Modularizing deep neural network-inspired recommendation algorithms. - Longqi Yang; Eugene Bagdasaryan; Hongyi Wen (RecSys, 2018)

OpenRec: A Modular Framework for Extensible and Adaptable Recommendation Algorithms. - Longqi Yang; Eugene Bagdasaryan; Joshua Gruenstein; Cheng-Kang Hsieh; Deborah Estrin (WSDM, 2018)

X-Containers: Breaking Down Barriers to Improve Performance and Isolation of Cloud-Native Containers. - Zhiming Shen; Zhen Sun; Gur-Eyal Sela; Eugene Bagdasaryan; Christina Delimitrou; Robbert van Renesse; Hakim Weatherspoon (ASPLOS, 2019)

Differential Privacy Has Disparate Impact on Model Accuracy. - Eugene Bagdasaryan; Omid Poursaeed; Vitaly Shmatikov (NeurIPS, 2019)

Ancile: Enhancing Privacy for Ubiquitous Computing with Use-Based Privacy. - Eugene Bagdasaryan; Griffin Berlstein; Jason Waterman; Eleanor Birrell; Nate Foster; Fred B. Schneider; Deborah Estrin (WPES@CCS, 2019)

Differential Privacy Has Disparate Impact on Model Accuracy. - Eugene Bagdasaryan; Vitaly Shmatikov (CoRR, 2019)

How To Backdoor Federated Learning. - Eugene Bagdasaryan; Andreas Veit; Yiqing Hua; Deborah Estrin; Vitaly Shmatikov (AISTATS, 2020)

Salvaging Federated Learning by Local Adaptation. - Tao Yu; Eugene Bagdasaryan; Vitaly Shmatikov (CoRR, 2020)

Decentralized Policy-Based Private Analytics. - Kleomenis Katevas; Eugene Bagdasaryan; Jason Waterman; Mohamad Mounir Safadieh; Hamed Haddadi; Deborah Estrin (CoRR, 2020)

Blind Backdoors in Deep Learning Models. - Eugene Bagdasaryan; Vitaly Shmatikov (USENIX Security Symposium, 2021)

Spinning Language Models for Propaganda-As-A-Service. - Eugene Bagdasaryan; Vitaly Shmatikov (CoRR, 2021)

Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures. - Eugene Bagdasaryan; Vitaly Shmatikov (SP, 2022)

Training a Tokenizer for Free with Private Federated Learning. - Eugene Bagdasaryan; Congzheng Song; Rogier C. van Dalen; Matt Seigel; Áine Cahill (CoRR, 2022)

Towards Sparse Federated Analytics: Location Heatmaps under Distributed Differential Privacy with Secure Aggregation. - Eugene Bagdasaryan; Peter Kairouz; Stefan Mellem; Adrià Gascón; Kallista A. Bonawitz; Deborah Estrin; Marco Gruteser (Proc. Priv. Enhancing Technol., 2022)

Hyperparameter Search Is All You Need For Training-Agnostic Backdoor Robustness. - Eugene Bagdasaryan; Vitaly Shmatikov (CoRR, 2023)

(Ab)using Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs. - Eugene Bagdasaryan; Tsung-Yin Hsieh; Ben Nassi; Vitaly Shmatikov (CoRR, 2023)

Ceci n'est pas une pomme: Adversarial Illusions in Multi-Modal Embeddings. - Eugene Bagdasaryan; Vitaly Shmatikov (CoRR, 2023)

Synthesizing Physical Backdoor Datasets: An Automated Framework Leveraging Deep Generative Models. - Sze Jue Yang; Chinh D. La; Quang H. Nguyen; Eugene Bagdasaryan; Kok-Seng Wong; Anh Tuan Tran 001; Chee Seng Chan; Khoa D. Doan (CoRR, 2023)

Mithridates: Auditing and Boosting Backdoor Resistance of Machine Learning Pipelines. - Eugene Bagdasarian; Vitaly Shmatikov (CCS, 2024)

AirGapAgent: Protecting Privacy-Conscious Conversational Agents. - Eugene Bagdasarian; Ren Yi; Sahra Ghalebikesabi; Peter Kairouz; Marco Gruteser; Sewoong Oh; Borja Balle; Daniel Ramage (CCS, 2024)

