LCLint: A Tool for Using Specifications to Check Code. - David E. Evans 001; John V. Guttag; James J. Horning; Yang Meng Tan (SIGSOFT FSE, 1994)

Static Detection of Dynamic Memory Errors. - David E. Evans 001 (PLDI, 1996)

Computer assisted programming for systolic systems. - David Evans 001; Salim Ghanemi (Bull. dInformatique Approfondie et Appl., 1996)

Flexible Policy-Directed Code Safety. - David E. Evans 001; Andrew Twyman (S&P, 1999)

Dynamic term selection in learning a query from examples. - Emilia Stoica; David Evans 001 (RIAO, 2000)

Policy-directed code safety. - David E. Evans 001 (2000)

Behavior Combination and Swarm Programming. - Keen Browne; Jon McCune; Adam Trost; David Evans 001; David C. Brogan (RoboCup, 2001)

Statically Detecting Likely Buffer Overflow Vulnerabilities. - David Larochelle; David Evans 001 (USENIX Security Symposium, 2001)

A biologically inspired programming model for self-healing systems. - Selvin George; David Evans 001; Lance Davidson (WOSS, 2002)

Improving Security Using Extensible Lightweight Static Analysis. - David Evans 001; David Larochelle (IEEE Softw., 2002)

A biological programming model for self-healing. - Selvin George; David Evans 001; Steven Marchette (SSRS@CCS, 2003)

Secure Aggregation for Wireless Network. - Lingxuan Hu; David Evans 001 (SAINT Workshops, 2003)

.NET Security: Lessons Learned and Missed from Java. - Nathanael Paul; David Evans 001 (ACSAC, 2004)

EnviroTrack: Towards an Environmental Computing Paradigm for Distributed Sensor Networks. - Tarek F. Abdelzaher; Brian M. Blum; Qing Cao 001; Yong Chen; David Evans 001; Jemin George; Selvin George; Lin Gu 001; Tian He 001; Sudha Krishnamurthy; Liqian Luo; Sang Hyuk Son; et al. (ICDCS, 2004)

Second International Workshop on Dynamic Analysis (WODA 2004). - David Evans 001; Raimondas Lencevicius (ICSE, 2004)

Automatically Inferring Temporal Properties for Program Evolution . - Jinlin Yang; David Evans 001 (ISSRE, 2004)

Localization for mobile sensor networks. - Lingxuan Hu; David Evans 001 (MobiCom, 2004)

Using Directional Antennas to Prevent Wormhole Attacks. - Lingxuan Hu; David Evans 001 (NDSS, 2004)

Dynamically inferring temporal properties. - Jinlin Yang; David Evans 001 (PASTE, 2004)

What Biology Can (and Can't) Teach Us About Security. - David Evans 001 (USENIX Security Symposium, 2004)

Election Security: Perception and Reality. - David Evans 001; Nathanael Paul (IEEE Secur. Priv., 2004)

Pancakes, puzzles, and polynomials: cracking the Cracker Barrel. - Christopher Frost 001; Michael Peck; David Evans 001 (SIGACT News, 2004)

ICSE 2004 workshop summary second international workshop on dynamic analysis (WODA 2004). - David Evans 001; Raimondas Lencevicius (ACM SIGSOFT Softw. Eng. Notes, 2004)

Automatically Hardening Web Applications Using Precise Tainting. - Anh Nguyen-Tuong; Salvatore Guarnieri; Doug Greene; Jeff Shirley; David Evans 001 (SEC, 2005)

Where's the FEEB? The Effectiveness of Instruction Set Randomization. - Ana Nora Sovarel; David Evans 001; Nathanael Paul (USENIX Security Symposium, 2005)

Toasters, Seat Belts, and Inferring Program Properties. - David Evans 001 (VSTTE, 2005)

Quantifying Information Leakage in Tree-Based Hash Protocols (Short Paper). - Karsten Nohl; David Evans 001 (ICICS, 2006)

Inculcating invariants in introductory courses. - David Evans 001; Michael Peck (ICSE, 2006)

