activity
20242026
most citedIsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems

6 citations · 17 across the 10 of their papers we have counts for

collaborators

12 papers

cs.CY2026

AI-Enabled Human Memory Manipulation: Misleading AI-Generated Summaries Distort Human Memory

Mattea Sim, Yael Eiger, Tadayoshi Kohno

AI-generated summaries are increasingly used in high-stakes settings, like policing, despite considerable evidence that AI often generates misleading or inaccurate information. Thi…

cs.CR2026

Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks

Franziska Roesner, Tadayoshi Kohno

Thompson's "Reflections on Trusting Trust" showed that a compiler can be poisoned to reinsert its own backdoor, so that even recompiling clean source reproduces the Trojan. Today,…

cs.AI2026

Janus: a Playground for User-Involved Agentic Permission Management

Natalie Grace Brigham, Eugene Bagdasarian, Tadayoshi Kohno +1

AI agents that autonomously execute tool calls on a user's behalf raise pressing questions about permission management: what role could users play, and what role should they play?…

cs.CR2026

Extending the Formalism and Theoretical Foundations of Cryptography to AI

Federico Villa, F. Betül Durak, Tadayoshi Kohno +2

Recent progress in (Large) Language Models (LMs) has enabled the development of autonomous LM-based agents capable of executing complex tasks with minimal supervision. These agents…

cs.CR2025

Towards Automating Data Access Permissions in AI Agents

Yuhao Wu, Ke Yang, Franziska Roesner +3

As AI agents attempt to autonomously act on users' behalf, they raise transparency and control issues. We argue that permission-based access control is indispensable in providing m…

cs.CR2025

Unencrypted Flying Objects: Security Lessons from University Small Satellite Developers and Their Code

Rachel McAmis, Gregor Haas, Mattea Sim +2

Satellites face a multitude of security risks that set them apart from hardware on Earth. Small satellites may face additional challenges, as they are often developed on a budget a…

cs.HC2024★ 3 cited

Analyzing the AI Nudification Application Ecosystem

Cassidy Gibson, Daniel Olszewski, Natalie Grace Brigham +5

Given a source image of a clothed person (an image subject), AI-based nudification applications can produce nude (undressed) images of that person. Moreover, not only do such appli…

cs.CY2024★ 2 cited

Understanding Help-Seeking and Help-Giving on Social Media for Image-Based Sexual Abuse

Miranda Wei, Sunny Consolvo, Patrick Gage Kelley +7

Image-based sexual abuse (IBSA), like other forms of technology-facilitated abuse, is a growing threat to people's digital safety. Attacks include unwanted solicitations for sexual…

cs.CY2024★ 1 cited

"Violation of my body:" Perceptions of AI-generated non-consensual (intimate) imagery

Natalie Grace Brigham, Miranda Wei, Tadayoshi Kohno +1

AI technology has enabled the creation of deepfakes: hyper-realistic synthetic media. We surveyed 315 individuals in the U.S. on their views regarding the hypothetical non-consensu…

cs.CL2024★ 5 cited

Developing Story: Case Studies of Generative AI's Use in Journalism

Natalie Grace Brigham, Chongjiu Gao, Tadayoshi Kohno +2

Journalists are among the many users of large language models (LLMs). To better understand the journalist-AI interactions, we conduct a study of LLM usage by two news agencies thro…

cs.CR2024

SoK (or SoLK?): On the Quantitative Study of Sociodemographic Factors and Computer Security Behaviors

Miranda Wei, Jaron Mink, Yael Eiger +3

Researchers are increasingly exploring how gender, culture, and other sociodemographic factors correlate with user computer security and privacy behaviors. To more holistically und…

cs.CR2024★ 6 cited

IsolateGPT: An Execution Isolation Architecture for LLM-Based Agentic Systems

Yuhao Wu, Franziska Roesner, Tadayoshi Kohno +2

Large language models (LLMs) extended as systems, such as ChatGPT, have begun supporting third-party applications. These LLM apps leverage the de facto natural language-based autom…