Ilia Shumailov

135 papers A* 22A 5B 1Journal 86Unranked 21

Year	Rank	Type	Title / Venue / Authors
2026	J	`jnl`	CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents. CoRR Hanna Foerster, Robert Mullins, Tom Blanchard, Nicolas Papernot, Kristina Nikolic, Florian Tramèr, Ilia Shumailov, Cheng Zhang, Yiren Zhao
2026	J	`jnl`	Kraken: Higher-order EM Side-Channel Attacks on DNNs in Near and Far Field. CoRR Péter Horváth, Ilia Shumailov, Lukasz Chmielewski, Lejla Batina, Yuval Yarom
2026	J	`jnl`	Open Technical Problems in Open-Weight AI Model Risk Management. Trans. Mach. Learn. Res. Stephen Casper, Kyle O'Brien, Shayne Longpre, Elizabeth Seger, Kevin Klyman, Rishi Bommasani, Aniruddha Nrusimha, Ilia Shumailov, Sören Mindermann, Steven Basart, Frank Rudzicz, Kellin Pelrine, Avijit Ghosh, Andrew Strait, Robert Kirk, Dan Hendrycks, Peter Henderson, J. Zico Kolter, Geoffrey Irving, Yarin Gal, Yoshua Bengio, Dylan Hadfield-Menell
2026	J	`jnl`	Thought-Transfer: Indirect Targeted Poisoning Attacks on Chain-of-Thought Reasoning Models. CoRR Harsh Chaudhari, Ethan Rathbun, Hanna Foerster, Jamie Hayes, Matthew Jagielski, Milad Nasr, Ilia Shumailov, Alina Oprea
2025	J	`jnl`	Architectural Backdoors for Within-Batch Data Stealing and Model Inference Manipulation. CoRR Nicolas Küchler, Ivan Petrov, Conrad Grobler, Ilia Shumailov
2025	A*	`conf`	Architectural Neural Backdoors from First Principles. SP Harry Langford, Ilia Shumailov, Yiren Zhao, Robert Mullins, Nicolas Papernot
2025	J	`jnl`	Beyond Laplace and Gaussian: Exploring the Generalized Gaussian Mechanism for Private Machine Learning. CoRR Roy Rinberg, Ilia Shumailov, Vikrant Singhal, Rachel Cummings, Nicolas Papernot
2025	A*	`conf`	Breach By A Thousand Leaks: Unsafe Information Leakage in 'Safe' AI Responses. ICLR David Glukhov, Ziwen Han, Ilia Shumailov, Vardan Papyan, Nicolas Papernot
2025	A*	`conf`	Cascading Adversarial Bias from Injection to Distillation in Language Models. CCS Harsh Chaudhari, Jamie Hayes, Matthew Jagielski, Ilia Shumailov, Milad Nasr, Alina Oprea
2025	J	`jnl`	Cascading Adversarial Bias from Injection to Distillation in Language Models. CoRR Harsh Chaudhari, Jamie Hayes, Matthew Jagielski, Ilia Shumailov, Milad Nasr, Alina Oprea
2025	J	`jnl`	Defeating Prompt Injections by Design. CoRR Edoardo Debenedetti, Ilia Shumailov, Tianqi Fan, Jamie Hayes, Nicholas Carlini, Daniel Fabian, Christoph Kern, Chongyang Shi, Andreas Terzis, Florian Tramèr
2025	J	`jnl`	Extracting alignment data in open models. CoRR Federico Barbero, Xiangming Gu, Christopher A. Choquette-Choo, Chawin Sitawarin, Matthew Jagielski, Itay Yona, Petar Velickovic, Ilia Shumailov, Jamie Hayes
2025	J	`jnl`	Fixing 7,400 Bugs for 1$: Cheap Crash-Site Program Repair. CoRR Han Zheng, Ilia Shumailov, Tianqi Fan, Aiden Hall, Mathias Payer
2025	A*	`conf`	Hardware and Software Platform Inference. ICML Cheng Zhang, Hanna Foerster, Robert D. Mullins, Yiren Zhao, Ilia Shumailov
2025	—	`conf`	Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy. SaTML Jamie Hayes, Ilia Shumailov, Eleni Triantafillou, Amr Khalifa, Nicolas Papernot
