Entangled Watermarks as a Defense against Model Extraction. - Hengrui Jia 001; Christopher A. Choquette-Choo; Nicolas Papernot (CoRR, 2020)

Machine Unlearning. - Lucas Bourtoule; Varun Chandrasekaran; Christopher A. Choquette-Choo; Hengrui Jia 001; Adelin Travers; Baiwu Zhang; David Lie; Nicolas Papernot (SP, 2021)

Proof-of-Learning: Definitions and Practice. - Hengrui Jia 001; Mohammad Yaghini; Christopher A. Choquette-Choo; Natalie Dullerud; Anvith Thudi; Varun Chandrasekaran; Nicolas Papernot (SP, 2021)

Entangled Watermarks as a Defense against Model Extraction. - Hengrui Jia 001; Christopher A. Choquette-Choo; Varun Chandrasekaran; Nicolas Papernot (USENIX Security Symposium, 2021)

SoK: Machine Learning Governance. - Varun Chandrasekaran; Hengrui Jia 001; Anvith Thudi; Adelin Travers; Mohammad Yaghini; Nicolas Papernot (CoRR, 2021)

A Zest of LIME: Towards Architecture-Independent Model Distances. - Hengrui Jia 001; Hongyu Chen; Jonas Guan; Ali Shahin Shamsabadi; Nicolas Papernot (ICLR, 2022)

On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning. - Anvith Thudi; Hengrui Jia 001; Ilia Shumailov; Nicolas Papernot (USENIX Security Symposium, 2022)

On the Fundamental Limits of Formally (Dis)Proving Robustness in Proof-of-Learning. - Congyu Fang; Hengrui Jia 001; Anvith Thudi; Mohammad Yaghini; Christopher A. Choquette-Choo; Natalie Dullerud; Varun Chandrasekaran; Nicolas Papernot (CoRR, 2022)

Proof-of-Learning is Currently More Broken Than You Think. - Congyu Fang; Hengrui Jia 001; Anvith Thudi; Mohammad Yaghini; Christopher A. Choquette-Choo; Natalie Dullerud; Varun Chandrasekaran; Nicolas Papernot (EuroS&P, 2023)

LLM Dataset Inference: Did you train on my dataset? - Pratyush Maini; Hengrui Jia 001; Nicolas Papernot; Adam Dziedzic (NeurIPS, 2024)

Gradients Look Alike: Sensitivity is Often Overestimated in DP-SGD. - Anvith Thudi; Hengrui Jia 001; Casey Meehan; Ilia Shumailov; Nicolas Papernot (USENIX Security Symposium, 2024)

Backdoor Detection Through Replicated Execution of Outsourced Training. - Hengrui Jia 001; Sierra Calanda Wyllie; Akram Bin Sediq; Ahmed Ibrahim; Nicolas Papernot (SaTML, 2025)