activity
20122026
most citedManaging your Private and Public Data: Bringing down Inference Attacks against your Privacy

70 citations · 293 across the 70 of their papers we have counts for

collaborators

73 papers

cs.IT2026

Feedback Coding Enables Inference-Time Covert Agentic Communication

Sidong Guo, Sajani Vithana, Atefeh Gilani +3

As large language models (LLMs) are increasingly used to automate digital interactions, users can leverage LLM-generated text as cover for covert communication within seemingly ben…

cs.IT2026

A Complete Characterization of Tensorizable -divergences

Rodrigo Cruz, Flavio P. Calmon, Qian Yu

Csiszar's formulation of the -divergence introduced a vast family of functionals for quantifying dissimilarity between probability distributions. However, many applications in s…

cs.IT2026

Optimal Domain-Aware Privacy Mechanisms for Synthetic Data Generation

Sajani Vithana, Sangwon Jung, Haoyang Hu +3

Differential privacy (DP) imposes fundamental trade-offs between privacy and statistical fidelity in synthetic data generation. While access to public data has been shown to improv…

cs.IT2026

Sort, Partition, Randomize: Optimal Binary Hypothesis Testing under Local Differential Privacy

Elena Ghazi, Jawad Nasser, Flavio Calmon +1

We study optimal design of -locally differentially private mechanisms for binary hypothesis testing. Each observation is drawn from one of two known distributions $P_0…

cs.LG2026

ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport

Atefeh Gilani, Sajani Vithana, Carol Xuan Long +3

Watermarking is an important tool for promoting the responsible use of large language models (LLMs). Existing watermarks insert a signal into generated tokens that either flags LLM…

cs.AI2025

RippleBench: Capturing Ripple Effects Using Existing Knowledge Repositories

Roy Rinberg, Usha Bhalla, Igor Shilov +2

Targeted interventions on language models, such as unlearning or model editing, aim to modify specific information, but their effects often propagate to related, unintended areas (…

cs.CL2025

Temporal Sparse Autoencoders: Leveraging the Sequential Nature of Language for Interpretability

Usha Bhalla, Alex Oesterling, Claudio Mayrink Verdun +2

Translating the internal representations and computations of models into concepts that humans can understand is a key goal of interpretability. While recent dictionary learning met…

cs.IT2025★ 1 cited

An information theorist's tour of differential privacy

Anand D. Sarwate, Flavio P. Calmon, Oliver Kosut +1

Since being proposed in 2006, differential privacy has become a standard method for quantifying certain risks in publishing or sharing analyses of sensitive data. At its heart, dif…

cs.CR2025

HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions

Dor Tsur, Carol Xuan Long, Claudio Mayrink Verdun +5

Large language model (LLM) watermarks enable authentication of text provenance, curb misuse of machine-generated text, and promote trust in AI systems. Current watermarks operate b…

cs.CV2025

Multi-Group Proportional Representation for Text-to-Image Models

Sangwon Jung, Alex Oesterling, Claudio Mayrink Verdun +3

Text-to-image (T2I) generative models can create vivid, realistic images from textual descriptions. As these models proliferate, they expose new concerns about their ability to rep…

cs.CR2025

Optimized Couplings for Watermarking Large Language Models

Dor Tsur, Carol Xuan Long, Claudio Mayrink Verdun +3

Large-language models (LLMs) are now able to produce text that is, in many cases, seemingly indistinguishable from human-generated content. This has fueled the development of water…

cs.IT2025

Soft Best-of-n Sampling for Model Alignment

Claudio Mayrink Verdun, Alex Oesterling, Himabindu Lakkaraju +1

Best-of- (BoN) sampling is a practical approach for aligning language model outputs with human preferences without expensive fine-tuning. BoN sampling is performed by generating…

cs.IT2025

Optimizing Noise Distributions for Differential Privacy

Atefeh Gilani, Juan Felipe Gomez, Shahab Asoodeh +3

We propose a unified optimization framework for designing continuous and discrete noise distributions that ensure differential privacy (DP) by minimizing Rényi DP, a variant of DP,…

cs.LG2025

Regretful Decisions under Label Noise

Sujay Nagaraj, Yang Liu, Flavio P. Calmon +1

Machine learning models are routinely used to support decisions that affect individuals -- be it to screen a patient for a serious illness or to gauge their response to treatment.…

cs.AI2024

Multi-Group Proportional Representation in Retrieval

Alex Oesterling, Claudio Mayrink Verdun, Carol Xuan Long +5

Image search and retrieval tasks can perpetuate harmful stereotypes, erase cultural identities, and amplify social disparities. Current approaches to mitigate these representationa…

cs.IT2024

Correlated Privacy Mechanisms for Differentially Private Distributed Mean Estimation

Sajani Vithana, Viveck R. Cadambe, Flavio P. Calmon +1

Differentially private distributed mean estimation (DP-DME) is a fundamental building block in privacy-preserving federated learning, where a central server estimates the mean of $…

cs.CY2024

Selective Explanations

Lucas Monteiro Paes, Dennis Wei, Flavio P. Calmon

Feature attribution methods explain black-box machine learning (ML) models by assigning importance scores to input features. These methods can be computationally expensive for larg…

cs.CY2024★ 1 cited

Algorithmic Arbitrariness in Content Moderation

Juan Felipe Gomez, Caio Vieira Machado, Lucas Monteiro Paes +1

Machine learning (ML) is widely used to moderate online content. Despite its scalability relative to human moderation, the use of ML introduces unique challenges to content moderat…

cs.LG2024★ 3 cited

Interpreting CLIP with Sparse Linear Concept Embeddings (SpLiCE)

Usha Bhalla, Alex Oesterling, Suraj Srinivas +2

CLIP embeddings have demonstrated remarkable performance across a wide range of multimodal applications. However, these high-dimensional, dense vector representations are not easil…

cs.LG2023★ 1 cited

Multi-Group Fairness Evaluation via Conditional Value-at-Risk Testing

Lucas Monteiro Paes, Ananda Theertha Suresh, Alex Beutel +2

Machine learning (ML) models used in prediction and classification tasks may display performance disparities across population groups determined by sensitive attributes (e.g., race…

cs.IT2023

Differentially Private Secure Multiplication: Hiding Information in the Rubble of Noise

Viveck R. Cadambe, Ateet Devulapalli, Haewon Jeong +1

We consider the problem of private distributed multi-party multiplication. It is well-established that Shamir secret-sharing coding strategies can enable perfect information-theore…

cs.LG2023★ 1 cited

Fair Machine Unlearning: Data Removal while Mitigating Disparities

Alex Oesterling, Jiaqi Ma, Flavio P. Calmon +1

The Right to be Forgotten is a core principle outlined by regulatory frameworks such as the EU's General Data Protection Regulation (GDPR). This principle allows individuals to req…

cs.LG2023★ 1 cited

Arbitrariness Lies Beyond the Fairness-Accuracy Frontier

Carol Xuan Long, Hsiang Hsu, Wael Alghamdi +1

Machine learning tasks may admit multiple competing models that achieve similar performance yet produce conflicting outputs for individual samples -- a phenomenon known as predicti…

cs.LG2023★ 2 cited

Adapting Fairness Interventions to Missing Values

Raymond Feng, Flavio P. Calmon, Hao Wang

Missing values in real-world data pose a significant and unique challenge to algorithmic fairness. Different demographic groups may be unequally affected by missing data, and the s…