Conformal Clustering and Its Application to Botnet Traffic. - Giovanni Cherubin; Ilia Nouretdinov; Alexander Gammerman; Roberto Jordaney; Zhi Wang; Davide Papini; Lorenzo Cavallaro (SLDS, 2015)

Hidden Markov Models with Confidence. - Giovanni Cherubin; Ilia Nouretdinov (COPA, 2016)

Bayes, not Naïve: Security Bounds on Website Fingerprinting Defenses. - Giovanni Cherubin (Proc. Priv. Enhancing Technol., 2017)

Website Fingerprinting Defenses at the Application Layer. - Giovanni Cherubin; Jamie Hayes; Marc Juarez (Proc. Priv. Enhancing Technol., 2017)

Exchangeability martingales for selecting features in anomaly detection. - Giovanni Cherubin; Adrian Baldwin; Jonathan Griffin (COPA, 2018)

F-BLEAU: Fast Black-Box Leakage Estimation. - Giovanni Cherubin; Konstantinos Chatzikokolakis 001; Catuscia Palamidessi (IEEE Symposium on Security and Privacy, 2019)

Majority vote ensembles of conformal predictors. - Giovanni Cherubin (Mach. Learn., 2019)

Black-box security: measuring black-box information leakage via machine learning. - Giovanni Cherubin (2019)

The Bayes Security Measure. - Konstantinos Chatzikokolakis 001; Giovanni Cherubin; Catuscia Palamidessi; Carmela Troncoso (CoRR, 2020)

Fast conformal classification using influence functions. - Umang Bhatt; Adrian Weller; Giovanni Cherubin (COPA, 2021)

Preface. - Lars Carlsson; Zhiyuan Luo 001; Giovanni Cherubin; Khuong An Nguyen (COPA, 2021)

Exact Optimization of Conformal Predictors via Incremental and Decremental Learning. - Giovanni Cherubin; Konstantinos Chatzikokolakis 001; Martin Jaggi (ICML, 2021)

Reconstructing Training Data with Informed Adversaries. - Borja Balle; Giovanni Cherubin; Jamie Hayes (SP, 2022)

Online Website Fingerprinting: Evaluating Website Fingerprinting Attacks on Tor in the Real World. - Giovanni Cherubin; Rob Jansen; Carmela Troncoso (USENIX Security Symposium, 2022)

Synthetic Data - what, why and how? - James Jordon; Lukasz Szpruch; Florimond Houssiau; Mirko Bottarelli; Giovanni Cherubin; Carsten Maple; Samuel N. Cohen; Adrian Weller (CoRR, 2022)

Disparate Vulnerability to Membership Inference Attacks. - Bogdan Kulynych; Mohammad Yaghini; Giovanni Cherubin; Michael Veale; Carmela Troncoso (Proc. Priv. Enhancing Technol., 2022)

Approximating Full Conformal Prediction at Scale via Influence Functions. - Javier Abad Martinez; Umang Bhatt; Adrian Weller; Giovanni Cherubin (AAAI, 2023)

How do the performance of a Conformal Predictor and its underlying algorithm relate? - Giovanni Cherubin (COPA, 2023)

Bayes Security: A Not So Average Metric. - Konstantinos Chatzikokolakis 001; Giovanni Cherubin; Catuscia Palamidessi; Carmela Troncoso (CSF, 2023)

SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning. - Ahmed Salem 001; Giovanni Cherubin; David Evans 001; Boris Köpf; Andrew Paverd; Anshuman Suri; Shruti Tople; Santiago Zanella-Béguelin (SP, 2023)

Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition. - Edoardo Debenedetti; Javier Rando; Daniel Paleka; Silaghi Fineas Florin; Dragos Albastroiu; Niv Cohen; Yuval Lemberg; Reshmi Ghosh; Rui Wen 002; Ahmed Salem 001; Giovanni Cherubin; Santiago Zanella-Béguelin; et al. (NeurIPS, 2024)

Closed-Form Bounds for DP-SGD against Record-level Inference. - Giovanni Cherubin; Boris Köpf; Andrew Paverd; Shruti Tople; Lukas Wutschitz; Santiago Zanella-Béguelin (USENIX Security Symposium, 2024)

Are you still on track!? Catching LLM Task Drift with Activations. - Sahar Abdelnabi; Aideen Fay; Giovanni Cherubin; Ahmed Salem 001; Mario Fritz; Andrew Paverd (CoRR, 2024)

Get My Drift? Catching LLM Task Drift with Activation Deltas. - Sahar Abdelnabi; Aideen Fay; Giovanni Cherubin; Ahmed Salem 001; Mario Fritz; Andrew Paverd (SaTML, 2025)

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge. - Sahar Abdelnabi; Aideen Fay; Ahmed Salem 001; Egor Zverev; Kai-Chieh Liao; Chi-Huang Liu; Chun-Chih Kuo; Jannis Weigend; Danyael Manlangit; Alex Apostolov; Haris Umair; João Donato; et al. (CoRR, 2025)

Highlight & Summarize: RAG without the jailbreaks. - Giovanni Cherubin; Andrew Paverd (CoRR, 2025)