Adversarial Illusions in Multi-Modal Embeddings. - Tingwei Zhang; Rishi D. Jha; Eugene Bagdasaryan; Vitaly Shmatikov (USENIX Security Symposium, 2024)

Air Gap: Protecting Privacy-Conscious Conversational Agents. - Eugene Bagdasaryan; Ren Yi; Sahra Ghalebikesabi; Peter Kairouz; Marco Gruteser; Sewoong Oh; Borja Balle; Daniel Ramage (CoRR, 2024)

Injecting Bias in Text-To-Image Models via Composite-Trigger Backdoors. - Ali Naseh; Jaechul Roh; Eugene Bagdasaryan; Amir Houmansadr (CoRR, 2024)

UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AI. - Ilia Shumailov; Jamie Hayes; Eleni Triantafillou; Guillermo Ortiz-Jiménez; Nicolas Papernot; Matthew Jagielski; Itay Yona; Heidi Howard; Eugene Bagdasaryan (CoRR, 2024)

Soft Prompts Go Hard: Steering Visual Language Models with Hidden Meta-Instructions. - Tingwei Zhang; Collin Zhang; John X. Morris; Eugene Bagdasaryan; Vitaly Shmatikov (CoRR, 2024)

Operationalizing Contextual Integrity in Privacy-Conscious Assistants. - Sahra Ghalebikesabi; Eugene Bagdasaryan; Ren Yi; Itay Yona; Ilia Shumailov; Aneesh Pappu; Chongyang Shi 003; Laura Weidinger; Robert Stanforth; Leonard Berrada; Pushmeet Kohli; Po-Sen Huang; et al. (CoRR, 2024)

CI-Bench: Benchmarking Contextual Integrity of AI Assistants on Synthetic Data. - Zhao Cheng; Diane Wan; Matthew Abueg; Sahra Ghalebikesabi; Ren Yi; Eugene Bagdasarian; Borja Balle; Stefan Mellem; Shawn O'Banion (CoRR, 2024)

Contextual Agent Security: A Policy for Every Purpose. - Lillian Tsai; Eugene Bagdasarian (HotOS, 2025)

Poster Abstract: Compromising Federated Medical AI-Backdoor Risks in Prompt Learning. - Momin Ahmad Khan; Yasra Chandio; Eugene Bagdasarian; Fatima M. Anwar 001 (SenSys, 2025)

Privacy Awareness for Information-Sharing Assistants: A Case-study on Form-filling with Contextual Integrity. - Sahra Ghalebikesabi; Eugene Bagdasarian; Ren Yi; Itay Yona; Ilia Shumailov; Aneesh Pappu; Chongyang Shi 003; Laura Weidinger; Robert Stanforth; Leonard Berrada; Pushmeet Kohli; Po-Sen Huang; et al. (Trans. Mach. Learn. Res., 2025)

Trusted Machine Learning Models Unlock Private Inference for Problems Currently Infeasible with Cryptography. - Ilia Shumailov; Daniel Ramage; Sarah Meiklejohn; Peter Kairouz; Florian Hartmann; Borja Balle; Eugene Bagdasarian (CoRR, 2025)

Context is Key for Agent Security. - Lillian Tsai; Eugene Bagdasarian (CoRR, 2025)

Firewalls to Secure Dynamic LLM Agentic Networks. - Sahar Abdelnabi; Amr Gomaa; Eugene Bagdasarian; Per Ola Kristensson; Reza Shokri (CoRR, 2025)

OverThink: Slowdown Attacks on Reasoning LLMs. - Abhinav Kumar; Jaechul Roh; Ali Naseh; Marzena Karpinska; Mohit Iyyer; Amir Houmansadr; Eugene Bagdasarian (CoRR, 2025)

Can Large Language Models Really Recognize Your Name? - Dzung Pham 002; Peter Kairouz; Niloofar Mireshghallah; Eugene Bagdasarian; Chau Minh Pham; Amir Houmansadr (CoRR, 2025)

Privacy Reasoning in Ambiguous Contexts. - Ren Yi; Octavian Suciu; Adrià Gascón; Sarah Meiklejohn; Eugene Bagdasarian; Marco Gruteser (CoRR, 2025)

Disappearing Ink: Obfuscation Breaks N-gram Code Watermarks in Theory and Practice. - Gehao Zhang; Eugene Bagdasarian; Juan Zhai; Shiqing Ma (CoRR, 2025)