% Key papers for Membership inference and inversion (scime atlas, https://atlas.scime.ai). Authors are not included: add them from the paper pages.

@inproceedings{cvpr2020_the_16340,
  title = {{The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{aaai2021_amnesiac_118,
  title = {{Amnesiac Machine Learning}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2021},
  url = {https://aaai.org/papers/11516-amnesiac-machine-learning/},
}

@inproceedings{icml2021_label_39505,
  title = {{Label-Only Membership Inference Attacks}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2021},
  url = {https://icml.cc/virtual/2021/poster/9415},
}

@inproceedings{cvpr2022_fingerprinting_18863,
  title = {{Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2021_on_17536,
  title = {{On the Difficulty of Membership Inference Attacks}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2021},
}

@inproceedings{aaai2020_adversarial_103823,
  title = {{Adversarial Learning of Privacy-Preserving and Task-Oriented Representations}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2020},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/6930},
}

@inproceedings{cvpr2022_label_19156,
  title = {{Label-Only Model Inversion Attacks via Boundary Repulsion}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{aaai2021_improving_768,
  title = {{Improving Robustness to Model Inversion Attacks via Mutual Information Regularization}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2021},
  url = {https://aaai.org/papers/11666-improving-robustness-to-model-inversion-attacks-via-mutual-information-regularization/},
}

@inproceedings{cvpr2023_re_21989,
  title = {{Re-Thinking Model Inversion Attacks Against Deep Neural Networks}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/22136},
}

@inproceedings{aaai2021_exacerbating_551,
  title = {{Exacerbating Algorithmic Bias through Fairness Attacks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2021},
  url = {https://aaai.org/papers/08930-exacerbating-algorithmic-bias-through-fairness-attacks/},
}

@inproceedings{aaai2021_how_725,
  title = {{How Does Data Augmentation Affect Privacy in Machine Learning?}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2021},
  url = {https://aaai.org/papers/10746-how-does-data-augmentation-affect-privacy-in-machine-learning/},
}

@inproceedings{aaai2024_learning_6513,
  title = {{Learning to Unlearn: Instance-Wise Unlearning for Pre-trained Classifiers}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28996},
}

@inproceedings{aaai2023_pseudo_4444,
  title = {{Pseudo Label-Guided Model Inversion Attack via Conditional Generative Adversarial Network}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2023},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/25442},
}

@inproceedings{aaai2016_optimizing_104776,
  title = {{Optimizing Personalized Email Filtering Thresholds to Mitigate Sequential Spear Phishing Attacks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2016},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/10030},
}

@inproceedings{neurips2018_contamination_56969,
  title = {{Contamination Attacks and Mitigation in Multi-Party Machine Learning}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2018},
  url = {https://nips.cc/virtual/2018/poster/11638},
}

@inproceedings{neurips2021_variational_62689,
  title = {{Variational Model Inversion Attacks}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2021},
  url = {https://nips.cc/virtual/2021/poster/28350},
}

@inproceedings{iclr2021_dataset_30546,
  title = {{Dataset Inference: Ownership Resolution in Machine Learning}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2021},
  url = {https://iclr.cc/virtual/2021/poster/2745},
}

@inproceedings{aaai2023_disguide_3473,
  title = {{DisGUIDE: Disagreement-Guided Data-Free Model Extraction}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2023},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/26150},
}

@inproceedings{cvpr2022_leveraging_19248,
  title = {{Leveraging Adversarial Examples To Quantify Membership Information Leakage}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{aaai2023_purifier_4445,
  title = {{Purifier: Defending Data Inference Attacks via Transforming Confidence Scores}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2023},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/26289},
}

@inproceedings{aaai2024_data_5601,
  title = {{Data-Free Hard-Label Robustness Stealing Attack}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28510},
}

@inproceedings{aaai2025_medical_9932,
  title = {{Medical Multimodal Model Stealing Attacks via Adversarial Domain Alignment}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/32734},
}

@inproceedings{cvpr2024_model_24175,
  title = {{Model Inversion Robustness: Can Transfer Learning Help?}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/30841},
}

@inproceedings{neurips2024_reconstruction_73429,
  title = {{Reconstruction Attacks on Machine Unlearning: Simple Models are Vulnerable}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/94032},
}

@inproceedings{aaai2025_sim4rec_10760,
  title = {{Sim4Rec: Data-Free Model Extraction Attack on Sequential Recommendation}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/33392},
}

@inproceedings{aaai2024_towards_7607,
  title = {{Towards Model Extraction Attacks in GAN-Based Image Translation via Domain Shift Mitigation}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/29966},
}

@inproceedings{cvpr2024_efficient_23333,
  title = {{Efficient Model Stealing Defense with Noise Transition Matrix}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/31452},
}

@inproceedings{aaai2024_same_7200,
  title = {{SAME: Sample Reconstruction against Model Extraction Attacks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/29974},
}

@inproceedings{aaai2025_a_7922,
  title = {{A Sample-Level Evaluation and Generative Framework for Model Inversion Attacks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/34012},
}

@inproceedings{aaai2025_defense_8687,
  title = {{Defense Against Model Stealing Based on Account-Aware Distribution Discrepancy}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/32041},
}

@inproceedings{aaai2025_learning_9747,
  title = {{Learning Robust and Privacy-Preserving Representations via Information Theory}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/34392},
}

@inproceedings{cvpr2024_ungeneralizable_25123,
  title = {{Ungeneralizable Examples}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/30471},
}

@inproceedings{neurips2024_trap_71341,
  title = {{Trap-MID: Trapdoor-based Defense against Model Inversion Attacks}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/95907},
}

@inproceedings{neurips2024_privacy_71634,
  title = {{Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/95643},
}

@inproceedings{iclr2024_chameleon_33600,
  title = {{Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2024},
  url = {https://iclr.cc/virtual/2024/poster/19475},
}

@inproceedings{icml2024_membership_45761,
  title = {{Membership Inference Attacks on Diffusion Models via Quantile Regression}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2024},
  url = {https://icml.cc/virtual/2024/poster/32691},
}

@inproceedings{neurips2024_on_74459,
  title = {{On the Ability of Developers' Training Data Preservation of Learnware}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/93115},
}

@inproceedings{aaai2026_dual_105262,
  title = {{Dual-View Inference Attack: Machine Unlearning Amplifies Privacy Exposure}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/38134},
}

@inproceedings{aaai2024_confidence_5466,
  title = {{Confidence Is All You Need for MI Attacks (Student Abstract)}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/30513},
}