Robustness Enhancement of Content-Based Watermarks Using Entropy Masking Effect. - Amir Houman Sadr; Shahrokh Ghaemmaghami (IWDW, 2005)

A Collusion-Resistant Video Watermarking Scheme. - Amir Houman Sadr; Shahrokh Ghaemmaghami (Information Hiding, 2006)

Robust Content-Based Video Watermarking Exploiting Motion Entropy Masking Effect. - Amir Houmansadr; Hamed Pirsiavash; Shahrokh Ghaemmaghami (SIGMAP, 2006)

Multi-flow Attacks Against Network Flow Watermarking Schemes. - Negar Kiyavash; Amir Houmansadr; Nikita Borisov (USENIX Security Symposium, 2008)

Multi-flow attack resistant watermarks for network flows. - Amir Houmansadr; Negar Kiyavash; Nikita Borisov (ICASSP, 2009)

RAINBOW: A Robust And Invisible Non-Blind Watermark for Network Flows. - Amir Houmansadr; Negar Kiyavash; Nikita Borisov (NDSS, 2009)

Nexat: a history-based approach to predict attacker actions. - Casey Cipriano; Ali Zand; Amir Houmansadr; Christopher Kruegel; Giovanni Vigna (ACSAC, 2011)

Cirripede: circumvention infrastructure using router redirection with plausible deniability. - Amir Houmansadr; Giang T. K. Nguyen; Matthew Caesar 001; Nikita Borisov (CCS, 2011)

A cloud-based intrusion detection and response system for mobile phones. - Amir Houmansadr; Saman A. Zonouz; Robin Berthier (DSN Workshops, 2011)

Towards improving network flow watermarks using the repeat-accumulate codes. - Amir Houmansadr; Nikita Borisov (ICASSP, 2011)

CoCo: Coding-Based Covert Timing Channels for Network Flows. - Amir Houmansadr; Nikita Borisov (Information Hiding, 2011)

Stegobot: A Covert Social Network Botnet. - Shishir Nagaraja; Amir Houmansadr; Pratch Piyawongwisal; Vijit Singh; Pragya Agarwal; Nikita Borisov (Information Hiding, 2011)

SWIRL: A Scalable Watermark to Detect Correlated Network Flows. - Amir Houmansadr; Nikita Borisov (NDSS, 2011)

Stegobot: construction of an unobservable communication network leveraging social behavior - Shishir Nagaraja; Amir Houmansadr; Pratch Piyawongwisal; Vijit Singh; Pragya Agarwal; Nikita Borisov (CoRR, 2011)

CensorSpoofer: asymmetric communication using IP spoofing for censorship-resistant web browsing. - Qiyan Wang; Xun Gong 001; Giang T. K. Nguyen; Amir Houmansadr; Nikita Borisov (CCS, 2012)

EliMet: Security metric elicitation in power grid critical infrastructures by observing system administrators' responsive behavior. - Saman A. Zonouz; Amir Houmansadr; Parisa Haghani (DSN, 2012)

Multi-Flow Attacks Against Network Flow Watermarks: Analysis and Countermeasures - Negar Kiyavash; Amir Houmansadr; Nikita Borisov (CoRR, 2012)

BotMosaic: Collaborative Network Watermark for Botnet Detection - Amir Houmansadr; Nikita Borisov (CoRR, 2012)

CensorSpoofer: Asymmetric Communication with IP Spoofing for Censorship-Resistant Web Browsing - Qiyan Wang; Xun Gong 001; Giang T. K. Nguyen; Amir Houmansadr; Nikita Borisov (CoRR, 2012)

IP over Voice-over-IP for censorship circumvention - Amir Houmansadr; Thomas J. Riedl; Nikita Borisov; Andrew C. Singer (CoRR, 2012)

Design, analysis, and implementation of effective network flow watermarking schemes - Amir Houmansadr (2012)

I want my voice to be heard: IP over Voice-over-IP for unobservable censorship circumvention. - Amir Houmansadr; Thomas J. Riedl; Nikita Borisov; Andrew C. Singer (NDSS, 2013)

