隐私攻击论文趋势 2023–2026
成员推断等
统计范围:NeurIPS、ICLR、ICML、CVPR 四个会议,2023–2026 年,共 698 篇被归入该主题的论文。
主要结论
- 隐私攻击论文从 2023 年的 124 篇增长到 2026 年的 219 篇,三年间扩大到约 1.8 倍。
- ICLR 是发隐私攻击论文最多的会议,2023–2026 年共 262 篇,占四个会议总量的 38%。
- 交叉方向里涨得最快的是对齐与安全:同时属于两个主题的论文从 2023 年的 2 篇增至 2026 年的 80 篇。
- 在「联邦与隐私」的 5 个主题里,它的 2026 年论文数排第 1;同组增长最快的安全聚合是 1.8 倍,隐私攻击是 1.8 倍。
各会议论文数
按年份和会议统计
| 年份 | NeurIPS | ICLR | ICML | CVPR | 合计 |
|---|---|---|---|---|---|
| 2023 | 46 | 24 | 29 | 25 | 124 |
| 2024 | 63 | 53 | 42 | 22 | 180 |
| 2025 | 45 | 83 | 29 | 18 | 175 |
| 2026 | 55 | 102 | 38 | 24 | 219 |
代表论文
按年份和会议均匀挑选,方便快速看到每一届的样貌
- NeurIPS 2026A Private Empirical Defense Against Privacy Audits
- ICML 2026A Statistical Framework for Analyzing Specification Resistance to Learnware-Inversion Risks
- ICLR 2026(Token-Level) \textbf{InfoRMIA}: Stronger Membership Inference and Privacy Assessment for LLMs
- CVPR 2026Out of Sight Out of Track Adversarial Attacks on Propagation-based
- NeurIPS 2025A Reliable Cryptographic Framework for Empirical Machine Unlearning Evaluation
- ICML 2025A Certified Unlearning Approach without Access to Source Data
- ICLR 2025Adversarial Attacks on Data Attribution
- CVPR 2025Adv-CPG: A Customized Portrait Generation Framework with Facial Adversarial Attacks
- NeurIPS 2024Reproducibility Study on Adversarial Attacks Against Robust Transformer Trackers
- ICML 2024Collective Certified Robustness against Graph Injection Attacks
- ICLR 2024Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks
- CVPR 2024Efficient Privacy-Preserving Visual Localization Using 3D Ray Clouds
- NeurIPS 2023Bounding the Invertibility of Privacy-preserving Instance Encoding using Fisher Information
- ICML 2023Data Poisoning Attacks Against Multimodal Encoders
- ICLR 2023Adversarial Attacks on Adversarial Bandits
- CVPR 2023Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders
- NeurIPS 2026Adaptive Target-Charging with Privacy Filters and Individual Accounting
- ICML 2026How does Bayesian Sampling help Membership Inference Attacks?
- ICLR 2026Beyond Membership: Limitations of Add/Remove Adjacency in Differential Privacy
- CVPR 2026Revisiting Geometric Obfuscation with Dual Convergent Lines for Privacy-Preserving Image
全部隐私攻击论文
共 63 篇,第 1 / 2 页
- NeurIPS 2024A Huber Loss Minimization Approach to Mean Estimation under User-level Differential Privacy
- NeurIPS 2024AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attacks
- NeurIPS 2024AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents
- NeurIPS 2024Are Your Models Still Fair? Fairness Attacks on Graph Neural Networks via Node Injections
- NeurIPS 2024Attack-Aware Noise Calibration for Differential Privacy
- NeurIPS 2024Auditing Privacy Mechanisms via Label Inference Attacks
- NeurIPS 2024Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs
- NeurIPS 2024Certified Machine Unlearning via Noisy Stochastic Gradient Descent
- NeurIPS 2024Continual Counting with Gradual Privacy Expiration
- NeurIPS 2024Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvature
- NeurIPS 2024DAGER: Exact Gradient Inversion for Large Language Models
- NeurIPS 2024Data Free Backdoor Attacks
- NeurIPS 2024Deep Support Vectors
- NeurIPS 2024Differentially Private Set Representations
- NeurIPS 2024Differentially Private Stochastic Gradient Descent with Fixed-Size Minibatches: Tighter RDP Guarantees with or without Replacement