2025	A*	`conf`	Interpreting the Repeated Token Phenomenon in Large Language Models. ICML Itay Yona, Ilia Shumailov, Jamie Hayes, Yossi Gandelsman
2025	J	`jnl`	Interpreting the Repeated Token Phenomenon in Large Language Models. CoRR Itay Yona, Ilia Shumailov, Jamie Hayes, Federico Barbero, Yossi Gandelsman
2025	J	`jnl`	Iterative Deployment Improves Planning Skills in LLMs. CoRR Augusto B. Corrêa, Yoav Gelberg, Luckeciano C. Melo, Ilia Shumailov, André Grahl Pereira, Yarin Gal
2025	J	`jnl`	Large Language Models Can Verbatim Reproduce Long Malicious Sequences. CoRR Sharon Lin, Krishnamurthy Dvijotham, Jamie Hayes, Chongyang Shi, Ilia Shumailov, Shuang Song
2025	J	`jnl`	Lessons from Defending Gemini Against Indirect Prompt Injections. CoRR Chongyang Shi, Sharon Lin, Shuang Song, Jamie Hayes, Ilia Shumailov, Itay Yona, Juliette Pluto, Aneesh Pappu, Christopher A. Choquette-Choo, Milad Nasr, Chawin Sitawarin, Gena Gibson, Andreas Terzis, John Flynn
2025	—	`conf`	Locking Machine Learning Models into Hardware. SaTML Eleanor Clifford, Adhithya Saravanan, Harry Langford, Cheng Zhang, Yiren Zhao, Robert Mullins, Ilia Shumailov, Jamie Hayes
2025	J	`jnl`	Machine Learning Models Have a Supply Chain Problem. CoRR Sarah Meiklejohn, Hayden Blauzvern, Mihai Maruseac, Spencer Schrock, Laurent Simon, Ilia Shumailov
2025	A*	`conf`	Measuring memorization in RLHF for code completion. ICLR Jamie Hayes, Ilia Shumailov, William P. Porter, Aneesh Pappu
2025	—	`conf`	Measuring memorization in language models via probabilistic extraction. NAACL (Long Papers) Jamie Hayes, Marika Swanberg, Harsh Chaudhari, Itay Yona, Ilia Shumailov, Milad Nasr, Christopher A. Choquette-Choo, Katherine Lee, A. Feder Cooper
2025	—	`conf`	Position: Machine Learning Models Have a Supply Chain Problem. ICML (Position Papers) Sarah Meiklejohn, Hayden Blauzvern, Mihai Maruseac, Spencer Schrock, Laurent Simon, Ilia Shumailov
2025	J	`jnl`	Privacy Awareness for Information-Sharing Assistants: A Case-study on Form-filling with Contextual Integrity. Trans. Mach. Learn. Res. Sahra Ghalebikesabi, Eugene Bagdasarian, Ren Yi, Itay Yona, Ilia Shumailov, Aneesh Pappu, Chongyang Shi, Laura Weidinger, Robert Stanforth, Leonard Berrada, Pushmeet Kohli, Po-Sen Huang, Borja Balle
2025	J	`jnl`	Reasoning Introduces New Poisoning Attacks Yet Makes Them More Complicated. CoRR Hanna Foerster, Ilia Shumailov, Yiren Zhao, Harsh Chaudhari, Jamie Hayes, Robert Mullins, Yarin Gal
2025	—	`conf`	SEA: Shareable and Explainable Attribution for Query-Based Black-Box Attacks. SaTML Yue Gao, Ilia Shumailov, Kassem Fawaz
2025	J	`jnl`	Soft Instruction De-escalation Defense. CoRR Nils Philipp Walter, Chawin Sitawarin, Jamie Hayes, David Stutz, Ilia Shumailov
2025	J	`jnl`	Strong Membership Inference Attacks on Massive Datasets and (Moderately) Large Language Models. CoRR Jamie Hayes, Ilia Shumailov, Christopher A. Choquette-Choo, Matthew Jagielski, Georgios Kaissis, Katherine Lee, Milad Nasr, Sahra Ghalebikesabi, Niloofar Mireshghallah, Meenatchi Sundaram Mutu Selva Annamalai, Igor Shilov, Matthieu Meeus, Yves-Alexandre de Montjoye, Franziska Boenisch, Adam Dziedzic, A. Feder Cooper