Perracotta: mining temporal API rules from imperfect traces. - Jinlin Yang; David Evans 001; Deepali Bhardwaj; Thirumalesh Bhat; Manuvir Das (ICSE, 2006)

N-Variant Systems: A Secretless Framework for Security through Diversity. - Benjamin Cox; David Evans 001 (USENIX Security Symposium, 2006)

Secure and practical defense against code-injection attacks using software dynamic translation. - Wei Hu; Jason Hiser; Daniel W. Williams; Adrian Filipi; Jack W. Davidson; David Evans 001; John C. Knight; Anh Nguyen-Tuong; Jonathan C. Rowanhill (VEE, 2006)

Comparing Java and .NET security: Lessons learned and missed. - Nathanael Paul; David Evans 001 (Comput. Secur., 2006)

Security through redundant data diversity. - Anh Nguyen-Tuong; David Evans 001; John C. Knight; Benjamin Cox; Jack W. Davidson (DSN, 2008)

The user is not the enemy: fighting malware by tracking user intentions. - Jeff Shirley; David Evans 001 (NSPW, 2008)

Hiding in Groups: On the Expressiveness of Privacy Distributions. - Karsten Nohl; David Evans 001 (SEC, 2008)

Talking to strangers without taking their candy: isolating proxied content. - Adrienne Felt; Pieter Hooimeijer; David Evans 001; Westley Weimer (SNS, 2008)

Reverse-Engineering a Cryptographic RFID Tag. - Karsten Nohl; David Evans 001; Starbug; Henryk Plötz (USENIX Security Symposium, 2008)

Privacy through Noise: A Design Space for Private Identification. - Karsten Nohl; David Evans 001 (ACSAC, 2009)

Automated black-box detection of side-channel vulnerabilities in web applications. - Peter Chapman; David Evans 001 (CCS, 2011)

Protecting Private Web Content from Embedded Scripts. - Yuchen Zhou; David Evans 001 (ESORICS, 2011)

Private Editing Using Untrusted Cloud Services. - Yan Huang 001; David Evans 001 (ICDCS Workshops, 2011)

Efficient Secure Computation with Garbled Circuits. - Yan Huang 001; Chih-Hao Shen; David Evans 001; Jonathan Katz; Abhi Shelat (ICISS, 2011)

Efficient Privacy-Preserving Biometric Identification. - Yan Huang 001; Lior Malka; David Evans 001; Jonathan Katz (NDSS, 2011)

Auditing Information Leakage for Distance Metrics. - Yikan Chen; David Evans 001 (SocialCom/PASSAT, 2011)

Privacy-Preserving Applications on Smartphones. - Yan Huang 001; Peter Chapman; David Evans 001 (HotSec, 2011)

Faster Secure Two-Party Computation Using Garbled Circuits. - Yan Huang 001; David Evans 001; Jonathan Katz; Lior Malka (USENIX Security Symposium, 2011)

GuardRails: A Data-Centric Web Application Security Framework. - Jonathan Burket; Patrick Mutchler; Michael Weaver; Muzzammil Zaveri; David Evans 001 (WebApps, 2011)

Guest Editors' Introduction: The Science of Security. - David Evans 001; Salvatore J. Stolfo (IEEE Secur. Priv., 2011)

Measuring Security. - Salvatore J. Stolfo; Steven M. Bellovin; David Evans 001 (IEEE Secur. Priv., 2011)

Effectiveness of Moving Target Defenses. - David Evans 001; Anh Nguyen-Tuong; John C. Knight (Moving Target Defense, 2011)

Private Set Intersection: Are Garbled Circuits Better than Custom Protocols? - Yan Huang 001; David Evans 001; Jonathan Katz (NDSS, 2012)

Quid-Pro-Quo-tocols: Strengthening Semi-honest Protocols with Dual Execution. - Yan Huang 001; Jonathan Katz; David Evans 001 (IEEE Symposium on Security and Privacy, 2012)

Circuit Structures for Improving Efficiency of Security and Privacy Tools. - Samee Zahur; David Evans 001 (IEEE Symposium on Security and Privacy, 2013)

