Javier Rando

According to our database, Javier Rando authored at least 26 papers between 2020 and 2026.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of three.

2026

How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition.

Mateusz Dziemian, Maxwell Lin, Xiaohan Fu, Micha Nowak, Nick Winter, Eliot Krzysztof Jones, Andy Zou, Lama Ahmad, Kamalika Chaudhuri, Sahana Chennabasappa, Xander Davies, Lauren Deason, Benjamin L. Edelman, Tanner Emek, Ivan Evtimov, Jim Gust, Maia Hamin, Kat He, Klaudia Krawiecka, Riccardo Patana, Neil Perry, Troy Peterson, Xiangyu Qi, Javier Rando, Zifan Wang, Zihan Wang, Spencer Whitman, Eric Winsor, Arman Zharmagambetov, Matt Fredrikson, Zico Kolter

CoRR, March, 2026

Representations of Text and Images Align From Layer One.

Evzen Wybitul, Javier Rando, Florian Tramèr, Stanislav Fort

CoRR, January, 2026

2025

Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples.

Alexandra Souly, Javier Rando, Ed Chapman, Xander Davies, Burak Hasircioglu, Ezzeldin Shereen, Carlos Mougan, Vasilios Mavroudis, Erik Jones, Chris Hicks, Nicholas Carlini, Yarin Gal, Robert Kirk

CoRR, October, 2025

Adversarial ML Problems Are Getting Harder to Solve and to Evaluate.

Javier Rando, Jie Zhang, Nicholas Carlini, Florian Tramèr

CoRR, February, 2025

An Adversarial Perspective on Machine Unlearning for AI Safety.

Jakub Lucki, Boyi Wei, Yangsibo Huang, Peter Henderson, Florian Tramèr, Javier Rando

Trans. Mach. Learn. Res., 2025

AutoAdvExBench: Benchmarking Autonomous Exploitation of Adversarial Example Defenses.

Nicholas Carlini, Edoardo Debenedetti, Javier Rando, Milad Nasr, Florian Tramèr

Proceedings of the Forty-second International Conference on Machine Learning, 2025

Persistent Pre-training Poisoning of LLMs.

Yiming Zhang, Javier Rando, Ivan Evtimov, Jianfeng Chi, Eric Michael Smith, Nicholas Carlini, Florian Tramèr, Daphne Ippolito

Proceedings of the Thirteenth International Conference on Learning Representations, 2025

Scalable Extraction of Training Data from Aligned, Production Language Models.

Milad Nasr, Javier Rando, Nicholas Carlini, Jonathan Hayase, Matthew Jagielski, A. Feder Cooper, Daphne Ippolito, Christopher A. Choquette-Choo, Florian Tramèr, Katherine Lee

Proceedings of the Thirteenth International Conference on Learning Representations, 2025

Adversarial Perturbations Cannot Reliably Protect Artists From Generative AI.

Robert Hönig, Javier Rando, Nicholas Carlini, Florian Tramèr

Proceedings of the Thirteenth International Conference on Learning Representations, 2025

Measuring Non-Adversarial Reproduction of Training Data in Large Language Models.

Michael Aerni, Javier Rando, Edoardo Debenedetti, Nicholas Carlini, Daphne Ippolito, Florian Tramèr

Proceedings of the Thirteenth International Conference on Learning Representations, 2025

2024

Foundational Challenges in Assuring Alignment and Safety of Large Language Models.

Usman Anwar, Abulhair Saparov, Javier Rando, Daniel Paleka, Miles Turpin, Peter Hase, Ekdeep Singh Lubana, Erik Jenner, Stephen Casper, Oliver Sourbut, Benjamin L. Edelman, Zhaowei Zhang, Mario Günther, Anton Korinek, José Hernández-Orallo, Lewis Hammond, Eric J. Bigelow, Alexander Pan, Lauro Langosco, Tomasz Korbak, Heidi Chenyu Zhang, Ruiqi Zhong, Seán Ó hÉigeartaigh, Gabriel Recchia, Giulio Corsi, Alan Chan, Markus Anderljung, Lilian Edwards, Aleksandar Petrov, Christian Schröder de Witt, Sumeet Ramesh Motwani, Yoshua Bengio, Danqi Chen, Philip Torr, Samuel Albanie, Tegan Maharaj, Jakob Nicolaus Foerster, Florian Tramèr, He He, Atoosa Kasirzadeh, Yejin Choi, David Krueger

Trans. Mach. Learn. Res., 2024

Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations.

Jianfeng Chi, Ujjwal Karn, Hongyuan Zhan, Eric Smith, Javier Rando, Yiming Zhang, Kate Plawiak, Zacharie Delpierre Coudert, Kartikeya Upasani, Mahesh Pasupuleti

CoRR, 2024

Gradient-based Jailbreak Images for Multimodal Fusion Models.

