{
  "checked_date": "2026-10-23",
  "scope": "2019–2026; S&P, USENIX Security, ACM CCS, NDSS",
  "listing_records": 6937,
  "distinct_cached_records": 6935,
  "candidate_records_rechecked": 279,
  "papers_before": 514,
  "papers_after": 555,
  "added": [
    {
      "title": "SrcMarker: Dual-Channel Source Code Watermarking via Scalable Code Transformations",
      "year": 2024,
      "venue": "IEEE S&P",
      "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html",
      "abstract_reviewed": true
    },
    {
      "title": "Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning",
      "year": 2024,
      "venue": "IEEE S&P",
      "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html",
      "abstract_reviewed": true
    },
    {
      "title": "Few-shot Unlearning",
      "year": 2024,
      "venue": "IEEE S&P",
      "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html",
      "abstract_reviewed": true
    },
    {
      "title": "SoK: Privacy-Preserving Data Synthesis",
      "year": 2024,
      "venue": "IEEE S&P",
      "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html",
      "abstract_reviewed": true
    },
    {
      "title": "Edge Unlearning is Not \"on Edge\"! An Adaptive Exact Unlearning System on Resource-Constrained Devices",
      "year": 2025,
      "venue": "IEEE S&P",
      "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html",
      "abstract_reviewed": true
    },
    {
      "title": "My Model is Malware to You: Transforming AI Models into Malware by Abusing TensorFlow APIs",
      "year": 2025,
      "venue": "IEEE S&P",
      "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html",
      "abstract_reviewed": true
    },
    {
      "title": "The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against ``Truly Anonymous'' Synthetic Datasets",
      "year": 2025,
      "venue": "IEEE S&P",
      "url": "https://www.ieee-security.org/TC/SP2025/accepted-papers.html",
      "abstract_reviewed": true
    },
    {
      "title": "Adversarial Hubness in Multi-Modal Retrieval",
      "year": 2026,
      "venue": "IEEE S&P",
      "url": "https://www.ieee-security.org/TC/SP2026/accepted-papers.html",
      "abstract_reviewed": true
    },
    {
      "title": "On Utility and Privacy in Synthetic Genomic Data",
      "year": 2022,
      "venue": "NDSS",
      "url": "https://www.ndss-symposium.org/ndss-paper/auto-draft-231/",
      "abstract_reviewed": true
    },
    {
      "title": "Property Inference Attacks Against GANs",
      "year": 2022,
      "venue": "NDSS",
      "url": "https://www.ndss-symposium.org/ndss-paper/auto-draft-240/",
      "abstract_reviewed": true
    },
    {
      "title": "Machine Unlearning of Features and Labels",
      "year": 2023,
      "venue": "NDSS",
      "url": "https://www.ndss-symposium.org/ndss-paper/machine-unlearning-of-features-and-labels/",
      "abstract_reviewed": true
    },
    {
      "title": "A Duty to Forget, a Right to be Assured? Exposing Vulnerabilities in Machine Unlearning Services",
      "year": 2024,
      "venue": "NDSS",
      "url": "https://www.ndss-symposium.org/ndss-paper/a-duty-to-forget-a-right-to-be-assured-exposing-vulnerabilities-in-machine-unlearning-services/",
      "abstract_reviewed": true
    },
    {
      "title": "Diffence: Fencing Membership Privacy With Diffusion Models",
      "year": 2025,
      "venue": "NDSS",
      "url": "https://www.ndss-symposium.org/ndss-paper/diffence-fencing-membership-privacy-with-diffusion-models/",
      "abstract_reviewed": true
    },
    {
      "title": "Reinforcement Unlearning",
      "year": 2025,
      "venue": "NDSS",
      "url": "https://www.ndss-symposium.org/ndss-paper/reinforcement-unlearning/",
      "abstract_reviewed": true
    },
    {
      "title": "TrajDeleter: Enabling Trajectory Forgetting in Offline Reinforcement Learning Agents",
      "year": 2025,
      "venue": "NDSS",
      "url": "https://www.ndss-symposium.org/ndss-paper/trajdeleter-enabling-trajectory-forgetting-in-offline-reinforcement-learning-agents/",
      "abstract_reviewed": true
    },
    {
      "title": "PrivORL: Differentially Private Synthetic Dataset for Offline Reinforcement Learning",
      "year": 2026,
      "venue": "NDSS",
      "url": "https://www.ndss-symposium.org/ndss-paper/privorl-differentially-private-synthetic-dataset-for-offline-reinforcement-learning/",
      "abstract_reviewed": true
    },
    {
      "title": "Synthetic Data – Anonymisation Groundhog Day",
      "year": 2022,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity22/presentation/stadler",
      "abstract_reviewed": true
    },
    {
      "title": "On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning",
      "year": 2022,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity22/presentation/thudi",
      "abstract_reviewed": true
    },
    {
      "title": "CAPatch: Physical Adversarial Patch against Image Captioning Systems",
      "year": 2023,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/zhang-shibo",
      "abstract_reviewed": true
    },
    {
      "title": "Inductive Graph Unlearning",
      "year": 2023,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity23/presentation/wang-cheng-long",
      "abstract_reviewed": true
    },
    {
      "title": "UBA-Inf: Unlearning Activated Backdoor Attack with Influence-Driven Camouflage",
      "year": 2024,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/huang-zirui",
      "abstract_reviewed": true
    },
    {
