197 citations · 299 across the 47 of their papers we have counts for
20 papers · 1 filter
Optimal Rates for Differentially Private Hypothesis Testing with E-values
Ben Jacobsen, Tomas Gonzalez, Gavin Brown +2
E-values have attracted considerable interest in recent years as flexible tools for enabling anytime-valid and adaptive data analysis. Hypothesis testing is at the core of many of…
Undetectable Backdoors in Model Parameters: Hiding Sparse Secrets in High Dimensions
Sarthak Choudhary, Atharv Singh Patlan, Nils Palumbo +3
We present Sparse Backdoor, a supply-chain attack that plants a provably undetectable backdoor in pre-trained image classifiers, including convolutional networks and Vision Transfo…
Challenges and Future Directions in Agentic Reverse Engineering Systems
Salem Radey, Jack West, Kassem Fawaz
Agentic systems built on large language models (LLMs) are increasingly being used for complex security tasks, including binary reverse engineering (RE). Despite recent growth in po…
WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks
Guruprasad Viswanathan Ramesh, Asmit Nayak, Basieem Siddique +1
Web agents automate browser tasks, ranging from simple form completion to complex workflows like ordering groceries. While current benchmarks evaluate general-purpose performance~(…
Text-Based Personas for Simulating User Privacy Decisions
Kassem Fawaz, Ren Yi, Octavian Suciu +4
The ability to simulate human privacy decisions has significant implications for aligning autonomous agents with individual intent and conducting cost-effective, large-scale privac…
Personalizing Agent Privacy Decisions via Logical Entailment
James Flemings, Ren Yi, Octavian Suciu +3
Personal large language model (LLM) agents increasingly perform tasks that require access to user data, raising concerns about appropriate data disclosure. We show that relying sol…
Private Continual Counting of Unbounded Streams
Ben Jacobsen, Kassem Fawaz
We study the problem of differentially private continual counting in the unbounded setting where the input size is not known in advance. Current state-of-the-art algorithms bas…
PolicyLR: A Logic Representation For Privacy Policies
Ashish Hooda, Rishabh Khandelwal, Prasad Chalasani +2
Privacy policies are crucial in the online ecosystem, defining how services handle user data and adhere to regulations such as GDPR and CCPA. However, their complexity and frequent…
PRP: Propagating Universal Perturbations to Attack Large Language Model Guard-Rails
Neal Mangaokar, Ashish Hooda, Jihye Choi +4
Large language models (LLMs) are typically aligned to be harmless to humans. Unfortunately, recent work has shown that such models are susceptible to automated jailbreak attacks th…
Exposing and Addressing Security Vulnerabilities in Browser Text Input Fields
Asmit Nayak, Rishabh Khandelwal, Kassem Fawaz
In this work, we perform a comprehensive analysis of the security of text input fields in web browsers. We find that browsers' coarse-grained permission model violates two security…
How Interactions Influence Users' Security Perception of Virtual Reality Authentication?
Jingjie Li, Sunpreet Singh Arora, Kassem Fawaz +6
Users readily embrace the rapid advancements in virtual reality (VR) technology within various everyday contexts, such as gaming, social interactions, shopping, and commerce. In or…
Stateful Defenses for Machine Learning Models Are Not Yet Secure Against Black-box Attacks
Ryan Feng, Ashish Hooda, Neal Mangaokar +3
Recent work has proposed stateful defense models (SDMs) as a compelling strategy to defend against a black-box attacker who only has query access to the model, as is common for onl…
SkillFence: A Systems Approach to Practically Mitigating Voice-Based Confusion Attacks
Ashish Hooda, Matthew Wallace, Kushal Jhunjhunwalla +2
Voice assistants are deployed widely and provide useful functionality. However, recent work has shown that commercial systems like Amazon Alexa and Google Home are vulnerable to vo…
CookieEnforcer: Automated Cookie Notice Analysis and Enforcement
Rishabh Khandelwal, Asmit Nayak, Hamza Harkous +1
Online websites use cookie notices to elicit consent from the users, as required by recent privacy regulations like the GDPR and the CCPA. Prior work has shown that these notices u…
Are You Really Muted?: A Privacy Analysis of Mute Buttons in Video Conferencing Apps
Yucheng Yang, Jack West, George K. Thiruvathukal +2
Video conferencing apps (VCAs) make it possible for previously private spaces -- bedrooms, living rooms, and kitchens -- into semi-public extensions of the office. For the most par…
Experimental Security Analysis of the App Model in Business Collaboration Platforms
Yunang Chen, Yue Gao, Nick Ceccio +3
Business Collaboration Platforms like Microsoft Teams and Slack enable teamwork by supporting text chatting and third-party resource integration. A user can access online file stor…
Face-Off: Adversarial Face Obfuscation
Varun Chandrasekaran, Chuhan Gao, Brian Tang +3
Advances in deep learning have made face recognition technologies pervasive. While useful to social media platforms and users, this technology carries significant privacy threats.…
Preech: A System for Privacy-Preserving Speech Transcription
Shimaa Ahmed, Amrita Roy Chowdhury, Kassem Fawaz +1
New Advances in machine learning have made Automated Speech Recognition (ASR) systems practical and more scalable. These systems, however, pose serious privacy threats as speech is…
The Privacy Policy Landscape After the GDPR
Thomas Linden, Rishabh Khandelwal, Hamza Harkous +1
The EU General Data Protection Regulation (GDPR) is one of the most demanding and comprehensive privacy regulations of all time. A year after it went into effect, we study its impa…
Continuous Authentication for Voice Assistants
Huan Feng, Kassem Fawaz, Kang G. Shin
Voice has become an increasingly popular User Interaction (UI) channel, mainly contributing to the ongoing trend of wearables, smart vehicles, and home automation systems. Voice as…