The Need for Flow Fingerprints to Link Correlated Network Flows. - Amir Houmansadr; Nikita Borisov (Privacy Enhancing Technologies, 2013)

The Parrot Is Dead: Observing Unobservable Network Communications. - Amir Houmansadr; Chad Brubaker; Vitaly Shmatikov (IEEE Symposium on Security and Privacy, 2013)

Secloud: A cloud-based comprehensive and lightweight security solution for smartphones. - Saman A. Zonouz; Amir Houmansadr; Robin Berthier; Nikita Borisov; William H. Sanders (Comput. Secur., 2013)

BotMosaic: Collaborative network watermark for the detection of IRC-based botnets. - Amir Houmansadr; Nikita Borisov (J. Syst. Softw., 2013)

No Direction Home: The True Cost of Routing Around Decoys. - Amir Houmansadr; Edmund L. Wong; Vitaly Shmatikov (NDSS, 2014)

CloudTransport: Using Cloud Storage for Censorship-Resistant Networking. - Chad Brubaker; Amir Houmansadr; Vitaly Shmatikov (Privacy Enhancing Technologies, 2014)

Non-Blind Watermarking of Network Flows. - Amir Houmansadr; Negar Kiyavash; Nikita Borisov (IEEE/ACM Trans. Netw., 2014)

Know Your Achilles' Heel: Automatic Detection of Network Critical Services. - Ali Zand; Amir Houmansadr; Giovanni Vigna; Richard A. Kemmerer; Christopher Kruegel (ACSAC, 2015)

Covert communications on Poisson packet channels. - Ramin Soltani; Dennis Goeckel; Don Towsley; Amir Houmansadr (Allerton, 2015)

CacheBrowser: Bypassing Chinese Censorship without Proxies Using Cached Content. - John Holowczak; Amir Houmansadr (CCS, 2015)

Covert communications on renewal packet channels. - Ramin Soltani; Dennis Goeckel; Don Towsley; Amir Houmansadr (Allerton, 2016)

GAME OF DECOYS: Optimal Decoy Routing Through Game Theory. - Milad Nasr; Amir Houmansadr (CCS, 2016)

Practical Censorship Evasion Leveraging Content Delivery Networks. - Hadi Zolfaghari; Amir Houmansadr (CCS, 2016)

Defining perfect location privacy using anonymization. - Zarrin Montazeri; Amir Houmansadr; Hossein Pishro-Nik (CISS, 2016)

Achieving perfect location privacy in Markov models using anonymization. - Zarrin Montazeri; Amir Houmansadr; Hossein Pishro-Nik (ISITA, 2016)

An Analysis of Attacks on Blockchain Consensus. - George Bissias; Brian Neil Levine; A. Pinar Ozisik; Gavin Andresen; Amir Houmansadr (CoRR, 2016)

CovertCast: Using Live Streaming to Evade Internet Censorship. - Richard McPherson; Amir Houmansadr; Vitaly Shmatikov (Proc. Priv. Enhancing Technol., 2016)

Towards provably invisible network flow fingerprints. - Ramin Soltani; Dennis Goeckel; Don Towsley; Amir Houmansadr (ACSSC, 2017)

Compressive Traffic Analysis: A New Paradigm for Scalable Traffic Analysis. - Milad Nasr; Amir Houmansadr; Arya Mazumdar (CCS, 2017)

The Waterfall of Liberty: Decoy Routing Circumvention that Resists Routing Attacks. - Milad Nasr; Hadi Zolfaghari; Amir Houmansadr (CCS, 2017)

Fundamental limits of location privacy using anonymization. - Nazanin Takbiri; Amir Houmansadr; Dennis L. Goeckel; Hossein Pishro-Nik (CISS, 2017)

Graphene: A New Protocol for Block Propagation Using Set Reconciliation. - A. Pinar Ozisik; Gavin Andresen; George Bissias; Amir Houmansadr; Brian Neil Levine (DPM/CBT@ESORICS, 2017)

