diff --git a/README.md b/README.md
index 70a707a..a9cc269 100644
--- a/README.md
+++ b/README.md
@@ -197,6 +197,7 @@ Reconstruction attacks cover also attacks known as *model inversion* and *attrib
 - [**Information Laundering for Model Privacy**](https://arxiv.org/abs/2009.06112) (Wang et al., 2021)
 - [**Deep Neural Network Fingerprinting by Conferrable Adversarial Examples**](https://arxiv.org/abs/1912.00888) (Lukas et al., 2021)
 - [**BODAME: Bilevel Optimization for Defense Against Model Extraction**](https://arxiv.org/abs/2103.06797) (Mori et al., 2021)
+- [**Dataset Inference: Ownership Resolution in Machine Learning**](https://openreview.net/forum?id=hvdKKV2yt7T) (Maini et al., 2021)
 
 
 # Other