Gotta Catch'Em All: Using Honeypots to Catch Adversarial Attacks on Neural Networks. - Shawn Shan; Emily Wenger; Bolun Wang; Bo Li 026; Haitao Zheng 001; Ben Y. Zhao (CCS, 2020)

Fawkes: Protecting Privacy against Unauthorized Deep Learning Models. - Shawn Shan; Emily Wenger; Jiayun Zhang; Huiying Li 001; Haitao Zheng 001; Ben Y. Zhao (USENIX Security Symposium, 2020)

Fawkes: Protecting Personal Privacy against Unauthorized Deep Learning Models. - Shawn Shan; Emily Wenger; Jiayun Zhang; Huiying Li 001; Haitao Zheng 001; Ben Y. Zhao (CoRR, 2020)

Blacklight: Defending Black-Box Adversarial Attacks on Deep Neural Networks. - Huiying Li 001; Shawn Shan; Emily Wenger; Jiayun Zhang; Haitao Zheng 001; Ben Y. Zhao (CoRR, 2020)

Backdoor Attacks on Facial Recognition in the Physical World. - Emily Wenger; Josephine Passananti; Yuanshun Yao; Haitao Zheng 001; Ben Y. Zhao (CoRR, 2020)

"Hello, It's Me": Deep Learning-based Speech Synthesis Attacks in the Real World. - Emily Wenger; Max Bronckers; Christian Cianfarani; Jenna Cryan; Angela Sha; Haitao Zheng 001; Ben Y. Zhao (CCS, 2021)

Backdoor Attacks Against Deep Learning Systems in the Physical World. - Emily Wenger; Josephine Passananti; Arjun Nitin Bhagoji; Yuanshun Yao; Haitao Zheng 001; Ben Y. Zhao (CVPR, 2021)

Post-breach Recovery: Protection against White-box Adversarial Examples for Leaked DNN Models. - Shawn Shan; Wenxin Ding; Emily Wenger; Haitao Zheng 001; Ben Y. Zhao (CCS, 2022)

Finding Naturally Occurring Physical Backdoors in Image Datasets. - Emily Wenger; Roma Bhattacharjee; Arjun Nitin Bhagoji; Josephine Passananti; Emilio Andere; Heather Zheng; Ben Y. Zhao (NeurIPS, 2022)

Blacklight: Scalable Defense for Neural Networks against Query-Based Black-Box Attacks. - Huiying Li 001; Shawn Shan; Emily Wenger; Jiayun Zhang; Haitao Zheng 001; Ben Y. Zhao (USENIX Security Symposium, 2022)

Assessing Privacy Risks from Feature Vector Reconstruction Attacks. - Emily Wenger; Francesca Falzon; Josephine Passananti; Haitao Zheng 001; Ben Y. Zhao (CoRR, 2022)

Natural Backdoor Datasets. - Emily Wenger; Roma Bhattacharjee; Arjun Nitin Bhagoji; Josephine Passananti; Emilio Andere; Haitao Zheng 001; Ben Y. Zhao (CoRR, 2022)

SALSA: Attacking Lattice Cryptography with Transformers. - Emily Wenger; Mingjie Chen; François Charton; Kristin E. Lauter (IACR Cryptol. ePrint Arch., 2022)

SalsaPicante: A Machine Learning Attack on LWE with Binary Secrets. - Cathy Yuanchen Li; Jana Sotáková; Emily Wenger; Mohamed Malhou; Evrard Garcelon; François Charton; Kristin E. Lauter (CCS, 2023)

SALSA VERDE: a machine learning attack on LWE with sparse small secrets. - Cathy Yuanchen Li; Emily Wenger; Zeyuan Allen-Zhu; François Charton; Kristin E. Lauter (NeurIPS, 2023)

SoK: Anti-Facial Recognition Technology. - Emily Wenger; Shawn Shan; Haitao Zheng 001; Ben Y. Zhao (SP, 2023)

Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models. - Shawn Shan; Jenna Cryan; Emily Wenger; Haitao Zheng 001; Rana Hanocka; Ben Y. Zhao (USENIX Security Symposium, 2023)

SALSA VERDE: a machine learning attack on Learning with Errors with sparse small secrets. - Cathy Yuanchen Li; Jana Sotáková; Emily Wenger; Zeyuan Allen-Zhu; François Charton; Kristin E. Lauter (IACR Cryptol. ePrint Arch., 2023)

SALSA PICANTE: a machine learning attack on LWE with binary secrets. - Cathy Yuanchen Li; Jana Sotáková; Emily Wenger; Mohamed Malhou; Evrard Garcelon; François Charton; Kristin E. Lauter (IACR Cryptol. ePrint Arch., 2023)

Teaching Transformers Modular Arithmetic at Scale. - Eshika Saxena; Alberto Alfarano; Emily Wenger; Kristin E. Lauter (CoRR, 2024)

The cool and the cruel: separating hard parts of LWE secrets. - Niklas Nolte; Mohamed Malhou; Emily Wenger; Samuel Stevens 001; Cathy Yuanchen Li; François Charton; Kristin E. Lauter (IACR Cryptol. ePrint Arch., 2024)

SALSA FRESCA: Angular Embeddings and Pre-Training for ML Attacks on Learning With Errors. - Samuel Stevens 001; Emily Wenger; Cathy Yuanchen Li; Niklas Nolte; Eshika Saxena; François Charton; Kristin E. Lauter (IACR Cryptol. ePrint Arch., 2024)

Benchmarking Attacks on Learning with Errors. - Emily Wenger; Eshika Saxena; Mohamed Malhou; Ellie Thieu; Kristin E. Lauter (IACR Cryptol. ePrint Arch., 2024)

Data Isotopes for Data Provenance in DNNs. - Emily Wenger; Xiuyu Li; Ben Y. Zhao; Vitaly Shmatikov (Proc. Priv. Enhancing Technol., 2024)

We're Different, We're the Same: Creative Homogeneity Across LLMs. - Emily Wenger; Yoed N. Kenett (CoRR, 2025)

Exploring Causes of Representational Similarity in Machine Learning Models. - Zeyu Michael Li; Hung Anh Vu; Damilola Awofisayo; Emily Wenger (CoRR, 2025)

What happens when generative AI models train recursively on each others' generated outputs? - Hung Ahn Vu; Galen Reeves; Emily Wenger (CoRR, 2025)

Scrapers selectively respect robots.txt directives: evidence from a large-scale empirical study. - Taein Kim; Karstan Bock; Claire Luo; Amanda Liswood; Emily Wenger (CoRR, 2025)