Limits of location privacy under anonymization and obfuscation. - Nazanin Takbiri; Amir Houmansadr; Dennis L. Goeckel; Hossein Pishro-Nik (ISIT, 2017)

Enemy At the Gateways: A Game Theoretic Approach to Proxy Distribution. - Milad Nasr; Sadegh Farhang; Amir Houmansadr; Jens Grossklags (CoRR, 2017)

TagIt: Tagging Network Flows using Blind Fingerprints. - Fatemeh Rezaei; Amir Houmansadr (Proc. Priv. Enhancing Technol., 2017)

Achieving Perfect Location Privacy in Wireless Devices Using Anonymization. - Zarrin Montazeri; Amir Houmansadr; Hossein Pishro-Nik (IEEE Trans. Inf. Forensics Secur., 2017)

SWEET: Serving the Web by Exploiting Email Tunnels. - Amir Houmansadr; Wenxuan Zhou; Matthew Caesar 001; Nikita Borisov (IEEE/ACM Trans. Netw., 2017)

Fundamental Limits of Covert Bit Insertion in Packets. - Ramin Soltani; Dennis Goeckel; Don Towsley; Amir Houmansadr (Allerton, 2018)

Main-Memory Requirements of Big Data Applications on Commodity Server Platform. - Hosein Mohammadi Makrani; Setareh Rafatirad; Amir Houmansadr; Houman Homayoun (CCGrid, 2018)

DeepCorr: Strong Flow Correlation Attacks on Tor Using Deep Learning. - Milad Nasr; Alireza Bahramali; Amir Houmansadr (CCS, 2018)

Machine Learning with Membership Privacy using Adversarial Regularization. - Milad Nasr; Reza Shokri; Amir Houmansadr (CCS, 2018)

Comprehensive assessment of run-time hardware-supported malware detection using general and ensemble learning. - Hossein Sayadi; Sai Manoj P. D.; Amir Houmansadr; Setareh Rafatirad; Houman Homayoun (CF, 2018)

Privacy Against Statistical Matching: Inter-User Correlation. - Nazanin Takbiri; Amir Houmansadr; Dennis L. Goeckel; Hossein Pishro-Nik (ISIT, 2018)

Comprehensive Privacy Analysis of Deep Learning: Stand-alone and Federated Learning under Passive and Active White-box Inference Attacks. - Milad Nasr; Reza Shokri; Amir Houmansadr (CoRR, 2018)

Revisiting utility metrics for location privacy-preserving mechanisms. - Virat Shejwalkar; Amir Houmansadr; Hossein Pishro-Nik; Dennis Goeckel (ACSAC, 2019)

Asymptotic Limits of Privacy in Bayesian Time Series Matching. - Nazanin Takbiri; Dennis L. Goeckel; Amir Houmansadr; Hossein Pishro-Nik (CISS, 2019)

Blocking-Resilient Communications in Information-Centric Networks Using Router Redirection. - Hamid Mozaffari; Amir Houmansadr; Arun Venkataramani (GLOBECOM Workshops, 2019)

Enemy At the Gateways: Censorship-Resilient Proxy Distribution Using Game Theory. - Milad Nasr; Sadegh Farhang; Amir Houmansadr; Jens Grossklags (NDSS, 2019)

Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learning. - Milad Nasr; Reza Shokri; Amir Houmansadr (IEEE Symposium on Security and Privacy, 2019)

On the Importance of Encrypted-SNI (ESNI) to Censorship Circumvention. - Zimo Chai; Amirhossein Ghafari; Amir Houmansadr (FOCI @ USENIX Security Symposium, 2019)

Asymptotic Loss in Privacy due to Dependency in Gaussian Traces. - Nazanin Takbiri; Ramin Soltani; Dennis L. Goeckel; Amir Houmansadr; Hossein Pishro-Nik (WCNC, 2019)

Reconciling Utility and Membership Privacy via Knowledge Distillation. - Virat Shejwalkar; Amir Houmansadr (CoRR, 2019)

