% Bibliography for TS-RaMIA paper

% ==== Membership Inference Attacks ====
@inproceedings{shokri2017membership,
  title={Membership inference attacks against machine learning models},
  author={Shokri, Reza and Stronati, Marco and Song, Congzheng and Shmatikov, Vitaly},
  booktitle={IEEE Symposium on Security and Privacy (SP)},
  pages={3--18},
  year={2017},
  organization={IEEE}
}

@inproceedings{yeom2018privacy,
  title={Privacy risk in machine learning: Analyzing the connection to overfitting},
  author={Yeom, Samuel and Giacomelli, Irene and Fredrikson, Matt and Jha, Somesh},
  booktitle={IEEE Computer Security Foundations Symposium (CSF)},
  pages={268--282},
  year={2018},
  organization={IEEE}
}

@inproceedings{carlini2021extracting,
  title={Extracting training data from large language models},
  author={Carlini, Nicholas and Tramer, Florian and Wallace, Eric and Jagielski, Matthew and Herbert-Voss, Ariel and Lee, Katherine and Roberts, Adam and Brown, Tom and Song, Dawn and Erlingsson, {\'U}lfar and others},
  booktitle={USENIX Security Symposium},
  pages={2633--2650},
  year={2021}
}

@inproceedings{carlini2023quantifying,
  title={Quantifying memorization across neural language models},
  author={Carlini, Nicholas and Ippolito, Daphne and Jagielski, Matthew and Lee, Katherine and Tramer, Florian and Zhang, Chiyuan},
  booktitle={International Conference on Learning Representations (ICLR)},
  year={2023}
}

@inproceedings{watson2021de,
  title={De-anonymizing text by fingerprinting language generation},
  author={Watson, Christopher and Hoque, Enamul},
  booktitle={Findings of the Association for Computational Linguistics: EMNLP 2021},
  pages={1311--1323},
  year={2021}
}

% ==== Symbolic Music & Models ====
@inproceedings{huang2018musictransformer,
  title={Music transformer},
  author={Huang, Cheng-Zhi Anna and Vaswani, Ashish and Uszkoreit, Jakob and Simon, Ian and Hawthorne, Curtis and Shazeer, Noam and Dai, Andrew M and Hoffman, Matthew D and Dinculescu, Monica and Eck, Douglas},
  booktitle={International Society for Music Information Retrieval Conference (ISMIR)},
  year={2018}
}

@inproceedings{huang2020remi,
  title={Pop music transformer: Beat-based modeling and generation of expressive pop piano compositions},
  author={Huang, Yu-Siang and Yang, Yi-Hsuan},
  booktitle={ACM International Conference on Multimedia},
  pages={1180--1188},
  year={2020}
}

@inproceedings{hawthorne2019maestro,
  title={Enabling factorized piano music modeling and generation with the {MAESTRO} dataset},
  author={Hawthorne, Curtis and Stasyuk, Andriy and Roberts, Adam and Simon, Ian and Huang, Cheng-Zhi Anna and Dieleman, Sander and Elsen, Erich and Engel, Jesse and Eck, Douglas},
  booktitle={International Conference on Learning Representations (ICLR)},
  year={2019}
}

@misc{abcnotation,
  title={{ABC} notation standard},
  author={{ABC Notation Community}},
  howpublished={\url{http://abcnotation.com/}},
  year={2023}
}

@misc{notagen,
  title={{NotaGen}: Symbolic music generation with transformer-based models},
  author={{NotaGen Team}},
  howpublished={\url{https://huggingface.co/NotaGen}},
  year={2023},
  note={Accessed: 2025-10-21}
}

% ==== Tools ====
@misc{miditok,
  title={{MIDITok}: A Python library for {MIDI} tokenization},
  author={Nathan Fradet},
  howpublished={\url{https://github.com/Natooz/MidiTok}},
  year={2021}
}

@inproceedings{music21,
  title={Music21: A toolkit for computer-aided musicology and symbolic music data},
  author={Cuthbert, Michael Scott and Ariza, Christopher},
  booktitle={International Society for Music Information Retrieval Conference (ISMIR)},
  pages={637--642},
  year={2010}
}

% ==== Statistical Methods ====
@article{delong1988comparing,
  title={Comparing the areas under two or more correlated receiver operating characteristic curves: A nonparametric approach},
  author={DeLong, Elizabeth R and DeLong, David M and Clarke-Pearson, Daniel L},
  journal={Biometrics},
  volume={44},
  number={3},
  pages={837--845},
  year={1988},
  publisher={JSTOR}
}

% ==== Language Models ====
@inproceedings{vaswani2017attention,
  title={Attention is all you need},
  author={Vaswani, Ashish and Shazeer, Noam and Parmar, Niki and Uszkoreit, Jakob and Jones, Llion and Gomez, Aidan N and Kaiser, {\L}ukasz and Polosukhin, Illia},
  booktitle={Advances in Neural Information Processing Systems (NeurIPS)},
  volume={30},
  year={2017}
}

@article{merity2017pointer,
  title={Pointer sentinel mixture models},
  author={Merity, Stephen and Xiong, Caiming and Bradbury, James and Socher, Richard},
  journal={arXiv preprint arXiv:1609.07843},
  year={2017}
}

% ==== Additional entries can be added as needed ====

