Andrew Paverd

73 papers A* 14A 3B 1Journal 45Unranked 10
YearRankTypeTitle / Venue / Authors
2026 J jnl
Stateless Yet Not Forgetful: Implicit Memory as a Hidden Channel in LLMs.
CoRR
Ahmed Salem, Andrew Paverd, Sahar Abdelnabi
2026 — conf
Trusted and Transparent Time-Stamping Through TEEs and Network Time Security.
SysTEX@EuroSys
Tobias Nießen, Andrew Paverd
2025 J jnl
Design Patterns for Securing LLM Agents against Prompt Injections.
CoRR
Luca Beurer-Kellner, Beat Buesser, Ana-Maria Cretu, Edoardo Debenedetti, Daniel Dobos, Daniel Fabian, Marc Fischer, David Froelicher, Kathrin Grosse, Daniel Naeff, Ezinwanne Ozoani, Andrew Paverd, Florian Tramèr, Václav Volhejn
2025 — conf
Get My Drift? Catching LLM Task Drift with Activation Deltas.
SaTML
Sahar Abdelnabi, Aideen Fay, Giovanni Cherubin, Ahmed Salem, Mario Fritz, Andrew Paverd
2025 J jnl
Highlight & Summarize: RAG without the jailbreaks.
CoRR
Giovanni Cherubin, Andrew Paverd
2025 J jnl
LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge.
CoRR
Sahar Abdelnabi, Aideen Fay, Ahmed Salem, Egor Zverev, Kai-Chieh Liao, Chi-Huang Liu, Chun-Chih Kuo, Jannis Weigend, Danyael Manlangit, Alex Apostolov, Haris Umair, João Donato, Masayuki Kawakita, Athar Mahboob, Tran Huu Bach, Tsun-Han Chiang, Myeongjin Cho, Hajin Choi, Byeonghyeon Kim, Hyeonjin Lee, Benjamin Pannell, Conor McCauley, Mark Russinovich, Andrew Paverd, Giovanni Cherubin
2025 J jnl
Permissive Information-Flow Analysis for Large Language Models.
Trans. Mach. Learn. Res.
Shoaib Ahmed Siddiqui, Radhika Gaonkar, Boris Köpf, David Krueger, Andrew Paverd, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Menglin Xia, Santiago Zanella-Béguelin
2025 J jnl
Securing AI Agents with Information-Flow Control.
CoRR
Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
2024 J jnl
Are you still on track!? Catching LLM Task Drift with Activations.
CoRR
Sahar Abdelnabi, Aideen Fay, Giovanni Cherubin, Ahmed Salem, Mario Fritz, Andrew Paverd
2024 A* conf
Closed-Form Bounds for DP-SGD against Record-level Inference.
USENIX Security Symposium
Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
2024 J jnl
Closed-Form Bounds for DP-SGD against Record-level Inference.
CoRR
Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
2024 J jnl
ExclaveFL: Providing Transparency to Federated Learning using Exclaves.
CoRR
Jinnan Guo, Kapil Vaswani, Andrew Paverd, Peter R. Pietzuch
2024 J jnl
Permissive Information-Flow Analysis for Large Language Models.
CoRR
Shoaib Ahmed Siddiqui, Radhika Gaonkar, Boris Köpf, David Krueger, Andrew Paverd, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Menglin Xia, Santiago Zanella-Béguelin
2024 J jnl
Trustworthy AI Using Confidential Federated Learning.
Commun. ACM
Jinnan Guo, Peter R. Pietzuch, Andrew Paverd, Kapil Vaswani
2024 J jnl
Trustworthy AI using Confidential Federated Learning: Federated learning and confidential computing are not competing technologies.
ACM Queue
Jinnan Guo, Peter R. Pietzuch, Andrew Paverd, Kapil Vaswani
2023 A* conf
An Empirical Study & Evaluation of Modern CAPTCHAs.
USENIX Security Symposium
Andrew Searles, Yoshimichi Nakatsuka, Ercan Ozturk, Andrew Paverd, Gene Tsudik, Ai Enkoji
2023 J jnl
An Empirical Study & Evaluation of Modern CAPTCHAs.
CoRR
Andrew Searles, Yoshimichi Nakatsuka, Ercan Ozturk, Andrew Paverd, Gene Tsudik, Ai Enkoji
2023 A* conf
Bayesian Estimation of Differential Privacy.