Cronus: Robust and Heterogeneous Collaborative Learning with Black-Box Knowledge Transfer. - Hongyan Chang; Virat Shejwalkar; Reza Shokri; Amir Houmansadr (CoRR, 2019)

Matching Anonymized and Obfuscated Time Series to Users' Profiles. - Nazanin Takbiri; Amir Houmansadr; Dennis L. Goeckel; Hossein Pishro-Nik (IEEE Trans. Inf. Theory, 2019)

How China Detects and Blocks Shadowsocks. - Alice; Bob; Carol; Jan Beznazwy; Amir Houmansadr (Internet Measurement Conference, 2020)

Sequence Obfuscation to Thwart Pattern Matching Attacks. - Bo Guan; Nazanin Takbiri; Dennis L. Goeckel; Amir Houmansadr; Hossein Pishro-Nik (ISIT, 2020)

Practical Traffic Analysis Attacks on Secure Messaging Applications. - Alireza Bahramali; Amir Houmansadr; Ramin Soltani; Dennis Goeckel; Don Towsley (NDSS, 2020)

Heterogeneous Private Information Retrieval. - Hamid Mozaffari; Amir Houmansadr (NDSS, 2020)

MassBrowser: Unblocking the Censored Web for the Masses, by the Masses. - Milad Nasr; Hadi Zolfaghari; Amir Houmansadr; Amirhossein Ghafari (NDSS, 2020)

The Bitcoin Hunter: Detecting Bitcoin Traffic over Encrypted Channels. - Fatemeh Rezaei; Shahrzad Naseri; Ittay Eyal; Amir Houmansadr (SecureComm (1), 2020)

Triplet Censors: Demystifying Great Firewall's DNS Censorship Behavior. - anonymous; Arian Akhavan Niaki; Nguyen Phong Hoang; Phillipa Gill; Amir Houmansadr (FOCI @ USENIX Security Symposium, 2020)

Blind Adversarial Network Perturbations. - Milad Nasr; Alireza Bahramali; Amir Houmansadr (CoRR, 2020)

Improving Deep Learning with Differential Privacy using Gradient Encoding and Denoising. - Milad Nasr; Reza Shokri; Amir Houmansadr (CoRR, 2020)

Fundamental Limits of Covert Packet Insertion. - Ramin Soltani; Dennis Goeckel; Don Towsley; Amir Houmansadr (IEEE Trans. Commun., 2020)

Fundamental Limits of Invisible Flow Fingerprinting. - Ramin Soltani; Dennis Goeckel; Don Towsley; Amir Houmansadr (IEEE Trans. Inf. Forensics Secur., 2020)

Privacy of Dependent Users Against Statistical Matching. - Nazanin Takbiri; Amir Houmansadr; Dennis L. Goeckel; Hossein Pishro-Nik (IEEE Trans. Inf. Theory, 2020)

Leveraging Prior Knowledge Asymmetries in the Design of Location Privacy-Preserving Mechanisms. - Nazanin Takbiri; Virat Shejwalkar; Amir Houmansadr; Dennis L. Goeckel; Hossein Pishro-Nik (IEEE Wirel. Commun. Lett., 2020)

Membership Privacy for Machine Learning Models Through Knowledge Transfer. - Virat Shejwalkar; Amir Houmansadr (AAAI, 2021)

FINN: Fingerprinting Network Flows using Neural Networks. - Fatemeh Rezaei; Amir Houmansadr (ACSAC, 2021)

Robust Adversarial Attacks Against DNN-Based Wireless Communication Systems. - Alireza Bahramali; Milad Nasr; Amir Houmansadr; Dennis Goeckel; Don Towsley (CCS, 2021)

Manipulating the Byzantine: Optimizing Model Poisoning Attacks and Defenses for Federated Learning. - Virat Shejwalkar; Amir Houmansadr (NDSS, 2021)

