Crypto-Oriented Neural Architecture Design. - Avital Shafran; Gil Segev 001; Shmuel Peleg; Yedid Hoshen (ICASSP, 2021)

Membership Inference Attacks are Easier on Difficult Problems. - Avital Shafran; Shmuel Peleg; Yedid Hoshen (ICCV, 2021)

Reconstruction-Based Membership Inference Attacks are Easier on Difficult Problems. - Avital Shafran; Shmuel Peleg; Yedid Hoshen (CoRR, 2021)

Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents. - Avital Shafran; Roei Schuster; Vitaly Shmatikov (CoRR, 2024)

Is ML-Based Cryptanalysis Inherently Limited? Simulating Cryptographic Adversaries via Gradient-Based Methods. - Avital Shafran; Eran Malach; Thomas Ristenpart; Gil Segev 001; Stefano Tessaro (IACR Cryptol. ePrint Arch., 2024)

Beyond Labeling Oracles - What does it mean to steal ML models? - Avital Shafran; Ilia Shumailov; Murat A. Erdogdu; Nicolas Papernot (Trans. Mach. Learn. Res., 2024)

Rerouting LLM Routers. - Avital Shafran; Roei Schuster; Thomas Ristenpart; Vitaly Shmatikov (CoRR, 2025)