Explicating SDKs: Uncovering Assumptions Underlying Secure Authentication and Authorization. - Rui Wang 010; Yuchen Zhou; Shuo Chen 001; Shaz Qadeer; David Evans 001; Yuri Gurevich (USENIX Security Symposium, 2013)

Efficient Secure Two-Party Computation Using Symmetric Cut-and-Choose. - Yan Huang 001; Jonathan Katz; David Evans 001 (IACR Cryptol. ePrint Arch., 2013)

SSOScan: Automated Testing of Web Applications for Single Sign-On Vulnerabilities. - Yuchen Zhou; David Evans 001 (USENIX Security Symposium, 2014)

Two Halves Make a Whole: Reducing Data Transfer in Garbled Circuits using Half Gates. - Samee Zahur; Mike Rosulek; David Evans 001 (IACR Cryptol. ePrint Arch., 2014)

Understanding and Monitoring Embedded Web Scripts. - Yuchen Zhou; David Evans 001 (IEEE Symposium on Security and Privacy, 2015)

Obliv-C: A Language for Extensible Data-Oblivious Computation. - Samee Zahur; David Evans 001 (IACR Cryptol. ePrint Arch., 2015)

Automatically Evading Classifiers: A Case Study on PDF Malware Classifiers. - Weilin Xu; Yanjun Qi; David Evans 001 (NDSS, 2016)

Revisiting Square-Root ORAM: Efficient Random Access in Multi-party Computation. - Samee Zahur; Xiao Wang 012; Mariana Raykova 001; Adrià Gascón; Jack Doerner; David Evans 001; Jonathan Katz (IEEE Symposium on Security and Privacy, 2016)

Secure Stable Matching at Scale. - Jack Doerner; David Evans 001; Abhi Shelat (IACR Cryptol. ePrint Arch., 2016)

Secure Linear Regression on Vertically Partitioned Datasets. - Adrià Gascón; Phillipp Schoppmann; Borja Balle; Mariana Raykova 001; Jack Doerner; Samee Zahur; David Evans 001 (IACR Cryptol. ePrint Arch., 2016)

Decentralized Certificate Authorities. - Bargav Jayaraman; Hannah Li; David Evans 001 (CoRR, 2017)

Horcrux: A Password Manager for Paranoids. - Hannah Li; David Evans 001 (CoRR, 2017)

Feature Squeezing Mitigates and Detects Carlini/Wagner Adversarial Examples. - Weilin Xu; David Evans 001; Yanjun Qi (CoRR, 2017)

Query-limited Black-box Attacks to Classifiers. - Fnu Suya; Yuan Tian 001; David Evans 001; Paolo Papotti (CoRR, 2017)

Privacy-Preserving Distributed Linear Regression on High-Dimensional Data. - Adrià Gascón; Phillipp Schoppmann; Borja Balle; Mariana Raykova 001; Jack Doerner; Samee Zahur; David Evans 001 (Proc. Priv. Enhancing Technol., 2017)

Fidelius Charm: Isolating Unsafe Rust Code. - Hussain M. J. Almohri; David Evans 001 (CODASPY, 2018)

DSML 2018 Introduction. - Homa Alemzadeh; Karthik Pattabiraman; David E. Evans 001 (DSN Workshops, 2018)

Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks. - Weilin Xu; David Evans 001; Yanjun Qi (NDSS, 2018)

Distributed Learning without Distress: Privacy-Preserving Empirical Risk Minimization. - Bargav Jayaraman; Lingxiao Wang 001; David Evans 001; Quanquan Gu (NeurIPS, 2018)

Learning to Evade Static PE Machine Learning Malware Models via Reinforcement Learning. - Hyrum S. Anderson; Anant Kharkar; Bobby Filar; David Evans 001; Phil Roth 002 (CoRR, 2018)

A Pragmatic Introduction to Secure Multi-Party Computation. - David Evans 001; Vladimir Kolesnikov; Mike Rosulek (Found. Trends Priv. Secur., 2018)

Optimizing Trees for Static Searchable Encryption. - Mohammad Etemad; Mohammad Mahmoody; David Evans 001 (IACR Cryptol. ePrint Arch., 2018)