Defeating DNN-Based Traffic Analysis Systems in Real-Time With Blind Adversarial Perturbations. - Milad Nasr; Alireza Bahramali; Amir Houmansadr (USENIX Security Symposium, 2021)

Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Federated Learning. - Virat Shejwalkar; Amir Houmansadr; Peter Kairouz; Daniel Ramage (CoRR, 2021)

FSL: Federated Supermask Learning. - Hamid Mozaffari; Virat Shejwalkar; Amir Houmansadr (CoRR, 2021)

Asymptotic Privacy Loss Due to Time Series Matching of Dependent Users. - Nazanin Takbiri; Minting Chen; Dennis L. Goeckel; Amir Houmansadr; Hossein Pishro-Nik (IEEE Commun. Lett., 2021)

Constrained Obfuscation to Thwart Pattern Matching Attacks. - Saeede Enayati; Dennis L. Goeckel; Amir Houmansadr; Hossein Pishro-Nik (ISIT, 2022)

Privacy-Preserving Path-Planning for UAVs. - Saeede Enayati; Dennis L. Goeckel; Amir Houmansadr; Hossein Pishro-Nik (ISNCC, 2022)

Security Analysis of SplitFed Learning. - Momin Ahmad Khan; Virat Shejwalkar; Amir Houmansadr; Fatima M. Anwar 001 (SenSys, 2022)

Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learning. - Virat Shejwalkar; Amir Houmansadr; Peter Kairouz; Daniel Ramage (SP, 2022)

Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture. - Xinyu Tang 003; Saeed Mahloujifar; Liwei Song; Virat Shejwalkar; Milad Nasr; Amir Houmansadr; Prateek Mittal (USENIX Security Symposium, 2022)

E2FL: Equal and Equitable Federated Learning. - Hamid Mozaffari; Amir Houmansadr (CoRR, 2022)

Emerging topics in defending networked systems. - Steffen Wendzel; Wojciech Mazurczyk; Luca Caviglione; Amir Houmansadr (Future Gener. Comput. Syst., 2022)

Superstring-Based Sequence Obfuscation to Thwart Pattern Matching Attacks. - Bo Guan; Nazanin Takbiri; Dennis Goeckel; Amir Houmansadr; Hossein Pishro-Nik (IEEE Internet Things J., 2022)

Machine Learning with Differentially Private Labels: Mechanisms and Frameworks. - Xinyu Tang 003; Milad Nasr; Saeed Mahloujifar; Virat Shejwalkar; Liwei Song; Amir Houmansadr; Prateek Mittal (Proc. Priv. Enhancing Technol., 2022)

Investigating Traffic Analysis Attacks on Apple iCloud Private Relay. - Ali Zohaib; Jade Sheffey; Amir Houmansadr (AsiaCCS, 2023)

Realistic Website Fingerprinting By Augmenting Network Traces. - Alireza Bahramali; Ardavan Bozorgi; Amir Houmansadr (CCS, 2023)

Stealing the Decoding Algorithms of Language Models. - Ali Naseh; Kalpesh Krishna; Mohit Iyyer; Amir Houmansadr (CCS, 2023)

The Perils of Learning From Unlabeled Data: Backdoor Attacks on Semi-supervised Learning. - Virat Shejwalkar; Lingjuan Lyu; Amir Houmansadr (ICCV, 2023)

Effectively Using Public Data in Privacy Preserving Machine Learning. - Milad Nasr; Saeed Mahloujifar; Xinyu Tang 003; Prateek Mittal; Amir Houmansadr (ICML, 2023)

On the Pitfalls of Security Evaluation of Robust Federated Learning. - Momin Ahmad Khan; Virat Shejwalkar; Amir Houmansadr; Fatima M. Anwar 001 (SP (Workshops), 2023)

Every Vote Counts: Ranking-Based Training of Federated Learning to Resist Poisoning Attacks. - Hamid Mozaffari; Virat Shejwalkar; Amir Houmansadr (USENIX Security Symposium, 2023)