- NeurIPS 2024Dual Defense: Enhancing Privacy and Mitigating Poisoning Attacks in Federated Learning
- NeurIPS 2024Efficient Adversarial Training in LLMs with Continuous Attacks
- NeurIPS 2024Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously
- NeurIPS 2024Faster Repeated Evasion Attacks in Tree Ensembles
- NeurIPS 2024HEPrune: Fast Private Training of Deep Neural Networks With Encrypted Data Pruning
- NeurIPS 2024HYDRA-FL: Hybrid Knowledge Distillation for Robust and Accurate Federated Learning
- NeurIPS 2024Improving Alignment and Robustness with Circuit Breakers
- NeurIPS 2024Instance-Optimal Private Density Estimation in the Wasserstein Distance
- NeurIPS 2024Instance-Specific Asymmetric Sensitivity in Differential Privacy
- NeurIPS 2024Large Language Model Unlearning
- NeurIPS 2024MALT Powers Up Adversarial Attacks
- NeurIPS 2024Measuring Dejavu Memorization Efficiently
- NeurIPS 2024Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibration
- NeurIPS 2024Membership Inference Attacks against Large Vision-Language Models
- NeurIPS 2024MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models
- NeurIPS 2024Nearly Tight Black-Box Auditing of Differentially Private Machine Learning
- NeurIPS 2024On Differentially Private Subspace Estimation in a Distribution-Free Setting
- NeurIPS 2024On provable privacy vulnerabilities of graph representations
- NeurIPS 2024OSLO: One-Shot Label-Only Membership Inference Attacks
- NeurIPS 2024PANORAMIA: Privacy Auditing of Machine Learning Models without Retraining
- NeurIPS 2024Prior-itizing Privacy: A Bayesian Approach to Setting the Privacy Budget in Differential Privacy
- NeurIPS 2024Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models
- NeurIPS 2024Private and Personalized Frequency Estimation in a Federated Setting
- NeurIPS 2024PrivAuditor: Benchmarking Data Protection Vulnerabilities in LLM Adaptation Techniques
- NeurIPS 2024PrivCirNet: Efficient Private Inference via Block Circulant Transformation
- NeurIPS 2024Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Models
- NeurIPS 2024Pseudo-Private Data Guided Model Inversion Attacks
- NeurIPS 2024RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees
- NeurIPS 2024Reconstruction Attacks on Machine Unlearning: Simple Models are Vulnerable
- NeurIPS 2024Reproducibility Study on Adversarial Attacks Against Robust Transformer Trackers
- NeurIPS 2024RFLPA: A Robust Federated Learning Framework against Poisoning Attacks with Secure Aggregation
- NeurIPS 2024Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks
- NeurIPS 2024Scalable DP-SGD: Shuffling vs. Poisson Subsampling
- NeurIPS 2024Scanning Trojaned Models Using Out-of-Distribution Samples
- NeurIPS 2024SleeperNets: Universal Backdoor Poisoning Attacks Against Reinforcement Learning Agents
在 Claude、Cursor 里直接问这个趋势
接上 Paperlist MCP 后,写综述、挑方向或准备投稿时,不用离开对话框就能拿到这页的数字:每年各会议的论文数、增长倍数、涨得最快的子方向和代表论文,AI 会按你的问题整理。
可以直接复制这句话问 AI
用 paperlist 查隐私攻击在 ICLR 2023–2026 的论文趋势,哪一年涨得最快?
AI 会调用的工具:get_topic_stats {"topic": "privacy-attacks"}
常见问题
- 2023–2026 年四大会议一共有多少篇隐私攻击论文?
- 共 698 篇,按年份分别是 2023 年 124 篇、2024 年 180 篇、2025 年 175 篇、2026 年 219 篇。
- NeurIPS 2026 有多少篇隐私攻击论文?
- NeurIPS 2026 有 55 篇隐私攻击论文,上一届是 45 篇。
- ICLR 2026 有多少篇隐私攻击论文?
- ICLR 2026 有 102 篇隐私攻击论文,上一届是 83 篇。
- ICML 2026 有多少篇隐私攻击论文?
- ICML 2026 有 38 篇隐私攻击论文,上一届是 29 篇。
- CVPR 2026 有多少篇隐私攻击论文?
- CVPR 2026 有 24 篇隐私攻击论文,上一届是 18 篇。
- 哪个会议的隐私攻击论文最多?
- ICLR,2023–2026 年共 262 篇。