ICML
Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Rühle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
2023 J jnl
Maatphor: Automated Variant Analysis for Prompt Injection Attacks.
CoRR
Ahmed Salem, Andrew Paverd, Boris Köpf
2023 J jnl
On the Efficacy of Differentially Private Few-shot Image Classification.
CoRR
Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard E. Turner, Antti Honkela
2023 J jnl
On the Efficacy of Differentially Private Few-shot Image Classification.
Trans. Mach. Learn. Res.
Marlon Tobaben, Aliaksandra Shysheya, John Bronskill, Andrew Paverd, Shruti Tople, Santiago Zanella-Béguelin, Richard E. Turner, Antti Honkela
2023 J jnl
Rethinking Privacy in Machine Learning Pipelines from an Information Flow Control Perspective.
CoRR
Lukas Wutschitz, Boris Köpf, Andrew Paverd, Saravan Rajmohan, Ahmed Salem, Shruti Tople, Santiago Zanella-Béguelin, Menglin Xia, Victor Rühle
2023 A* conf
SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning.
SP
Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
2023 A* conf
VICEROY: GDPR-/CCPA-compliant Enforcement of Verifiable Accountless Consumer Requests.
NDSS
Scott Jordan, Yoshimichi Nakatsuka, Ercan Ozturk, Andrew Paverd, Gene Tsudik
2022 J jnl
Bayesian Estimation of Differential Privacy.
CoRR
Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Rühle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
2022 J jnl
CTR: Checkpoint, Transfer, and Restore for Secure Enclaves.
CoRR
Yoshimichi Nakatsuka, Ercan Ozturk, Alex Shamis, Andrew Paverd, Peter R. Pietzuch
2022 J jnl
Dropbear: Machine Learning Marketplaces made Trustworthy with Byzantine Model Agreement.
CoRR
Alex Shamis, Peter R. Pietzuch, Antoine Delignat-Lavaud, Andrew Paverd, Manuel Costa
2022 A* conf
Pre-hijacked accounts: An Empirical Study of Security Failures in User Account Creation on the Web.
USENIX Security Symposium
Avinash Sudhodanan, Andrew Paverd
2022 J jnl
Pre-hijacked accounts: An Empirical Study of Security Failures in User Account Creation on the Web.
CoRR
Avinash Sudhodanan, Andrew Paverd
2022 J jnl
SoK: Let The Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning.
CoRR
Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
2021 A* conf
CACTI: Captcha Avoidance via Client-side TEE Integration.
USENIX Security Symposium
Yoshimichi Nakatsuka, Ercan Ozturk, Andrew Paverd, Gene Tsudik
2021 A* conf
Grey-box Extraction of Natural Language Models.
ICML
Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
2021 J jnl
PDoT: Private DNS-over-TLS with TEE Support.
DTRAP
Yoshimichi Nakatsuka, Andrew Paverd, Gene Tsudik
2021 J jnl
VICEROY: GDPR-/CCPA-compliant Enforcement of Verifiable Accountless Consumer Requests.
CoRR
Scott Jordan, Yoshimichi Nakatsuka, Ercan Ozturk, Andrew Paverd, Gene Tsudik
2020 A* conf
Analyzing Information Leakage of Updates to Natural Language Models.
CCS
Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Rühle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
2020 J jnl
CACTI: Captcha Avoidance via Client-side TEE Integration.
CoRR
Yoshimichi Nakatsuka, Ercan Ozturk, Andrew Paverd, Gene Tsudik
2019 A* conf
HardScope: Hardening Embedded Systems Against Data-Oriented Attacks.
DAC
Thomas Nyman, Ghada Dessouky, Shaza Zeitouni, Aaro Lehikoinen, Andrew Paverd, N. Asokan, Ahmad-Reza Sadeghi
2019 J jnl
PDoT: Private DNS-over-TLS with TEE Support.
CoRR
Yoshimichi Nakatsuka, Andrew Paverd, Gene Tsudik
2019 A conf
PDoT: private DNS-over-TLS with TEE support.
ACSAC
Yoshimichi Nakatsuka, Andrew Paverd, Gene Tsudik
2019 — conf
S-FaaS: Trustworthy and Accountable Function-as-a-Service using Intel SGX.