2025	—	`conf`	Supply-Chain Attacks in Machine Learning Frameworks. MLSys Yue Gao, Ilia Shumailov, Kassem Fawaz
2025	J	`jnl`	SynthID-Image: Image watermarking at internet scale. CoRR Sven Gowal, Rudy Bunel, Florian Stimberg, David Stutz, Guillermo Ortiz-Jiménez, Christina Kouridi, Mel Vecerík, Jamie Hayes, Sylvestre-Alvise Rebuffi, Paul Bernard, Chris Gamble, Miklós Z. Horváth, Fabian Kaczmarczyck, Alex Kaskasoli, Aleksandar Petrov, Ilia Shumailov, Meghana Thotakuri, Olivia Wiles, Jessica Yung, Zahra Ahmed, Victor Martin, Simon Rosen, Christopher Savcak, Armin Senoner, Nidhi Vyas, Pushmeet Kohli
2025	J	`jnl`	The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections. CoRR Milad Nasr, Nicholas Carlini, Chawin Sitawarin, Sander V. Schulhoff, Jamie Hayes, Michael Ilie, Juliette Pluto, Shuang Song, Harsh Chaudhari, Ilia Shumailov, Abhradeep Thakurta, Kai Yuanqing Xiao, Andreas Terzis, Florian Tramèr
2025	J	`jnl`	Trusted Machine Learning Models Unlock Private Inference for Problems Currently Infeasible with Cryptography. CoRR Ilia Shumailov, Daniel Ramage, Sarah Meiklejohn, Peter Kairouz, Florian Hartmann, Borja Balle, Eugene Bagdasarian
2025	J	`jnl`	Watermarking Needs Input Repetition Masking. CoRR David Khachaturov, Robert Mullins, Ilia Shumailov, Sumanth Dathathri
2025	—	`conf`	When Vision Fails: Text Attacks Against ViT and OCR. LAMPS@CCS Nicholas Boucher, Jenny Blessing, Ilia Shumailov, Ross J. Anderson, Nicolas Papernot
2025	J	`jnl`	ceLLMate: Sandboxing Browser AI Agents. CoRR Luoxi Meng, Henry Feng, Ilia Shumailov, Earlence Fernandes
2024	J	`jnl`	A False Sense of Safety: Unsafe Information Leakage in 'Safe' AI Responses. CoRR David Glukhov, Ziwen Han, Ilia Shumailov, Vardan Papyan, Nicolas Papernot
2024	J	`jnl`	AI models collapse when trained on recursively generated data. Nat. Ilia Shumailov, Zakhar Shumaylov, Yiren Zhao, Nicolas Papernot, Ross J. Anderson, Yarin Gal
2024	J	`jnl`	Architectural Neural Backdoors from First Principles. CoRR Harry Langford, Ilia Shumailov, Yiren Zhao, Robert Mullins, Nicolas Papernot
2024	J	`jnl`	Beyond Labeling Oracles - What does it mean to steal ML models? Trans. Mach. Learn. Res. Avital Shafran, Ilia Shumailov, Murat A. Erdogdu, Nicolas Papernot
2024	A*	`conf`	Beyond Slow Signs in High-fidelity Model Extraction. NeurIPS Hanna Foerster, Robert Mullins, Ilia Shumailov, Jamie Hayes
2024	J	`jnl`	Beyond Slow Signs in High-fidelity Model Extraction. CoRR Hanna Foerster, Robert Mullins, Ilia Shumailov, Jamie Hayes
2024	J	`jnl`	Buffer Overflow in Mixture of Experts. CoRR Jamie Hayes, Ilia Shumailov, Itay Yona
2024	—	`conf`	Fairness Feedback Loops: Training on Synthetic Data Amplifies Bias. FAccT Sierra Calanda Wyllie, Ilia Shumailov, Nicolas Papernot
2024	J	`jnl`	Fairness Feedback Loops: Training on Synthetic Data Amplifies Bias. CoRR Sierra Calanda Wyllie, Ilia Shumailov, Nicolas Papernot
