| Extracting training data from large language models N Carlini, F Tramer, E Wallace, M Jagielski, A Herbert-Voss, K Lee, ... 30th USENIX Security Symposium (USENIX Security 21), 2633-2650, 2021 | 873 | 2021 |
| Manipulating machine learning: Poisoning attacks and countermeasures for regression learning M Jagielski, A Oprea, B Biggio, C Liu, C Nita-Rotaru, B Li 2018 IEEE Symposium on Security and Privacy (SP), 19-35, 2018 | 811 | 2018 |
| Why Do Adversarial Attacks Transfer? Explaining Transferability of Evasion and Poisoning Attacks A Demontis, M Melis, M Pintor, M Jagielski, B Biggio, A Oprea, ... 28th {USENIX} Security Symposium ({USENIX} Security 19), 321-338, 2019 | 335 | 2019 |
| High accuracy and high fidelity extraction of neural networks M Jagielski, N Carlini, D Berthelot, A Kurakin, N Papernot 29th USENIX security symposium (USENIX Security 20), 1345-1362, 2020 | 322* | 2020 |
| PaLM 2 Technical Report R Anil, AM Dai, O Firat, M Johnson, D Lepikhin, A Passos, S Shakeri, ... arXiv preprint arXiv:2305.10403, 2023 | 296 | 2023 |
| Quantifying Memorization Across Neural Language Models N Carlini, D Ippolito, M Jagielski, K Lee, F Tramer, C Zhang arXiv preprint arXiv:2202.07646, 2022 | 234 | 2022 |
| Extracting training data from diffusion models N Carlini, J Hayes, M Nasr, M Jagielski, V Sehwag, F Tramèr, B Balle, ... arXiv preprint arXiv:2301.13188, 2023 | 152 | 2023 |
| Auditing differentially private machine learning: How private is private sgd? M Jagielski, J Ullman, A Oprea Advances in Neural Information Processing Systems 33, 22205-22216, 2020 | 152 | 2020 |
| Differentially private fair learning M Jagielski, M Kearns, J Mao, A Oprea, A Roth, S Sharifi-Malvajerdi, ... International Conference on Machine Learning, 3000-3008, 2019 | 141 | 2019 |
| Cryptanalytic extraction of neural network models N Carlini, M Jagielski, I Mironov Advances in Cryptology–CRYPTO 2020: 40th Annual International Cryptology …, 2020 | 109 | 2020 |
| Subpopulation data poisoning attacks M Jagielski, G Severi, N Pousette Harger, A Oprea Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications …, 2021 | 80 | 2021 |
| Truth serum: Poisoning machine learning models to reveal their secrets F Tramèr, R Shokri, A San Joaquin, H Le, M Jagielski, S Hong, N Carlini Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications …, 2022 | 57 | 2022 |
| Threat Detection for Collaborative Adaptive Cruise Control in Connected Cars M Jagielski, N Jones, CW Lin, C Nita-Rotaru, S Shiraishi Proceedings of the 11th ACM Conference on Security & Privacy in Wireless and …, 2018 | 49 | 2018 |
| Counterfactual Memorization in Neural Language Models C Zhang, D Ippolito, K Lee, M Jagielski, F Tramèr, N Carlini arXiv preprint arXiv:2112.12938, 2021 | 46 | 2021 |
| Poisoning Web-Scale Training Datasets is Practical N Carlini, M Jagielski, CA Choquette-Choo, D Paleka, W Pearce, ... arXiv preprint arXiv:2302.10149, 2023 | 41 | 2023 |
| Measuring Forgetting of Memorized Training Examples M Jagielski, O Thakkar, F Tramèr, D Ippolito, K Lee, N Carlini, E Wallace, ... arXiv preprint arXiv:2207.00099, 2022 | 39 | 2022 |
| Are aligned neural networks adversarially aligned? N Carlini, M Nasr, CA Choquette-Choo, M Jagielski, I Gao, A Awadalla, ... arXiv preprint arXiv:2306.15447, 2023 | 36 | 2023 |
| Secure communication channel establishment: TLS 1.3 (over TCP fast open) vs. QUIC S Chen, S Jero, M Jagielski, A Boldyreva, C Nita-Rotaru Computer Security–ESORICS 2019: 24th European Symposium on Research in …, 2019 | 31* | 2019 |
| Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacy D Ippolito, F Tramèr, M Nasr, C Zhang, M Jagielski, K Lee, ... arXiv preprint arXiv:2210.17546, 2022 | 27 | 2022 |
| The privacy onion effect: Memorization is relative N Carlini, M Jagielski, C Zhang, N Papernot, A Terzis, F Tramer Advances in Neural Information Processing Systems 35, 13263-13276, 2022 | 21 | 2022 |
Nicholas CarliniGoogle DeepMindVerified email at google.com
