Operationalizing Contextual Integrity in Privacy-Conscious Assistants. - Sahra Ghalebikesabi; Eugene Bagdasaryan; Ren Yi; Itay Yona; Ilia Shumailov; Aneesh Pappu; Chongyang Shi 003; Laura Weidinger; Robert Stanforth; Leonard Berrada; Pushmeet Kohli; Po-Sen Huang; et al. (CoRR, 2024)

Privacy Awareness for Information-Sharing Assistants: A Case-study on Form-filling with Contextual Integrity. - Sahra Ghalebikesabi; Eugene Bagdasarian; Ren Yi; Itay Yona; Ilia Shumailov; Aneesh Pappu; Chongyang Shi 003; Laura Weidinger; Robert Stanforth; Leonard Berrada; Pushmeet Kohli; Po-Sen Huang; et al. (Trans. Mach. Learn. Res., 2025)

Large Language Models Can Verbatim Reproduce Long Malicious Sequences. - Sharon Lin; Krishnamurthy Dvijotham; Jamie Hayes; Chongyang Shi 003; Ilia Shumailov; Shuang Song 001 (CoRR, 2025)

Defeating Prompt Injections by Design. - Edoardo Debenedetti; Ilia Shumailov; Tianqi Fan; Jamie Hayes; Nicholas Carlini; Daniel Fabian; Christoph Kern; Chongyang Shi 003; Andreas Terzis; Florian Tramèr (CoRR, 2025)

Lessons from Defending Gemini Against Indirect Prompt Injections. - Chongyang Shi 003; Sharon Lin; Shuang Song 001; Jamie Hayes; Ilia Shumailov; Itay Yona; Juliette Pluto; Aneesh Pappu; Christopher A. Choquette-Choo; Milad Nasr; Chawin Sitawarin; Gena Gibson; et al. (CoRR, 2025)