Efficient Dynamic Searchable Encryption with Forward Privacy. - Mohammad Etemad; Alptekin Küpçü; Charalampos Papamanthou; David Evans 001 (Proc. Priv. Enhancing Technol., 2018)

Misery Digraphs: Delaying Intrusion Attacks in Obscure Clouds. - Hussain M. J. Almohri; Layne T. Watson; David Evans 001 (IEEE Trans. Inf. Forensics Secur., 2018)

Cost-Sensitive Robustness against Adversarial Examples. - Xiao Zhang 016; David Evans 001 (ICLR (Poster), 2019)

Context-aware Monitoring in Robotic Surgery. - Mohammad Samin Yasar; David Evans 001; Homa Alemzadeh (ISMR, 2019)

Empirically Measuring Concentration: Fundamental Limits on Intrinsic Robustness. - Saeed Mahloujifar; Xiao Zhang 016; Mohammad Mahmoody; David Evans 001 (NeurIPS, 2019)

Evaluating Differentially Private Machine Learning in Practice. - Bargav Jayaraman; David Evans 001 (USENIX Security Symposium, 2019)

When Relaxations Go Bad: "Differentially-Private" Machine Learning. - Bargav Jayaraman; David Evans 001 (CoRR, 2019)

Efficient Privacy-Preserving Nonconvex Optimization. - Lingxiao Wang 001; Bargav Jayaraman; David Evans 001; Quanquan Gu (CoRR, 2019)

Advances and Open Problems in Federated Learning. - Peter Kairouz; H. Brendan McMahan; Brendan Avent; Aurélien Bellet; Mehdi Bennis; Arjun Nitin Bhagoji; Kallista A. Bonawitz; Zachary Charles; Graham Cormode; Rachel Cummings; Rafael G. L. D'Oliveira; Salim El Rouayheb; et al. (CoRR, 2019)

Pointwise Paraphrase Appraisal is Potentially Problematic. - Hannah Chen 001; Yangfeng Ji; David Evans 001 (ACL (student), 2020)

Understanding the Intrinsic Robustness of Image Distributions using Conditional Generative Models. - Xiao Zhang 016; Jinghui Chen; Quanquan Gu; David Evans 001 (AISTATS, 2020)

Third International Workshop on Dependable and Secure Machine Learning - DSML 2020. - Homa Alemzadeh; Rakesh Bobba; Varun Chandrasekaran; David E. Evans 001; Nicolas Papernot; Karthik Pattabiraman; Florian Tramèr (DSN Workshops, 2020)

Finding Friends and Flipping Frenemies: Automatic Paraphrase Dataset Augmentation Using Graph Theory. - Hannah Chen 001; Yangfeng Ji; David E. Evans 001 (EMNLP (Findings), 2020)

Learning Adversarially Robust Representations via Worst-Case Mutual Information Maximization. - Sicheng Zhu; Xiao Zhang 016; David Evans 001 (ICML, 2020)

Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries. - Fnu Suya; Jianfeng Chi; David Evans 001; Yuan Tian 001 (USENIX Security Symposium, 2020)

One Neuron to Fool Them All. - Anshuman Suri; David Evans 001 (CoRR, 2020)

Revisiting Membership Inference Under Realistic Assumptions. - Bargav Jayaraman; Lingxiao Wang 001; David Evans 001; Quanquan Gu (CoRR, 2020)

Model-Targeted Poisoning Attacks: Provable Convergence and Certified Bounds. - Fnu Suya; Saeed Mahloujifar; David Evans 001; Yuan Tian 001 (CoRR, 2020)

Predictability of IP Address Allocations for Cloud Computing Platforms. - Hussain M. J. Almohri; Layne T. Watson; David Evans 001 (IEEE Trans. Inf. Forensics Secur., 2020)

An Attack-Resilient Architecture for the Internet of Things. - Hussain M. J. Almohri; Layne T. Watson; David Evans 001 (IEEE Trans. Inf. Forensics Secur., 2020)

When Models Learn Too Much. - David Evans 001 (CODASPY, 2021)