2024	J	`jnl`	From Differential Privacy to Bounds on Membership Inference: Less can be More. Trans. Mach. Learn. Res. Anvith Thudi, Ilia Shumailov, Franziska Boenisch, Nicolas Papernot
2024	A*	`conf`	Gradients Look Alike: Sensitivity is Often Overestimated in DP-SGD. USENIX Security Symposium Anvith Thudi, Hengrui Jia, Casey Meehan, Ilia Shumailov, Nicolas Papernot
2024	J	`jnl`	Hardware and Software Platform Inference. CoRR Cheng Zhang, Hanna Foerster, Robert D. Mullins, Yiren Zhao, Ilia Shumailov
2024	—	`conf`	ImpNet: Imperceptible and blackbox-undetectable backdoors in compiled neural networks. SaTML Eleanor Clifford, Ilia Shumailov, Yiren Zhao, Ross J. Anderson, Robert Mullins
2024	J	`jnl`	Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy. CoRR Jamie Hayes, Ilia Shumailov, Eleni Triantafillou, Amr Khalifa, Nicolas Papernot
2024	J	`jnl`	Locking Machine Learning Models into Hardware. CoRR Eleanor Clifford, Adhithya Saravanan, Harry Langford, Cheng Zhang, Yiren Zhao, Robert Mullins, Ilia Shumailov, Jamie Hayes
2024	A*	`conf`	Machine Learning needs Better Randomness Standards: Randomised Smoothing and PRNG-based attacks. USENIX Security Symposium Pranav Dahiya, Ilia Shumailov, Ross Anderson
2024	J	`jnl`	Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy, Research, and Practice. CoRR A. Feder Cooper, Christopher A. Choquette-Choo, Miranda Bogen, Matthew Jagielski, Katja Filippova, Ken Ziyu Liu, Alexandra Chouldechova, Jamie Hayes, Yangsibo Huang, Niloofar Mireshghallah, Ilia Shumailov, Eleni Triantafillou, Peter Kairouz, Nicole Mitchell, Percy Liang, Daniel E. Ho, Yejin Choi, Sanmi Koyejo, Fernando A. Delgado, James Grimmelmann, Vitaly Shmatikov, Christopher De Sa, Solon Barocas, Amy Cyphert, Mark A. Lemley, danah boyd, Jennifer Wortman Vaughan, Miles Brundage, David Bau, Seth Neel, Abigail Z. Jacobs, Andreas Terzis, Hanna M. Wallach, Nicolas Papernot, Katherine Lee
2024	J	`jnl`	Measuring memorization in RLHF for code completion. CoRR Aneesh Pappu, Billy Porter, Ilia Shumailov, Jamie Hayes
2024	J	`jnl`	Measuring memorization through probabilistic discoverable extraction. CoRR Jamie Hayes, Marika Swanberg, Harsh Chaudhari, Itay Yona, Ilia Shumailov
2024	J	`jnl`	Operationalizing Contextual Integrity in Privacy-Conscious Assistants. CoRR Sahra Ghalebikesabi, Eugene Bagdasaryan, Ren Yi, Itay Yona, Ilia Shumailov, Aneesh Pappu, Chongyang Shi, Laura Weidinger, Robert Stanforth, Leonard Berrada, Pushmeet Kohli, Po-Sen Huang, Borja Balle
2024	A*	`conf`	Position: Fundamental Limitations of LLM Censorship Necessitate New Approaches. ICML David Glukhov, Ilia Shumailov, Yarin Gal, Nicolas Papernot, Vardan Papyan
2024	J	`jnl`	Scalable watermarking for identifying large language model outputs. Nat. Sumanth Dathathri, Abigail See, Sumedh Ghaisas, Po-Sen Huang, Rob McAdam, Johannes Welbl, Vandana Bachani, Alex Kaskasoli, Robert Stanforth, Tatiana Matejovicova, Jamie Hayes, Nidhi Vyas, Majd Al Merey, Jonah Brown-Cohen, Rudy Bunel, Borja Balle, A. Taylan Cemgil, Zahra Ahmed, Kitty Stacpoole, Ilia Shumailov, Ciprian Baetu, Sven Gowal, Demis Hassabis, Pushmeet Kohli
