Edoardo Debenedetti

25 papers A* 7Journal 15Unranked 3
YearRankTypeTitle / Venue / Authors
2025 A* conf
Adversarial Search Engine Optimization for Large Language Models.
ICLR
Fredrik Nestaas, Edoardo Debenedetti, Florian Tramèr
2025 A* conf
AutoAdvExBench: Benchmarking Autonomous Exploitation of Adversarial Example Defenses.
ICML
Nicholas Carlini, Edoardo Debenedetti, Javier Rando, Milad Nasr, Florian Tramèr
2025 J jnl
AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses.
CoRR
Nicholas Carlini, Javier Rando, Edoardo Debenedetti, Milad Nasr, Florian Tramèr
2025 J jnl
Defeating Prompt Injections by Design.
CoRR
Edoardo Debenedetti, Ilia Shumailov, Tianqi Fan, Jamie Hayes, Nicholas Carlini, Daniel Fabian, Christoph Kern, Chongyang Shi, Andreas Terzis, Florian Tramèr
2025 J jnl
Design Patterns for Securing LLM Agents against Prompt Injections.
CoRR
Luca Beurer-Kellner, Beat Buesser, Ana-Maria Cretu, Edoardo Debenedetti, Daniel Dobos, Daniel Fabian, Marc Fischer, David Froelicher, Kathrin Grosse, Daniel Naeff, Ezinwanne Ozoani, Andrew Paverd, Florian Tramèr, Václav Volhejn
2025 J jnl
LLMs unlock new paths to monetizing exploits.
CoRR
Nicholas Carlini, Milad Nasr, Edoardo Debenedetti, Barry Wang, Christopher A. Choquette-Choo, Daphne Ippolito, Florian Tramèr, Matthew Jagielski
2025 A* conf
Measuring Non-Adversarial Reproduction of Training Data in Large Language Models.
ICLR
Michael Aerni, Javier Rando, Edoardo Debenedetti, Nicholas Carlini, Daphne Ippolito, Florian Tramèr
2024 J jnl
AI Risk Management Should Incorporate Both Safety and Security.
CoRR
Xiangyu Qi, Yangsibo Huang, Yi Zeng, Edoardo Debenedetti, Jonas Geiping, Luxi He, Kaixuan Huang, Udari Madhushani, Vikash Sehwag, Weijia Shi, Boyi Wei, Tinghao Xie, Danqi Chen, Pin-Yu Chen, Jeffrey Ding, Ruoxi Jia, Jiaqi Ma, Arvind Narayanan, Weijie J. Su, Mengdi Wang, Chaowei Xiao, Bo Li, Dawn Song, Peter Henderson, Prateek Mittal
2024 J jnl
Adversarial Search Engine Optimization for Large Language Models.
CoRR
Fredrik Nestaas, Edoardo Debenedetti, Florian Tramèr
2024 J jnl
AgentDojo: A Dynamic Environment to Evaluate Attacks and Defenses for LLM Agents.
CoRR
Edoardo Debenedetti, Jie Zhang, Mislav Balunovic, Luca Beurer-Kellner, Marc Fischer, Florian Tramèr
2024 A* conf
AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents.
NeurIPS
Edoardo Debenedetti, Jie Zhang, Mislav Balunovic, Luca Beurer-Kellner, Marc Fischer, Florian Tramèr
2024 A* conf
Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition.
NeurIPS
Edoardo Debenedetti, Javier Rando, Daniel Paleka, Silaghi Fineas Florin, Dragos Albastroiu, Niv Cohen, Yuval Lemberg, Reshmi Ghosh, Rui Wen, Ahmed Salem, Giovanni Cherubin, Santiago Zanella-Béguelin, Robin Schmid, Victor Klemm, Takahiro Miki, Chenhao Li, Stefan Kraft, Mario Fritz, Florian Tramèr, Sahar Abdelnabi, Lea Schönherr
2024 J jnl
Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition.
CoRR
Edoardo Debenedetti, Javier Rando, Daniel Paleka, Silaghi Fineas Florin, Dragos Albastroiu, Niv Cohen, Yuval Lemberg, Reshmi Ghosh, Rui Wen, Ahmed Salem, Giovanni Cherubin, Santiago Zanella-Béguelin, Robin Schmid, Victor Klemm, Takahiro Miki, Chenhao Li, Stefan Kraft, Mario Fritz, Florian Tramèr, Sahar Abdelnabi, Lea Schönherr
2024 — conf
Evading Black-box Classifiers Without Breaking Eggs.
SaTML
Edoardo Debenedetti, Nicholas Carlini, Florian Tramèr
2024 J jnl
Exploring Memorization and Copyright Violation in Frontier LLMs: A Study of the New York Times v. OpenAI 2023 Lawsuit.
CoRR
Joshua Freeman, Chloe Rippe, Edoardo Debenedetti, Maksym Andriushchenko
2024 A* conf
JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models.
NeurIPS
Patrick Chao, Edoardo Debenedetti, Alexander Robey, Maksym Andriushchenko, Francesco Croce, Vikash Sehwag, Edgar Dobriban, Nicolas Flammarion, George J. Pappas, Florian Tramèr, Hamed Hassani, Eric Wong
2024 J jnl
JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models.
CoRR
Patrick Chao, Edoardo Debenedetti, Alexander Robey, Maksym Andriushchenko, Francesco Croce, Vikash Sehwag, Edgar Dobriban, Nicolas Flammarion, George J. Pappas, Florian Tramèr, Hamed Hassani, Eric Wong
2024 J jnl
Measuring Non-Adversarial Reproduction of Training Data in Large Language Models.
CoRR
Michael Aerni, Javier Rando, Edoardo Debenedetti, Nicholas Carlini, Daphne Ippolito, Florian Tramèr
2024 A* conf
Privacy Side Channels in Machine Learning Systems.
USENIX Security Symposium
Edoardo Debenedetti, Giorgio Severi, Milad Nasr, Christopher A. Choquette-Choo, Matthew Jagielski, Eric Wallace, Nicholas Carlini, Florian Tramèr
2023 — conf
A Light Recipe to Train Robust Vision Transformers.
SaTML
Edoardo Debenedetti, Vikash Sehwag, Prateek Mittal
2023 J jnl
Evading Black-box Classifiers Without Breaking Eggs.
CoRR
Edoardo Debenedetti, Nicholas Carlini, Florian Tramèr
2023 J jnl
Privacy Side Channels in Machine Learning Systems.
CoRR
Edoardo Debenedetti, Giorgio Severi, Nicholas Carlini, Christopher A. Choquette-Choo, Matthew Jagielski, Milad Nasr, Eric Wallace, Florian Tramèr
2023 J jnl
Scaling Compute Is Not All You Need for Adversarial Robustness.
CoRR
Edoardo Debenedetti, Zishen Wan, Maksym Andriushchenko, Vikash Sehwag, Kshitij Bhardwaj, Bhavya Kailkhura
2022 J jnl
A Light Recipe to Train Robust Vision Transformers.
CoRR
Edoardo Debenedetti, Vikash Sehwag, Prateek Mittal
2021 — conf
RobustBench: a standardized adversarial robustness benchmark.
NeurIPS Datasets and Benchmarks
Francesco Croce, Maksym Andriushchenko, Vikash Sehwag, Edoardo Debenedetti, Nicolas Flammarion, Mung Chiang, Prateek Mittal, Matthias Hein