Fourth International Workshop on Dependable and Secure Machine Learning - DSML 2021. - Hui Xu 009; Guanpeng Li; Homa Alemzadeh; Rakesh Bobba; Varun Chandrasekaran; David E. Evans 001; Nicolas Papernot; Karthik Pattabiraman; Florian Tramèr (DSN Workshops, 2021)

Improved Estimation of Concentration Under ℓp-Norm Distance Metrics Using Half Spaces. - Jack Prescott; Xiao Zhang 016; David E. Evans 001 (ICLR, 2021)

Model-Targeted Poisoning Attacks with Provable Convergence. - Fnu Suya; Saeed Mahloujifar; Anshuman Suri; David Evans 001; Yuan Tian 001 (ICML, 2021)

Improved Estimation of Concentration Under $ ell_p$-Norm Distance Metrics Using Half Spaces. - Jack Prescott; Xiao Zhang 016; David Evans 001 (CoRR, 2021)

Formalizing Distribution Inference Risks. - Anshuman Suri; David Evans 001 (CoRR, 2021)

Incorporating Label Uncertainty in Understanding Adversarial Robustness. - Xiao Zhang 016; David Evans 001 (CoRR, 2021)

Advances and Open Problems in Federated Learning. - Peter Kairouz; H. Brendan McMahan; Brendan Avent; Aurélien Bellet; Mehdi Bennis; Arjun Nitin Bhagoji; Kallista A. Bonawitz; Zachary Charles; Graham Cormode; Rachel Cummings; Rafael G. L. D'Oliveira; Hubert Eichner; et al. (Found. Trends Mach. Learn., 2021)

Revisiting Membership Inference Under Realistic Assumptions. - Bargav Jayaraman; Lingxiao Wang 001; Katherine Knipmeyer; Quanquan Gu; David Evans 001 (Proc. Priv. Enhancing Technol., 2021)

Are Attribute Inference Attacks Just Imputation? - Bargav Jayaraman; David Evans 001 (CCS, 2022)

Balanced Adversarial Training: Balancing Tradeoffs between Fickleness and Obstinacy in NLP Models. - Hannah Chen 001; Yangfeng Ji; David E. Evans 001 (EMNLP, 2022)

An Empirical Analysis of Memorization in Fine-tuned Autoregressive Language Models. - Fatemehsadat Mireshghallah; Archit Uniyal; Tianhao Wang 001; David E. Evans 001; Taylor Berg-Kirkpatrick (EMNLP, 2022)

Understanding Intrinsic Robustness Using Label Uncertainty. - Xiao Zhang 016; David E. Evans 001 (ICLR, 2022)

Comfortable Cohorts and Tractable Teams: Making Large Computing Theory Courses Feel Small. - Nathan Brunelle; David Evans 001 (SIGCSE (1), 2022)

Memorization in NLP Fine-tuning Methods. - Fatemehsadat Mireshghallah; Archit Uniyal; Tianhao Wang 001; David Evans 001; Taylor Berg-Kirkpatrick (CoRR, 2022)

Formalizing and Estimating Distribution Inference Risks. - Anshuman Suri; David Evans 001 (Proc. Priv. Enhancing Technol., 2022)

Dynamic System Diversification for Securing Cloud-based IoT Subnetworks. - Hussain M. J. Almohri; Layne T. Watson; David Evans 001; Stephen C. Billups (ACM Trans. Auton. Adapt. Syst., 2022)

Stealthy Backdoors as Compression Artifacts. - Yulong Tian; Fnu Suya; Fengyuan Xu; David Evans 001 (IEEE Trans. Inf. Forensics Secur., 2022)

Manipulating Transfer Learning for Property Inference. - Yulong Tian; Fnu Suya; Anshuman Suri; Fengyuan Xu; David Evans 001 (CVPR, 2023)

GlucoSynth: Generating Differentially-Private Synthetic Glucose Traces. - Josephine Lamp; Mark Derdzinski; Christopher Hannemann; Joost van der Linden; Lu Feng 001; Tianhao Wang 001; David E. Evans 001 (NeurIPS, 2023)