CCSW
Fritz Alder, N. Asokan, Arseny Kurnikov, Andrew Paverd, Michael Steiner
2019 J jnl
Smart Grid Metering Networks: A Survey on Security, Privacy and Open Research Issues.
IEEE Commun. Surv. Tutorials
Pardeep Kumar, Yun Lin, Guangdong Bai, Andrew Paverd, Jin Song Dong, Andrew P. Martin
2019 — conf
Sustainable Security & Safety: Challenges and Opportunities.
CERTS
Andrew Paverd, Marcus Völp, Ferdinand Brasser, Matthias Schunter, N. Asokan, Ahmad-Reza Sadeghi, Paulo Jorge Esteves Veríssimo, Andreas Steininger, Thorsten Holz
2018 B conf
Keys in the Clouds: Auditable Multi-device Access to Cryptographic Credentials.
ARES
Arseny Kurnikov, Andrew Paverd, Mohammad Mannan, N. Asokan
2018 J jnl
Keys in the Clouds: Auditable Multi-device Access to Cryptographic Credentials.
CoRR
Arseny Kurnikov, Andrew Paverd, Mohammad Mannan, N. Asokan
2018 A conf
Migrating SGX Enclaves with Persistent State.
DSN
Fritz Alder, Arseny Kurnikov, Andrew Paverd, N. Asokan
2018 J jnl
Migrating SGX Enclaves with Persistent State.
CoRR
Fritz Alder, Arseny Kurnikov, Andrew Paverd, N. Asokan
2018 — conf
Mitigating Branch-Shadowing Attacks on Intel SGX using Control Flow Randomization.
SysTEX@CCS
Shohreh Hosseinzadeh, Hans Liljestrand, Ville Leppänen, Andrew Paverd
2018 J jnl
Mitigating Branch-Shadowing Attacks on Intel SGX using Control Flow Randomization.
CoRR
Shohreh Hosseinzadeh, Hans Liljestrand, Ville Leppänen, Andrew Paverd
2018 J jnl
OmniShare: Encrypted Cloud Storage for the Multi-Device Era.
IEEE Internet Comput.
Andrew Paverd, Sandeep Tamrakar, Hoang Long Nguyen, Praveen Kumar Pendyala, Thien Duc Nguyen, Elizabeth Stobert, Tommi Grondahl, N. Asokan, Ahmad-Reza Sadeghi
2018 J jnl
S-FaaS: Trustworthy and Accountable Function-as-a-Service using Intel SGX.
CoRR
Fritz Alder, N. Asokan, Arseny Kurnikov, Andrew Paverd, Michael Steiner
2018 A* conf
SafeKeeper: Protecting Web Passwords using Trusted Execution Environments.
WWW
Klaudia Krawiecka, Arseny Kurnikov, Andrew Paverd, Mohammad Mannan, N. Asokan
2018 J jnl
Toward Linux kernel memory safety.
Softw. Pract. Exp.
Elena Reshetova, Hans Liljestrand, Andrew Paverd, N. Asokan
2018 — conf
Using SafeKeeper to Protect Web Passwords.
WWW (Companion Volume)
Arseny Kurnikov, Klaudia Krawiecka, Andrew Paverd, Mohammad Mannan, N. Asokan
2017 J jnl
A framework for application partitioning using trusted execution environments.
Concurr. Comput. Pract. Exp.
Ahmad Atamli-Reineh, Andrew Paverd, Giuseppe Petracca, Andrew P. Martin
2017 J jnl
Auditable De-anonymization in V2X Communication.
J. ICT Stand.
Masoud Naderpour, Tommi Meskanen, Andrew Paverd, Valtteri Niemi
2017 — conf
Formal Analysis of V2X Revocation Protocols.
STM
Jorden Whitefield, Liqun Chen, Frank Kargl, Andrew Paverd, Steve A. Schneider, Helen Treharne, Stephan Wesemeyer
2017 J jnl
Formal Analysis of V2X Revocation Protocols.
CoRR
Jorden Whitefield, Liqun Chen, Frank Kargl, Andrew Paverd, Steve A. Schneider, Helen Treharne, Stephan Wesemeyer
2017 J jnl
HardScope: Thwarting DOP with Hardware-assisted Run-time Scope Enforcement.
