隐私攻击论文趋势 2023–2026
成员推断等
统计范围:NeurIPS、ICLR、ICML、CVPR 四个会议,2023–2026 年,共 698 篇被归入该主题的论文。
主要结论
- 隐私攻击论文从 2023 年的 124 篇增长到 2026 年的 219 篇,三年间扩大到约 1.8 倍。
- ICLR 是发隐私攻击论文最多的会议,2023–2026 年共 262 篇,占四个会议总量的 38%。
- 交叉方向里涨得最快的是对齐与安全:同时属于两个主题的论文从 2023 年的 2 篇增至 2026 年的 80 篇。
- 在「联邦与隐私」的 5 个主题里,它的 2026 年论文数排第 1;同组增长最快的安全聚合是 1.8 倍,隐私攻击是 1.8 倍。
各会议论文数
按年份和会议统计
| 年份 | NeurIPS | ICLR | ICML | CVPR | 合计 |
|---|---|---|---|---|---|
| 2023 | 46 | 24 | 29 | 25 | 124 |
| 2024 | 63 | 53 | 42 | 22 | 180 |
| 2025 | 45 | 83 | 29 | 18 | 175 |
| 2026 | 55 | 102 | 38 | 24 | 219 |
代表论文
按年份和会议均匀挑选,方便快速看到每一届的样貌
- NeurIPS 2026A Private Empirical Defense Against Privacy Audits
- ICML 2026A Statistical Framework for Analyzing Specification Resistance to Learnware-Inversion Risks
- ICLR 2026(Token-Level) \textbf{InfoRMIA}: Stronger Membership Inference and Privacy Assessment for LLMs
- CVPR 2026Out of Sight Out of Track Adversarial Attacks on Propagation-based
- NeurIPS 2025A Reliable Cryptographic Framework for Empirical Machine Unlearning Evaluation
- ICML 2025A Certified Unlearning Approach without Access to Source Data
- ICLR 2025Adversarial Attacks on Data Attribution
- CVPR 2025Adv-CPG: A Customized Portrait Generation Framework with Facial Adversarial Attacks
- NeurIPS 2024Reproducibility Study on Adversarial Attacks Against Robust Transformer Trackers
- ICML 2024Collective Certified Robustness against Graph Injection Attacks
- ICLR 2024Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks
- CVPR 2024Efficient Privacy-Preserving Visual Localization Using 3D Ray Clouds
- NeurIPS 2023Bounding the Invertibility of Privacy-preserving Instance Encoding using Fisher Information
- ICML 2023Data Poisoning Attacks Against Multimodal Encoders
- ICLR 2023Adversarial Attacks on Adversarial Bandits
- CVPR 2023Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders
- NeurIPS 2026Adaptive Target-Charging with Privacy Filters and Individual Accounting
- ICML 2026How does Bayesian Sampling help Membership Inference Attacks?
- ICLR 2026Beyond Membership: Limitations of Add/Remove Adjacency in Differential Privacy
- CVPR 2026Revisiting Geometric Obfuscation with Dual Convergent Lines for Privacy-Preserving Image
全部隐私攻击论文
共 209 篇,第 4 / 5 页
- NeurIPS 2024SPEAR: Exact Gradient Inversion of Batches in Federated Learning
- NeurIPS 2024Stealth edits to large language models
- NeurIPS 2024SuperDeepFool: a new fast and accurate minimal adversarial attack
- NeurIPS 2024TARP-VP: Towards Evaluation of Transferred Adversarial Robustness and Privacy on Label Mapping Visual Prompting Models
- NeurIPS 2024The Limits of Differential Privacy in Online Learning
- NeurIPS 2024Trap-MID: Trapdoor-based Defense against Model Inversion Attacks
- NeurIPS 2024Tree of Attacks: Jailbreaking Black-Box LLMs Automatically
- NeurIPS 2024Unelicitable Backdoors via Cryptographic Transformer Circuits
- NeurIPS 2024United We Stand, Divided We Fall: Fingerprinting Deep Neural Networks via Adversarial Trajectories
- NeurIPS 2024Watermarking Makes Language Models Radioactive
- NeurIPS 2024WaveAttack: Asymmetric Frequency Obfuscation-based Backdoor Attacks Against Deep Neural Networks
- NeurIPS 2024Wide Two-Layer Networks can Learn from Adversarial Perturbations
- NeurIPS 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Models
- NeurIPS 2023$k$-Means Clustering with Distance-Based Privacy
- NeurIPS 2023A Unified Detection Framework for Inference-Stage Backdoor Defenses
- NeurIPS 2023A Unified Fast Gradient Clipping Framework for DP-SGD
- NeurIPS 2023Adaptive Privacy Composition for Accuracy-first Mechanisms