      "title": "Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective",
      "year": 2025,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/naderloui",
      "abstract_reviewed": true
    },
    {
      "title": "Data Duplication: A Novel Multi-Purpose Attack Paradigm in Machine Unlearning",
      "year": 2025,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/ye-duplication",
      "abstract_reviewed": true
    },
    {
      "title": "From Zero to Hero: Cross-modal-enhanced Adversarial Item Promotion Attack against Multimodal Recommender Systems",
      "year": 2026,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity26/presentation/yao-zero",
      "abstract_reviewed": true
    },
    {
      "title": "TableGAN-MCA: Evaluating Membership Collisions of GAN-Synthesized Tabular Data Releasing",
      "year": 2021,
      "venue": "ACM CCS",
      "url": "https://doi.org/10.1145/3460120.3485251",
      "abstract_reviewed": true
    },
    {
      "title": "DataLens: Scalable Privacy Preserving Training via Gradient Compression and Aggregation",
      "year": 2021,
      "venue": "ACM CCS",
      "url": "https://doi.org/10.1145/3460120.3484579",
      "abstract_reviewed": true
    },
    {
      "title": "Graph Unlearning",
      "year": 2022,
      "venue": "ACM CCS",
      "url": "https://doi.org/10.1145/3548606.3559352",
      "abstract_reviewed": true
    },
    {
      "title": "Control, Confidentiality, and the Right to be Forgotten",
      "year": 2023,
      "venue": "ACM CCS",
      "url": "https://doi.org/10.1145/3576915.3616585",
      "abstract_reviewed": true
    },
    {
      "title": "Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning",
      "year": 2020,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity20/presentation/salem",
      "abstract_reviewed": true
    },
    {
      "title": "When Machine Unlearning Jeopardizes Privacy",
      "year": 2021,
      "venue": "ACM CCS",
      "url": "https://doi.org/10.1145/3460120.3484756",
      "abstract_reviewed": true
    },
    {
      "title": "ERASER: Machine Unlearning in MLaaS via an Inference Serving-Aware Approach",
      "year": 2024,
      "venue": "ACM CCS",
      "url": "https://www.sigsac.org/ccs/CCS2024/program/accepted-papers.html",
      "abstract_reviewed": true
    },
    {
      "title": "AVA: Inconspicuous Attribute Variation-based Adversarial Attack bypassing DeepFake Detection",
      "year": 2024,
      "venue": "IEEE S&P",
      "url": "https://www.ieee-security.org/TC/SP2024/accepted-papers.html",
      "abstract_reviewed": true
    },
    {
      "title": "Seeing is Living? Rethinking the Security of Facial Liveness Verification in the Deepfake Era",
      "year": 2022,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity22/presentation/li-changjiang",
      "abstract_reviewed": true
    },
    {
      "title": "SoK: The Good, The Bad, and The Unbalanced: Measuring Structural Limitations of Deepfake Media Datasets",
      "year": 2024,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/layton",
      "abstract_reviewed": true
    },
    {
      "title": "Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models",
      "year": 2024,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity24/presentation/liu-hongbin",
      "abstract_reviewed": true
    },
    {
      "title": "Characterizing the MrDeepFakes Sexual Deepfake Marketplace",
      "year": 2025,
      "venue": "USENIX Security",
      "url": "https://www.usenix.org/conference/usenixsecurity25/presentation/han",
      "abstract_reviewed": true
    },
    {
      "title": "ProFake: Detecting Deepfakes in the Wild against Quality Degradation with Progressive Quality-adaptive Learning",
      "year": 2024,
      "venue": "ACM CCS",
      "url": "https://doi.org/10.1145/3658644.3690238",
      "abstract_reviewed": true
    },
    {
      "title": "MGTBench: Benchmarking Machine-Generated Text Detection",
      "year": 2024,
      "venue": "ACM CCS",
      "url": "https://doi.org/10.1145/3658644.3670344",
      "abstract_reviewed": true
    },
    {
      "title": "Hitchhiking on Inherent Randomness: Diffusion-based Graph Generation under Differential Privacy",
      "year": 2026,
      "venue": "ACM CCS",
      "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html",
      "abstract_reviewed": false
    },
    {
      "title": "Single Medium, Multiple Perspectives: Exposing and Exploiting Semantic Gaps in AI Services' Media Preprocessing Pipelines",
      "year": 2026,
      "venue": "ACM CCS",
      "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html",
      "abstract_reviewed": false
    },
    {
      "title": "Implementation Bugs as Attacks: Adversarial Neuron Fuzzing and Supply-Chain Backdoors",
      "year": 2026,
      "venue": "ACM CCS",
      "url": "https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html",
      "abstract_reviewed": false
    }
  ],
  "abstracts_unavailable": 486,
  "scope_decisions_pending": 456,
  "limitations": [
    "All official listing records compared to the catalogue; keyword-assisted re-screening of available abstracts and review of scope candidates, not independent full-paper review.",
    "Unavailable abstracts and pending decisions prevent a claim of exhaustive completeness.",
    "Selected general ML privacy/unlearning foundations are included; general ML security and AI-for-security applications are not exhaustively covered."
  ],
  "fresh_listing_check": {
    "sources": 32,
    "new_titles": 0,
    "unavailable_sources": 0
  }
}