CoRR
Thomas Nyman, Ghada Dessouky, Shaza Zeitouni, Aaro Lehikoinen, Andrew Paverd, N. Asokan, Ahmad-Reza Sadeghi
2017 A* conf
LO-FAT: Low-Overhead Control Flow ATtestation in Hardware.
DAC
Ghada Dessouky, Shaza Zeitouni, Thomas Nyman, Andrew Paverd, Lucas Davi, Patrick Koeberl, N. Asokan, Ahmad-Reza Sadeghi
2017 J jnl
LO-FAT: Low-Overhead Control Flow ATtestation in Hardware.
CoRR
Ghada Dessouky, Shaza Zeitouni, Thomas Nyman, Andrew Paverd, Lucas Davi, Patrick Koeberl, N. Asokan, Ahmad-Reza Sadeghi
2017 J jnl
Protecting Web Passwords from Rogue Servers using Trusted Execution Environments.
CoRR
Klaudia Krawiecka, Arseny Kurnikov, Andrew Paverd, Mohammad Mannan, N. Asokan
2017 J jnl
Security in Automotive Networks: Lightweight Authentication and Authorization.
CoRR
Philipp Mundhenk, Andrew Paverd, Artur Mrowca, Sebastian Steinhorst, Martin Lukasiewycz, Suhaib A. Fahmy, Samarjit Chakraborty
2017 J jnl
Security in Automotive Networks: Lightweight Authentication and Authorization.
ACM Trans. Design Autom. Electr. Syst.
Philipp Mundhenk, Andrew Paverd, Artur Mrowca, Sebastian Steinhorst, Martin Lukasiewycz, Suhaib A. Fahmy, Samarjit Chakraborty
2017 A conf
The Circle Game: Scalable Private Membership Test Using Trusted Hardware.
AsiaCCS
Sandeep Tamrakar, Jian Liu, Andrew Paverd, Jan-Erik Ekberg, Benny Pinkas, N. Asokan
2017 J jnl
Towards Linux Kernel Memory Safety.
CoRR
Elena Reshetova, Hans Liljestrand, Andrew Paverd, N. Asokan
2016 — conf
Applying the Trustworthy Remote Entity to Privacy-Preserving Multiparty Computation: Requirements and Criteria for Large-Scale Applications.
UIC/ATC/ScalCom/CBDCom/IoP/SmartWorld
Robin Ankele, Kubilay Ahmet Küçük, Andrew Martin, Andrew Simpson, Andrew Paverd
2016 J jnl
C-FLAT: Control-FLow ATtestation for Embedded Systems Software.
CoRR
Tigist Abera, N. Asokan, Lucas Davi, Jan-Erik Ekberg, Thomas Nyman, Andrew Paverd, Ahmad-Reza Sadeghi, Gene Tsudik
2016 A* conf
C-FLAT: Control-Flow Attestation for Embedded Systems Software.
CCS
Tigist Abera, N. Asokan, Lucas Davi, Jan-Erik Ekberg, Thomas Nyman, Andrew Paverd, Ahmad-Reza Sadeghi, Gene Tsudik
2016 — conf
Exploring the use of Intel SGX for Secure Many-Party Applications.
SysTEX@Middleware
Kubilay Ahmet Küçük, Andrew Paverd, Andrew Martin, N. Asokan, Andrew Simpson, Robin Ankele
2016 A* conf
Invited - Things, trouble, trust: on building trust in IoT systems.
DAC
Tigist Abera, N. Asokan, Lucas Davi, Farinaz Koushanfar, Andrew Paverd, Ahmad-Reza Sadeghi, Gene Tsudik
2016 — conf
Protecting Password Databases using Trusted Hardware.
SysTEX@Middleware
Klaudia Krawiecka, Andrew Paverd, N. Asokan
2016 J jnl
The Circle Game: Scalable Private Membership Test Using Trusted Hardware.
CoRR
Sandeep Tamrakar, Jian Liu, Andrew Paverd, Jan-Erik Ekberg, Benny Pinkas, N. Asokan
2015 J jnl
OmniShare: Securely Accessing Encrypted Cloud Storage from Multiple Authorized Devices.
CoRR
Sandeep Tamrakar, Hoang Long Nguyen, Praveen Kumar Pendyala, Andrew Paverd, N. Asokan, Ahmad-Reza Sadeghi