activity
20192025
most citedAnalyzing Information Leakage of Updates to Natural Language Models

90 citations · 141 across the 9 of their papers we have counts for

collaborators

9 papers

cs.CR2025★ 4 cited

Securing AI Agents with Information-Flow Control

Manuel Costa, Boris Köpf, Aashish Kolluri +6

As AI agents become increasingly autonomous and capable, ensuring their security against vulnerabilities such as prompt injection becomes critical. This paper explores the use of i…

cs.CL2025★ 1 cited

The Canary's Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text

Matthieu Meeus, Lukas Wutschitz, Santiago Zanella-Béguelin +2

How much information about training samples can be leaked through synthetic data generated by Large Language Models (LLMs)? Overlooking the subtleties of information flow in synthe…

cs.LG2024

Permissive Information-Flow Analysis for Large Language Models

Shoaib Ahmed Siddiqui, Radhika Gaonkar, Boris Köpf +7

Large Language Models (LLMs) are rapidly becoming commodity components of larger software systems. This poses natural security and privacy problems: poisoned data retrieved from on…

cs.CR2024

Closed-Form Bounds for DP-SGD against Record-level Inference

Giovanni Cherubin, Boris Köpf, Andrew Paverd +3

Machine learning models trained with differentially-private (DP) algorithms such as DP-SGD enjoy resilience against a wide range of privacy attacks. Although it is possible to deri…

cs.LG2023★ 1 cited

Rethinking Privacy in Machine Learning Pipelines from an Information Flow Control Perspective

Lukas Wutschitz, Boris Köpf, Andrew Paverd +6

Modern machine learning systems use models trained on ever-growing corpora. Typically, metadata such as ownership, access control, or licensing information is ignored during traini…

cs.LG2023★ 13 cited

Analyzing Leakage of Personally Identifiable Information in Language Models

Nils Lukas, Ahmed Salem, Robert Sim +3

Language Models (LMs) have been shown to leak information about training data through sentence-level membership inference and reconstruction attacks. Understanding the risk of LMs…

cs.LG2022★ 10 cited

Bayesian Estimation of Differential Privacy

Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople +6

Algorithms such as Differentially Private SGD enable training machine learning models with formal privacy guarantees. However, there is a discrepancy between the protection that su…

cs.CR2021★ 22 cited

Training Data Leakage Analysis in Language Models

Huseyin A. Inan, Osman Ramadan, Lukas Wutschitz +4

Recent advances in neural network based language models lead to successful deployments of such models, improving user experience in various applications. It has been demonstrated t…

cs.LG2019★ 90 cited

Analyzing Information Leakage of Updates to Natural Language Models

Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople +5

To continuously improve quality and reflect changes in data, machine learning applications have to regularly retrain and update their core models. We show that a differential analy…