What Distributions are Robust to Indiscriminate Poisoning Attacks for Linear Learners? - Fnu Suya; Xiao Zhang 016; Yuan Tian 001; David Evans 001 (NeurIPS, 2023)

Dissecting Distribution Inference. - Anshuman Suri; Yifu Lu; Yanjin Chen; David Evans 001 (SaTML, 2023)

SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning. - Ahmed Salem 001; Giovanni Cherubin; David Evans 001; Boris Köpf; Andrew Paverd; Anshuman Suri; Shruti Tople; Santiago Zanella-Béguelin (SP, 2023)

Efficient Privacy-Preserving Stochastic Nonconvex Optimization. - Lingxiao Wang 001; Bargav Jayaraman; David Evans 001; Quanquan Gu (UAI, 2023)

Challenges towards the Next Frontier in Privacy. - Rachel Cummings; Damien Desfontaines; David Evans 001; Roxana Geambasu; Matthew Jagielski; Yangsibo Huang; Peter Kairouz; Gautam Kamath 001; Sewoong Oh; Olga Ohrimenko; Nicolas Papernot; Ryan Rogers 002; et al. (CoRR, 2023)

When Can Linear Learners be Robust to Indiscriminate Poisoning Attacks? - Fnu Suya; Xiao Zhang 016; Yuan Tian 001; David Evans 001 (CoRR, 2023)

SoK: Memorization in General-Purpose Large Language Models. - Valentin Hartmann; Anshuman Suri; Vincent Bindschaedler; David Evans 001; Shruti Tople; Robert West 001 (CoRR, 2023)

Understanding Variation in Subpopulation Susceptibility to Poisoning Attacks. - Evan Rose; Fnu Suya; David Evans 001 (CoRR, 2023)

Addressing Both Statistical and Causal Gender Fairness in NLP Models. - Hannah Chen 001; Yangfeng Ji; David Evans 001 (NAACL-HLT (Findings), 2024)

SoK: Pitfalls in Evaluating Black-Box Attacks. - Fnu Suya; Anshuman Suri; Tingwei Zhang; Jingtao Hong; Yuan Tian 001; David Evans 001 (SaTML, 2024)

TrojanPuzzle: Covertly Poisoning Code-Suggestion Models. - Hojjat Aghakhani; Wei Dai 007; Andre Manoel; Xavier Fernandes; Anant Kharkar; Christopher Kruegel; Giovanni Vigna; David Evans 001; Ben Zorn 001; Robert Sim (SP, 2024)

Combing for Credentials: Active Pattern Extraction from Smart Reply. - Bargav Jayaraman; Esha Ghosh; Melissa Chase; Sambuddha Roy; Wei Dai 007; David Evans 001 (SP, 2024)

Do Membership Inference Attacks Work on Large Language Models? - Michael Duan; Anshuman Suri; Niloofar Mireshghallah; Sewon Min; Weijia Shi; Luke Zettlemoyer; Yulia Tsvetkov; Yejin Choi 001; David Evans 001; Hannaneh Hajishirzi (CoRR, 2024)

DP-RuL: Differentially-Private Rule Learning for Clinical Decision Support Systems. - Josephine Lamp; Lu Feng 001; David Evans 001 (CoRR, 2024)

The Mismeasure of Man and Models: Evaluating Allocational Harms in Large Language Models. - Hannah Chen 001; Yangfeng Ji; David Evans 001 (CoRR, 2024)

Do Parameters Reveal More than Loss for Membership Inference? - Anshuman Suri; Xiao Zhang 016; David Evans 001 (Trans. Mach. Learn. Res., 2024)

Pitfalls in Evaluating Inference-time Methods for Improving LLM Reliability. - Michael M. Jerge; David Evans 001 (Trans. Mach. Learn. Res., 2025)

Sensing and Steering Stereotypes: Extracting and Applying Gender Representation Vectors in LLMs. - Hannah Cyberey; Yangfeng Ji; David Evans 001 (CoRR, 2025)

Steering the CensorShip: Uncovering Representation Vectors for LLM "Thought" Control. - Hannah Cyberey; David Evans 001 (CoRR, 2025)