2024	J	`jnl`	Stealing User Prompts from Mixture of Experts. CoRR Itay Yona, Ilia Shumailov, Jamie Hayes, Nicholas Carlini
2024	J	`jnl`	UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AI. CoRR Ilia Shumailov, Jamie Hayes, Eleni Triantafillou, Guillermo Ortiz-Jiménez, Nicolas Papernot, Matthew Jagielski, Itay Yona, Heidi Howard, Eugene Bagdasaryan
2023	A*	`conf`	Architectural Backdoors in Neural Networks. CVPR Mikel Bober-Irizar, Ilia Shumailov, Yiren Zhao, Robert Mullins, Nicolas Papernot
2023	J	`jnl`	Beyond Labeling Oracles: What does it mean to steal ML models? CoRR Avital Shafran, Ilia Shumailov, Murat A. Erdogdu, Nicolas Papernot
2023	A	`conf`	Boosting Big Brother: Attacking Search Engines with Encodings. RAID Nicholas Boucher, Luca Pajola, Ilia Shumailov, Ross J. Anderson, Mauro Conti
2023	J	`jnl`	Boosting Big Brother: Attacking Search Engines with Encodings. CoRR Nicholas Boucher, Luca Pajola, Ilia Shumailov, Ross J. Anderson, Mauro Conti
2023	J	`jnl`	Gradients Look Alike: Sensitivity is Often Overestimated in DP-SGD. CoRR Anvith Thudi, Hengrui Jia, Casey Meehan, Ilia Shumailov, Nicolas Papernot
2023	J	`jnl`	Human-Producible Adversarial Examples. CoRR David Khachaturov, Yue Gao, Ilia Shumailov, Robert Mullins, Ross J. Anderson, Kassem Fawaz
2023	J	`jnl`	Is Federated Learning a Practical PET Yet? CoRR Franziska Boenisch, Adam Dziedzic, Roei Schuster, Ali Shahin Shamsabadi, Ilia Shumailov, Nicolas Papernot
2023	J	`jnl`	LLM Censorship: A Machine Learning Challenge or a Computer Security Problem? CoRR David Glukhov, Ilia Shumailov, Yarin Gal, Nicolas Papernot, Vardan Papyan
2023	J	`jnl`	Machine Learning needs its own Randomness Standard: Randomised Smoothing and PRNG-based attacks. CoRR Pranav Dahiya, Ilia Shumailov, Ross J. Anderson
2023	A	`conf`	Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregation. EuroS&P Franziska Boenisch, Adam Dziedzic, Roei Schuster, Ali Shahin Shamsabadi, Ilia Shumailov, Nicolas Papernot
2023	—	`conf`	Revisiting Automated Prompting: Are We Actually Doing Better? ACL (2) Yulin Zhou, Yiren Zhao, Ilia Shumailov, Robert Mullins, Yarin Gal
2023	J	`jnl`	Revisiting Automated Prompting: Are We Actually Doing Better? CoRR Yulin Zhou, Yiren Zhao, Ilia Shumailov, Robert Mullins, Yarin Gal
2023	A*	`conf`	Revisiting Block-based Quantisation: What is Important for Sub-8-bit LLM Inference? EMNLP Cheng Zhang, Jianyi Cheng, Ilia Shumailov, George A. Constantinides, Yiren Zhao
2023	J	`jnl`	Revisiting Block-based Quantisation: What is Important for Sub-8-bit LLM Inference? CoRR Cheng Zhang, Jianyi Cheng, Ilia Shumailov, George A. Constantinides, Yiren Zhao
2023	J	`jnl`	SEA: Shareable and Explainable Attribution for Query-based Black-box Attacks. CoRR Yue Gao, Ilia Shumailov, Kassem Fawaz
2023	J	`jnl`	The Curse of Recursion: Training on Generated Data Makes Models Forget. CoRR Ilia Shumailov, Zakhar Shumaylov, Yiren Zhao, Yarin Gal, Nicolas Papernot, Ross J. Anderson