How the Great Firewall of China Detects and Blocks Fully Encrypted Traffic. - Mingshi Wu; Jackson Sippe; Danesh Sivakumar; Jack Burg; Peter Anderson; Xiaokang Wang; Kevin Bock 001; Amir Houmansadr; Dave Levin; Eric Wustrow (USENIX Security Symposium, 2023)

On the Risks of Stealing the Decoding Algorithms of Language Models. - Ali Naseh; Kalpesh Krishna; Mohit Iyyer; Amir Houmansadr (CoRR, 2023)

Realistic Website Fingerprinting By Augmenting Network Trace. - Alireza Bahramali; Ardavan Bozorgi; Amir Houmansadr (CoRR, 2023)

RAIFLE: Reconstruction Attacks on Interaction-based Federated Learning with Active Data Manipulation. - Dzung Pham 002; Shreyas Kulkarni; Amir Houmansadr (CoRR, 2023)

Memory Triggers: Unveiling Memorization in Text-To-Image Generative Models through Word-Level Duplication. - Ali Naseh; Jaechul Roh; Amir Houmansadr (CoRR, 2023)

Understanding (Un)Intended Memorization in Text-to-Image Generative Models. - Ali Naseh; Jaechul Roh; Amir Houmansadr (CoRR, 2023)

Location Privacy Protection for UAVs in Package Delivery and IoT Data Collection. - Saeede Enayati; Dennis Goeckel; Amir Houmansadr; Hossein Pishro-Nik (IEEE Internet Things J., 2023)

I Still Know What You Did Last Summer: Inferring Sensitive User Activities on Messaging Applications Through Traffic Analysis. - Ardavan Bozorgi; Alireza Bahramali; Fatemeh Rezaei; Amirhossein Ghafari; Amir Houmansadr; Ramin Soltani; Dennis Goeckel; Don Towsley (IEEE Trans. Dependable Secur. Comput., 2023)

Optimal Obfuscation to Protect Client Privacy in Federated Learning. - Bo Guan; Shuangqing Wei; Amir Houmansadr; Hossein Pishro-Nik; Dennis Goeckel (CISS, 2024)

PostMark: A Robust Blackbox Watermark for Large Language Models. - Yapei Chang; Kalpesh Krishna; Amir Houmansadr; John Wieting; Mohit Iyyer (EMNLP, 2024)

Fake or Compromised? Making Sense of Malicious Clients in Federated Learning. - Hamid Mozaffari; Sunav Choudhary; Amir Houmansadr (ESORICS (1), 2024)

OSLO: One-Shot Label-Only Membership Inference Attacks. - Yuefeng Peng; Jaechul Roh; Subhransu Maji; Amir Houmansadr (NeurIPS, 2024)

Fingerprinting Obfuscated Proxy Traffic with Encapsulated TLS Handshakes. - Diwen Xue; Michalis Kallitsis 001; Amir Houmansadr; Roya Ensafi (USENIX Security Symposium, 2024)

The Effect of Alter Ego Accounts on A/B Tests in Social Networks. - Katherine Avery; Amir Houmansadr; David D. Jensen (WWW (Companion Volume), 2024)

SoK: Challenges and Opportunities in Federated Unlearning. - Hyejun Jeong; Shiqing Ma; Amir Houmansadr (CoRR, 2024)

Iteratively Prompting Multimodal LLMs to Reproduce Natural and AI-Generated Images. - Ali Naseh; Katherine Thai; Mohit Iyyer; Amir Houmansadr (CoRR, 2024)

MeanSparse: Post-Training Robustness Enhancement Through Mean-Centered Feature Sparsification. - Sajjad Amini; Mohammadreza Teymoorianfard; Shiqing Ma; Amir Houmansadr (CoRR, 2024)

Injecting Bias in Text-To-Image Models via Composite-Trigger Backdoors. - Ali Naseh; Jaechul Roh; Eugene Bagdasaryan; Amir Houmansadr (CoRR, 2024)