- NeurIPS 2023Adversarially Robust Distributed Count Tracking via Partial Differential Privacy
- NeurIPS 2023Batchnorm Allows Unsupervised Radial Attacks
- NeurIPS 2023Blurred-Dilated Method for Adversarial Attacks
- NeurIPS 2023Bounding the Invertibility of Privacy-preserving Instance Encoding using Fisher Information
- NeurIPS 2023Bounding training data reconstruction in DP-SGD
- NeurIPS 2023Counting Distinct Elements in the Turnstile Model with Differential Privacy under Continual Observation
- NeurIPS 2023Counting Distinct Elements Under Person-Level Differential Privacy
- NeurIPS 2023Data Minimization at Inference Time
- NeurIPS 2023DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification
- NeurIPS 2023Differentially Private Statistical Inference through $\beta$-Divergence One Posterior Sampling
- NeurIPS 2023Do SSL Models Have Déjà Vu? A Case of Unintended Memorization in Self-supervised Learning
- NeurIPS 2023Faster approximate subgraph counts with privacy
- NeurIPS 2023FedGame: A Game-Theoretic Defense against Backdoor Attacks in Federated Learning
- NeurIPS 2023Flocks of Stochastic Parrots: Differentially Private Prompt Learning for Large Language Models
- NeurIPS 2023GAN You See Me? Enhanced Data Reconstruction Attacks against Split Inference
- NeurIPS 2023Gaussian Differential Privacy on Riemannian Manifolds
- NeurIPS 2023Gaussian Membership Inference Privacy
- NeurIPS 2023Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks
- NeurIPS 2023k-Median Clustering via Metric Embedding: Towards Better Initialization with Differential Privacy
- NeurIPS 2023Label Robust and Differentially Private Linear Regression: Computational and Statistical Efficiency
- NeurIPS 2023Label-Only Model Inversion Attacks via Knowledge Transfer
- NeurIPS 2023LinGCN: Structural Linearized Graph Convolutional Network for Homomorphically Encrypted Inference
- NeurIPS 2023Marich: A Query-efficient Distributionally Equivalent Model Extraction Attack
- NeurIPS 2023Minimax Risks and Optimal Procedures for Estimation under Functional Local Differential Privacy
- NeurIPS 2023On Computing Pairwise Statistics with Local Differential Privacy
- NeurIPS 2023On Private and Robust Bandits
- NeurIPS 2023Optimal Unbiased Randomizers for Regression with Label Differential Privacy
- NeurIPS 2023Posthoc privacy guarantees for collaborative inference with modified Propose-Test-Release
- NeurIPS 2023Practical Differentially Private Hyperparameter Tuning with Subsampling
- NeurIPS 2023Privacy Amplification via Compression: Achieving the Optimal Privacy-Accuracy-Communication Trade-off in Distributed Mean Estimation
- NeurIPS 2023Privacy Assessment on Reconstructed Images: Are Existing Evaluation Metrics Faithful to Human Perception?
- NeurIPS 2023Privacy Auditing with One (1) Training Run
- NeurIPS 2023Private Federated Frequency Estimation: Adapting to the Hardness of the Instance
在 Claude、Cursor 里直接问这个趋势
接上 Paperlist MCP 后,写综述、挑方向或准备投稿时,不用离开对话框就能拿到这页的数字:每年各会议的论文数、增长倍数、涨得最快的子方向和代表论文,AI 会按你的问题整理。
可以直接复制这句话问 AI
用 paperlist 查隐私攻击在 ICLR 2023–2026 的论文趋势,哪一年涨得最快?
AI 会调用的工具:get_topic_stats {"topic": "privacy-attacks"}
常见问题
- 2023–2026 年四大会议一共有多少篇隐私攻击论文?
- 共 698 篇,按年份分别是 2023 年 124 篇、2024 年 180 篇、2025 年 175 篇、2026 年 219 篇。
- NeurIPS 2026 有多少篇隐私攻击论文?
- NeurIPS 2026 有 55 篇隐私攻击论文,上一届是 45 篇。
- ICLR 2026 有多少篇隐私攻击论文?
- ICLR 2026 有 102 篇隐私攻击论文,上一届是 83 篇。
- ICML 2026 有多少篇隐私攻击论文?
- ICML 2026 有 38 篇隐私攻击论文,上一届是 29 篇。
- CVPR 2026 有多少篇隐私攻击论文?
- CVPR 2026 有 24 篇隐私攻击论文,上一届是 18 篇。
- 哪个会议的隐私攻击论文最多?
- ICLR,2023–2026 年共 262 篇。