Javier Rando, Hannah Korevaar, Erik Brinkman, Ivan Evtimov, Florian Tramèr

CoRR, 2024

Attributions toward Artificial Agents in a modified Moral Turing Test.

Eyal Aharoni, Sharlene Fernandes, Daniel J. Brady, Caelan Alexander, Michael Criner, Kara Queen, Javier Rando, Eddy Nahmias, Victor Crespo

CoRR, 2024

Competition Report: Finding Universal Jailbreak Backdoors in Aligned LLMs.

Javier Rando, Francesco Croce, Krystof Mitka, Stepan Shabalin, Maksym Andriushchenko, Nicolas Flammarion, Florian Tramèr

CoRR, 2024

Foundational Challenges in Assuring Alignment and Safety of Large Language Models.

Usman Anwar, Abulhair Saparov, Javier Rando, Daniel Paleka, Miles Turpin, Peter Hase, Ekdeep Singh Lubana, Erik Jenner, Stephen Casper, Oliver Sourbut, Benjamin L. Edelman, Zhaowei Zhang, Mario Günther, Anton Korinek, José Hernández-Orallo, Lewis Hammond, Eric J. Bigelow, Alexander Pan, Lauro Langosco, Tomasz Korbak, Heidi C. Zhang, Ruiqi Zhong, Seán Ó hÉigeartaigh, Gabriel Recchia, Giulio Corsi, Alan Chan, Markus Anderljung, Lilian Edwards, Yoshua Bengio, Danqi Chen, Samuel Albanie, Tegan Maharaj, Jakob N. Foerster, Florian Tramèr, He He, Atoosa Kasirzadeh, Yejin Choi, David Krueger

CoRR, 2024

Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition.

Edoardo Debenedetti, Javier Rando, Daniel Paleka, Silaghi Fineas Florin, Dragos Albastroiu, Niv Cohen, Yuval Lemberg, Reshmi Ghosh, Rui Wen, Ahmed Salem, Giovanni Cherubin, Santiago Zanella-Béguelin, Robin Schmid, Victor Klemm, Takahiro Miki, Chenhao Li, Stefan Kraft, Mario Fritz, Florian Tramèr, Sahar Abdelnabi, Lea Schönherr

Proceedings of the Advances in Neural Information Processing Systems 37: Annual Conference on Neural Information Processing Systems 2024, 2024

Universal Jailbreak Backdoors from Poisoned Human Feedback.

Javier Rando, Florian Tramèr

Proceedings of the Twelfth International Conference on Learning Representations, 2024

Personas as a Way to Model Truthfulness in Language Models.

Nitish Joshi, Javier Rando, Abulhair Saparov, Najoung Kim, He He

Proceedings of the 2024 Conference on Empirical Methods in Natural Language Processing, 2024

2023

Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedback.

Stephen Casper, Xander Davies, Claudia Shi, Thomas Krendl Gilbert, Jérémy Scheurer, Javier Rando, Rachel Freedman, Tomasz Korbak, David Lindner, Pedro Freire, Tony Tong Wang, Samuel Marks, Charbel-Raphaël Ségerie, Micah Carroll, Andi Peng, Phillip J. K. Christoffersen, Mehul Damani, Stewart Slocum, Usman Anwar, Anand Siththaranjan, Max Nadeau, Eric J. Michaud, Jacob Pfau, Dmitrii Krasheninnikov, Xin Chen, Lauro Langosco, Peter Hase, Erdem Biyik, Anca D. Dragan, David Krueger, Dorsa Sadigh, Dylan Hadfield-Menell

Trans. Mach. Learn. Res., 2023

Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulation.

Rusheb Shah, Quentin Feuillade-Montixi, Soroush Pour, Arush Tagade, Stephen Casper, Javier Rando

CoRR, 2023

PassGPT: Password Modeling and (Guided) Generation with Large Language Models.

Javier Rando, Fernando Pérez-Cruz, Briland Hitaj

Proceedings of the Computer Security - ESORICS 2023, 2023

2022

Red-Teaming the Stable Diffusion Safety Filter.

Javier Rando, Daniel Paleka, David Lindner, Lennart Heim, Florian Tramèr

CoRR, 2022

Exploring Adversarial Attacks and Defenses in Vision Transformers trained with DINO.

Javier Rando, Nasib Naimi, Thomas Baumann, Max Mathys

CoRR, 2022

2020

Uneven Coverage of Natural Disasters in Wikipedia: the Case of Flood.

Valerio Lorini, Javier Rando, Diego Sáez-Trumper, Carlos Castillo

CoRR, 2020

Uneven Coverage of Natural Disasters in Wikipedia: The Case of Floods.

Valerio Lorini, Javier Rando, Diego Sáez-Trumper, Carlos Castillo

Proceedings of the 17th International Conference on Information Systems for Crisis Response and Management, 2020