2023	A*	`conf`	Tubes Among Us: Analog Attack on Automatic Speaker Identification. USENIX Security Symposium Shimaa Ahmed, Yash Wani, Ali Shahin Shamsabadi, Mohammad Yaghini, Ilia Shumailov, Nicolas Papernot, Kassem Fawaz
2023	J	`jnl`	When Vision Fails: Text Attacks Against ViT and OCR. CoRR Nicholas Boucher, Jenny Blessing, Ilia Shumailov, Ross Anderson, Nicolas Papernot
2023	A	`conf`	When the Curious Abandon Honesty: Federated Learning Is Not Private. EuroS&P Franziska Boenisch, Adam Dziedzic, Roei Schuster, Ali Shahin Shamsabadi, Ilia Shumailov, Nicolas Papernot
2022	J	`jnl`	Architectural Backdoors in Neural Networks. CoRR Mikel Bober-Irizar, Ilia Shumailov, Yiren Zhao, Robert Mullins, Nicolas Papernot
2022	J	`jnl`	Augmentation Backdoors. CoRR Joseph Rance, Yiren Zhao, Ilia Shumailov, Robert Mullins
2022	A*	`conf`	Bad Characters: Imperceptible NLP Attacks. SP Nicholas Boucher, Ilia Shumailov, Ross Anderson, Nicolas Papernot
2022	J	`jnl`	Bounding Membership Inference. CoRR Anvith Thudi, Ilia Shumailov, Franziska Boenisch, Nicolas Papernot
2022	J	`jnl`	DARTFormer: Finding The Best Type Of Attention. CoRR Jason Ross Brown, Yiren Zhao, Ilia Shumailov, Robert D. Mullins
2022	J	`jnl`	Efficient Adversarial Training With Data Pruning. CoRR Maximilian Kaufmann, Yiren Zhao, Ilia Shumailov, Robert Mullins, Nicolas Papernot
2022	J	`jnl`	ImpNet: Imperceptible and blackbox-undetectable backdoors in compiled neural networks. CoRR Eleanor Clifford, Ilia Shumailov, Yiren Zhao, Ross J. Anderson, Robert Mullins
2022	J	`jnl`	In Differential Privacy, There is Truth: On Vote Leakage in Ensemble Private Learning. CoRR Jiaqi Wang, Roei Schuster, Ilia Shumailov, David Lie, Nicolas Papernot
2022	A*	`conf`	In Differential Privacy, There is Truth: on Vote-Histogram Leakage in Ensemble Private Learning. NeurIPS Jiaqi Wang, Roei Schuster, Ilia Shumailov, David Lie, Nicolas Papernot
2022	J	`jnl`	Model Architecture Adaption for Bayesian Neural Networks. CoRR Duo Wang, Yiren Zhao, Ilia Shumailov, Robert Mullins
2022	A*	`conf`	On the Limitations of Stochastic Pre-processing Defenses. NeurIPS Yue Gao, Ilia Shumailov, Kassem Fawaz, Nicolas Papernot
2022	J	`jnl`	On the Limitations of Stochastic Pre-processing Defenses. CoRR Yue Gao, Ilia Shumailov, Kassem Fawaz, Nicolas Papernot
2022	A*	`conf`	On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning. USENIX Security Symposium Anvith Thudi, Hengrui Jia, Ilia Shumailov, Nicolas Papernot
2022	J	`jnl`	Pipe Overflow: Smashing Voice Authentication for Fun and Profit. CoRR Shimaa Ahmed, Yash Wani, Ali Shahin Shamsabadi, Mohammad Yaghini, Ilia Shumailov, Nicolas Papernot, Kassem Fawaz
2022	A*	`conf`	Rapid Model Architecture Adaption for Meta-Learning. NeurIPS Yiren Zhao, Xitong Gao, Ilia Shumailov, Nicolò Fusi, Robert Mullins
2022	A*	`conf`	Rethinking Image-Scaling Attacks: The Interplay Between Vulnerabilities in Machine Learning Systems. ICML Yue Gao, Ilia Shumailov, Kassem Fawaz
2022	A*	`conf`	Towards More Robust Keyword Spotting for Voice Assistants. USENIX Security Symposium Shimaa Ahmed, Ilia Shumailov, Nicolas Papernot, Kassem Fawaz
