prevent Deep Gradient Leakage","created":"2021-08-10","cited_by_count":28},{"id":"2210.02912","title":"CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning","created":"2022-10-06","cited_by_count":24},{"id":"2203.02077","title":"User-Level Membership Inference Attack against Metric Embedding Learning","created":"2022-03-04","cited_by_count":22},{"id":"2208.02304","title":"How Much Privacy Does Federated Learning with Secure Aggregation Guarantee?","created":"2022-08-03","cited_by_count":19},{"id":"2108.06910","title":"A Novel Attribute Reconstruction Attack in Federated Learning","created":"2021-08-16","cited_by_count":18},{"id":"2304.08322","title":"Decentralized Learning Made Easy with DecentralizePy","created":"2023-04-17","cited_by_count":18},{"id":"2210.13662","title":"Analyzing Privacy Leakage in Machine Learning via Multiple Hypothesis Testing: A Lesson From Fano","created":"2022-10-24","cited_by_count":17},{"id":"2210.01785","title":"TabLeak: Tabular Data Leakage in Federated Learning","created":"2022-10-04","cited_by_count":13},{"id":"2112.13416","title":"Attribute Inference Attack of Speech Emotion Recognition in Federated Learning Settings","created":"2021-12-26","cited_by_count":12},{"id":"2402.09540","title":"Why Does Differential Privacy with Large Epsilon Defend Against Practical Membership Inference Attacks?","created":"2024-02-14","cited_by_count":12},{"id":"2303.03908","title":"Client-specific Property Inference against Secure Aggregation in Federated Learning","created":"2023-03-07","cited_by_count":9},{"id":"1908.10623","title":"Emotion Recognition in Low-Resource Settings: An Evaluation of Automatic Feature Selection Methods","created":"2019-08-28","cited_by_count":8},{"id":"2010.07808","title":"Federated Learning in Adversarial Settings","created":"2020-10-15","cited_by_count":5},{"id":"2209.04053","title":"Algorithms with More Granular Differential Privacy Guarantees","created":"2022-09-08","cited_by_count":4},{"id":"2309.04515","title":"Privacy Preserving Federated Learning with Convolutional Variational Bottlenecks","created":"2023-09-08","cited_by_count":2}],"next_cursor":null}