ProxyGPT: Enabling Anonymous Queries in AI Chatbots with (Un)Trustworthy Browser Proxies. - Dzung Pham 002; Jade Sheffey; Chau Minh Pham; Amir Houmansadr (CoRR, 2024)

Bias Similarity Across Large Language Models. - Hyejun Jeong; Shiqing Ma; Amir Houmansadr (CoRR, 2024)

Data Extraction Attacks in Retrieval-Augmented Generation via Backdoors. - Yuefeng Peng; Junda Wang; Hong Yu 001; Amir Houmansadr (CoRR, 2024)

ULTra: Unveiling Latent Token Interpretability in Transformer Based Understanding. - Hesam Hosseini; Ghazal Hosseini Mighan; Amirabbas Afzali; Sajjad Amini; Amir Houmansadr (CoRR, 2024)

CensorLab: A Testbed for Censorship Experimentation. - Jade Sheffey; Amir Houmansadr (CoRR, 2024)

Improving Private Random Forest Prediction Using Matrix Representation. - Arisa Tajima; Joie Wu; Amir Houmansadr (AAAI, 2025)

RAIFLE: Reconstruction Attacks on Interaction-based Federated Learning with Adversarial Data Manipulation. - Dzung Pham 002; Shreyas Kulkarni; Amir Houmansadr (NDSS, 2025)

Wallbleed: A Memory Disclosure Vulnerability in the Great Firewall of China. - Shencha Fan; Jackson Sippe; Sakamoto San; Jade Sheffey; David Fifield; Amir Houmansadr; Elson Wedwards; Eric Wustrow (NDSS, 2025)

Diffence: Fencing Membership Privacy With Diffusion Models. - Yuefeng Peng; Ali Naseh; Amir Houmansadr (NDSS, 2025)

A Wall Behind A Wall: Emerging Regional Censorship in China. - Mingshi Wu; Ali Zohaib; Zakir Durumeric; Amir Houmansadr; Eric Wustrow (SP, 2025)

Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation. - Ali Naseh; Yuefeng Peng; Anshuman Suri; Harsh Chaudhari; Alina Oprea; Amir Houmansadr (CoRR, 2025)

OverThink: Slowdown Attacks on Reasoning LLMs. - Abhinav Kumar; Jaechul Roh; Ali Naseh; Marzena Karpinska; Mohit Iyyer; Amir Houmansadr; Eugene Bagdasarian (CoRR, 2025)

Decoding FL Defenses: Systemization, Pitfalls, and Remedies. - Momin Ahmad Khan; Virat Shejwalkar; Yasra Chandio; Amir Houmansadr; Fatima Muhammad Anwar 001 (CoRR, 2025)

Multilingual and Multi-Accent Jailbreaking of Audio LLMs. - Jaechul Roh; Virat Shejwalkar; Amir Houmansadr (CoRR, 2025)

VIDSTAMP: A Temporally-Aware Watermark for Ownership and Integrity in Video Diffusion Models. - Mohammadreza Teymoorianfard; Shiqing Ma; Amir Houmansadr (CoRR, 2025)

R1dacted: Investigating Local Censorship in DeepSeek's R1 Language Model. - Ali Naseh; Harsh Chaudhari; Jaechul Roh; Mingshi Wu; Alina Oprea; Amir Houmansadr (CoRR, 2025)

Can Large Language Models Really Recognize Your Name? - Dzung Pham 002; Peter Kairouz; Niloofar Mireshghallah; Eugene Bagdasarian; Chau Minh Pham; Amir Houmansadr (CoRR, 2025)

Exploiting Leaderboards for Large-Scale Distribution of Malicious Models. - Anshuman Suri; Harsh Chaudhari; Yuefeng Peng; Ali Naseh; Amir Houmansadr; Alina Oprea (CoRR, 2025)

Bob's Confetti: Phonetic Memorization Attacks in Music and Video Generation. - Jaechul Roh; Zachary Novack; Yuefeng Peng; Niloofar Mireshghallah; Taylor Berg-Kirkpatrick; Amir Houmansadr (CoRR, 2025)