2022	J	`jnl`	Wide Attention Is The Way Forward For Transformers. CoRR Jason Ross Brown, Yiren Zhao, Ilia Shumailov, Robert D. Mullins
2021	J	`jnl`	Bad Characters: Imperceptible NLP Attacks. CoRR Nicholas Boucher, Ilia Shumailov, Ross J. Anderson, Nicolas Papernot
2021	J	`jnl`	ExtremeBB: Enabling Large-Scale Research into Extremism, the Manosphere and Their Correlation by Online Forum Data. CoRR Anh V. Vu, Lydia Wilson, Yi Ting Chua, Ilia Shumailov, Ross J. Anderson
2021	A*	`conf`	Manipulating SGD with Data Ordering Attacks. NeurIPS Ilia Shumailov, Zakhar Shumaylov, Dmitry Kazhdan, Yiren Zhao, Nicolas Papernot, Murat A. Erdogdu, Ross J. Anderson
2021	J	`jnl`	Manipulating SGD with Data Ordering Attacks. CoRR Ilia Shumailov, Zakhar Shumaylov, Dmitry Kazhdan, Yiren Zhao, Nicolas Papernot, Murat A. Erdogdu, Ross J. Anderson
2021	A*	`conf`	Markpainting: Adversarial Machine Learning meets Inpainting. ICML David Khachaturov, Ilia Shumailov, Yiren Zhao, Nicolas Papernot, Ross J. Anderson
2021	J	`jnl`	Markpainting: Adversarial Machine Learning meets Inpainting. CoRR David Khachaturov, Ilia Shumailov, Yiren Zhao, Nicolas Papernot, Ross J. Anderson
2021	J	`jnl`	On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning. CoRR Anvith Thudi, Hengrui Jia, Ilia Shumailov, Nicolas Papernot
2021	J	`jnl`	Rapid Model Architecture Adaption for Meta-Learning. CoRR Yiren Zhao, Xitong Gao, Ilia Shumailov, Nicolò Fusi, Robert Mullins
2021	A	`conf`	Sponge Examples: Energy-Latency Attacks on Neural Networks. EuroS&P Ilia Shumailov, Yiren Zhao, Daniel Bates, Nicolas Papernot, Robert Mullins, Ross Anderson
2021	J	`jnl`	When the Curious Abandon Honesty: Federated Learning Is Not Private. CoRR Franziska Boenisch, Adam Dziedzic, Roei Schuster, Ali Shahin Shamsabadi, Ilia Shumailov, Nicolas Papernot
2020	J	`jnl`	BatNet: Data transmission between smartphones over ultrasound. CoRR Almos Zarandy, Ilia Shumailov, Ross J. Anderson
2020	—	`conf`	Blackbox Attacks on Reinforcement Learning Agents Using Approximated Temporal Information. DSN Workshops Yiren Zhao, Ilia Shumailov, Han Cui, Xitong Gao, Robert Mullins, Ross J. Anderson
2020	J	`jnl`	Hey Alexa what did I just type? Decoding smartphone sounds with a voice assistant. CoRR Almos Zarandy, Ilia Shumailov, Ross J. Anderson
2020	J	`jnl`	Not My Deepfake: Towards Plausible Deniability for Machine-Generated Media. CoRR Baiwu Zhang, Jin Peng Zhou, Ilia Shumailov, Nicolas Papernot
2020	J	`jnl`	Nudge Attacks on Point-Cloud DNNs. CoRR Yiren Zhao, Ilia Shumailov, Robert Mullins, Ross J. Anderson
2020	J	`jnl`	Snitches Get Stitches: On The Difficulty of Whistleblowing. CoRR Mansoor Ahmed-Rengers, Ross J. Anderson, Darija Halatova, Ilia Shumailov
2020	J	`jnl`	Sponge Examples: Energy-Latency Attacks on Neural Networks. CoRR Ilia Shumailov, Yiren Zhao, Daniel Bates, Nicolas Papernot, Robert Mullins, Ross J. Anderson
2020	—	`conf`	Towards Certifiable Adversarial Sample Detection. AISec@CCS Ilia Shumailov, Yiren Zhao, Robert Mullins, Ross J. Anderson
2020	J	`jnl`	Towards Certifiable Adversarial Sample Detection. CoRR Ilia Shumailov, Yiren Zhao, Robert Mullins, Ross J. Anderson
