Publications (30)
HMARK: Radioactive Multi-Bit Semantic-Latent Watermarking for Diffusion Models
Kexin Li, Guozhen Ding, Ilya Grishchenko +1
Modern generative diffusion models rely on vast training datasets, often including images with uncertain ownership or usage rights. Radioactive watermarks -- marks that transfer to…
Sound Patch Generation for Vulnerabilities
Zhen Huang, David Lie
Security vulnerabilities are among the most critical software defects in existence. As such, they require patches that are correct and quickly deployed. This motivates an automatic…
HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removal
Kexin Li, Xiao Hu, Ilya Grishchenko +1
The availability of high-quality, AI-generated audio raises security challenges such as misinformation campaigns and voice-cloning fraud. A key defense against the misuse of AI-gen…
Empirical Analysis of Evasion and Poisoning Against Malware Data Drift Detection
Mingyue Yang, David Lie, Nicolas Papernot
As concept drift due to malware evolution presents challenges for malware classification, machine learning-based data drift detection tools are developed to mitigate this problem.…
Glimmers: Resolving the Privacy/Trust Quagmire
David Lie, Petros Maniatis
Many successful services rely on trustworthy contributions from users. To establish that trust, such services often require access to privacy-sensitive information from users, thus…
Time Will Tell: Timing Side Channels via Output Token Count in Large Language Models
Tianchen Zhang, Gururaj Saileshwar, David Lie
This paper demonstrates a new side-channel that enables an adversary to extract sensitive information about inference inputs in large language models (LLMs) based on the number of…