activity
20192026
most citedEntangled Watermarks as a Defense against Model Extraction

44 citations · 94 across the 12 of their papers we have counts for

collaborators

12 papers

cs.CR2026★ 2 cited

AI Agents Enable Adaptive Computer Worms

Jonas Guan, Tom Blanchard, Hanna Foerster +3

A computer worm is malware that spreads on a network by replicating itself from one machine to another. Traditional worms, like WannaCry, exploited predetermined vulnerabilities, a…

cs.CR2025

The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluation

Hengrui Jia, Taoran Li, Jonas Guan +1

Machine unlearning aims to remove specific data influences from trained models, a capability essential for adhering to copyright laws and ensuring AI safety. Current unlearning met…

cs.CR2025

Backdoor Detection through Replicated Execution of Outsourced Training

Hengrui Jia, Sierra Wyllie, Akram Bin Sediq +2

It is common practice to outsource the training of machine learning models to cloud providers. Clients who do so gain from the cloud's economies of scale, but implicitly assume tru…

cs.LG2024★ 2 cited

LLM Dataset Inference: Did you train on my dataset?

Pratyush Maini, Hengrui Jia, Nicolas Papernot +1

The proliferation of large language models (LLMs) in the real world has come with a rise in copyright cases against companies for training their models on unlicensed data from the…

cs.LG2023

Gradients Look Alike: Sensitivity is Often Overestimated in DP-SGD

Anvith Thudi, Hengrui Jia, Casey Meehan +2

Differentially private stochastic gradient descent (DP-SGD) is the canonical approach to private deep learning. While the current privacy analysis of DP-SGD is known to be tight in…

cs.LG2022★ 4 cited

Proof-of-Learning is Currently More Broken Than You Think

Congyu Fang, Hengrui Jia, Anvith Thudi +5

Proof-of-Learning (PoL) proposes that a model owner logs training checkpoints to establish a proof of having expended the computation necessary for training. The authors of PoL for…

cs.LG2021★ 13 cited

On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning

Anvith Thudi, Hengrui Jia, Ilia Shumailov +1

Machine unlearning, i.e. having a model forget about some of its training data, has become increasingly more important as privacy legislation promotes variants of the right-to-be-f…

cs.CR2021★ 11 cited

SoK: Machine Learning Governance

Varun Chandrasekaran, Hengrui Jia, Anvith Thudi +3

The application of machine learning (ML) in computer systems introduces not only many benefits but also risks to society. In this paper, we develop the concept of ML governance to…

cs.LG2021★ 5 cited

Proof-of-Learning: Definitions and Practice

Hengrui Jia, Mohammad Yaghini, Christopher A. Choquette-Choo +4

Training machine learning (ML) models typically involves expensive iterative optimization. Once the model's final parameters are released, there is currently no mechanism for the e…

cs.CR2020★ 44 cited

Entangled Watermarks as a Defense against Model Extraction

Hengrui Jia, Christopher A. Choquette-Choo, Varun Chandrasekaran +1

Machine learning involves expensive data collection and training procedures. Model owners may be concerned that valuable intellectual property can be leaked if adversaries mount mo…

cs.CR2019★ 9 cited

Machine Unlearning

Lucas Bourtoule, Varun Chandrasekaran, Christopher A. Choquette-Choo +5

Once users have shared their data online, it is generally difficult for them to revoke access and ask for the data to be deleted. Machine learning (ML) exacerbates this problem bec…

cs.DS2019★ 4 cited

Robustly Clustering a Mixture of Gaussians

He Jia, Santosh Vempala

We give an efficient algorithm for robustly clustering of a mixture of two arbitrary Gaussians, a central open problem in the theory of computationally efficient robust estimation,…