2020	A	`conf`	Turning Up the Dial: the Evolution of a Cybercrime Market Through Set-up, Stable, and Covid-19 Eras. Internet Measurement Conference Anh V. Vu, Jack Hughes, Ildiko Pete, Ben Collier, Yi Ting Chua, Ilia Shumailov, Alice Hutchings
2019	—	`conf`	Audio CAPTCHA with a Few Cocktails: It's So Noisy I Can't Hear You (Transcript of Discussion). Security Protocols Workshop Benjamin Maximilian Reinheimer, Fairooz Islam, Ilia Shumailov
2019	—	`conf`	Audio CAPTCHA with a Few Cocktails: It's so Noisy I Can't Hear You. Security Protocols Workshop Benjamin Maximilian Reinheimer, Fairooz Islam, Ilia Shumailov
2019	J	`jnl`	Blackbox Attacks on Reinforcement Learning Agents Using Approximated Temporal Information. CoRR Yiren Zhao, Ilia Shumailov, Han Cui, Xitong Gao, Robert Mullins, Ross J. Anderson
2019	J	`jnl`	Hearing your touch: A new acoustic side channel on smartphones. CoRR Ilia Shumailov, Laurent Simon, Jeff Yan, Ross Anderson
2019	—	`conf`	Information Security Meets Adversarial Examples. WIFS Matthias Kirchner, Cecilia Pasquini, Ilia Shumailov
2019	—	`conf`	Mapping the Underground: Supervised Discovery of Cybercrime Supply Chains. eCrime Rasika Bhalerao, Maxwell Aliapoulios, Ilia Shumailov, Sadia Afroz, Damon McCoy
2019	J	`jnl`	Sitatapatra: Blocking the Transfer of Adversarial Samples. CoRR Ilia Shumailov, Xitong Gao, Yiren Zhao, Robert Mullins, Ross Anderson, Cheng-Zhong Xu
2019	—	`conf`	Snitches Get Stitches: On the Difficulty of Whistleblowing (Transcript of Discussion). Security Protocols Workshop Mansoor Ahmed-Rengers, Ross J. Anderson, Darija Halatova, Ilia Shumailov
2019	—	`conf`	Snitches Get Stitches: On the Difficulty of Whistleblowing. Security Protocols Workshop Mansoor Ahmed-Rengers, Ross J. Anderson, Darija Halatova, Ilia Shumailov
2019	J	`jnl`	Tendrils of Crime: Visualizing the Diffusion of Stolen Bitcoins. CoRR Mansoor Ahmed-Rengers, Ilia Shumailov, Ross Anderson
2019	—	`conf`	To Compress Or Not To Compress: Understanding The Interactions Between Adversarial Attacks And Neural Network Compression. SysML Yiren Zhao, Ilia Shumailov, Robert Mullins, Ross Anderson
2018	—	`conf`	Making Bitcoin Legal. Security Protocols Workshop Ross Anderson, Ilia Shumailov, Mansoor Ahmed-Rengers
2018	—	`conf`	Tendrils of Crime: Visualizing the Diffusion of Stolen Bitcoins. GraMSec Mansoor Ahmed-Rengers, Ilia Shumailov, Ross Anderson
2018	J	`jnl`	The Taboo Trap: Behavioural Detection of Adversarial Samples. CoRR Ilia Shumailov, Yiren Zhao, Robert Mullins, Ross Anderson
2018	J	`jnl`	To compress or not to compress: Understanding the Interactions between Adversarial Attacks and Neural Network Compression. CoRR Yiren Zhao, Ilia Shumailov, Robert Mullins, Ross Anderson
2018	J	`jnl`	Towards Automatic Discovery of Cybercrime Supply Chains. CoRR Rasika Bhalerao, Maxwell Aliapoulios, Ilia Shumailov, Sadia Afroz, Damon McCoy
2017	B	`conf`	Computational analysis of valence and arousal in virtual reality gaming using lower arm electromyograms. ACII Ilia Shumailov, Hatice Gunes