Uneven Coverage of Natural Disasters in Wikipedia: The Case of Floods. - Valerio Lorini; Javier Rando; Diego Sáez-Trumper; Carlos Castillo 001 (ISCRAM, 2020)

Uneven Coverage of Natural Disasters in Wikipedia: the Case of Flood. - Valerio Lorini; Javier Rando; Diego Sáez-Trumper; Carlos Castillo 001 (CoRR, 2020)

Exploring Adversarial Attacks and Defenses in Vision Transformers trained with DINO. - Javier Rando; Nasib Naimi; Thomas Baumann; Max Mathys (CoRR, 2022)

Red-Teaming the Stable Diffusion Safety Filter. - Javier Rando; Daniel Paleka; David Lindner; Lennart Heim; Florian Tramèr (CoRR, 2022)

PassGPT: Password Modeling and (Guided) Generation with Large Language Models. - Javier Rando; Fernando Pérez-Cruz; Briland Hitaj (ESORICS (4), 2023)

Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulation. - Rusheb Shah; Quentin Feuillade-Montixi; Soroush Pour; Arush Tagade; Stephen Casper; Javier Rando (CoRR, 2023)

Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedback. - Stephen Casper; Xander Davies; Claudia Shi; Thomas Krendl Gilbert; Jérémy Scheurer; Javier Rando; Rachel Freedman; Tomasz Korbak; David Lindner; Pedro Freire; Tony Tong Wang; Samuel Marks; et al. (Trans. Mach. Learn. Res., 2023)

Personas as a Way to Model Truthfulness in Language Models. - Nitish Joshi; Javier Rando; Abulhair Saparov; Najoung Kim; He He 001 (EMNLP, 2024)

Universal Jailbreak Backdoors from Poisoned Human Feedback. - Javier Rando; Florian Tramèr (ICLR, 2024)

Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition. - Edoardo Debenedetti; Javier Rando; Daniel Paleka; Silaghi Fineas Florin; Dragos Albastroiu; Niv Cohen; Yuval Lemberg; Reshmi Ghosh; Rui Wen 002; Ahmed Salem 001; Giovanni Cherubin; Santiago Zanella-Béguelin; et al. (NeurIPS, 2024)

Foundational Challenges in Assuring Alignment and Safety of Large Language Models. - Usman Anwar; Abulhair Saparov; Javier Rando; Daniel Paleka; Miles Turpin; Peter Hase; Ekdeep Singh Lubana; Erik Jenner; Stephen Casper; Oliver Sourbut; Benjamin L. Edelman; Zhaowei Zhang; et al. (CoRR, 2024)

Competition Report: Finding Universal Jailbreak Backdoors in Aligned LLMs. - Javier Rando; Francesco Croce; Krystof Mitka; Stepan Shabalin; Maksym Andriushchenko; Nicolas Flammarion; Florian Tramèr (CoRR, 2024)

Attributions toward Artificial Agents in a modified Moral Turing Test. - Eyal Aharoni; Sharlene Fernandes; Daniel J. Brady; Caelan Alexander; Michael Criner; Kara Queen; Javier Rando; Eddy Nahmias; Victor Crespo (CoRR, 2024)

Gradient-based Jailbreak Images for Multimodal Fusion Models. - Javier Rando; Hannah Korevaar; Erik Brinkman; Ivan Evtimov; Florian Tramèr (CoRR, 2024)

Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations. - Jianfeng Chi; Ujjwal Karn; Hongyuan Zhan; Eric Smith; Javier Rando; Yiming Zhang; Kate Plawiak; Zacharie Delpierre Coudert; Kartikeya Upasani; Mahesh Pasupuleti (CoRR, 2024)

Foundational Challenges in Assuring Alignment and Safety of Large Language Models. - Usman Anwar; Abulhair Saparov; Javier Rando; Daniel Paleka; Miles Turpin; Peter Hase; Ekdeep Singh Lubana; Erik Jenner; Stephen Casper; Oliver Sourbut; Benjamin L. Edelman; Zhaowei Zhang; et al. (Trans. Mach. Learn. Res., 2024)

Measuring Non-Adversarial Reproduction of Training Data in Large Language Models. - Michael Aerni; Javier Rando; Edoardo Debenedetti; Nicholas Carlini; Daphne Ippolito; Florian Tramèr (ICLR, 2025)

Adversarial Perturbations Cannot Reliably Protect Artists From Generative AI. - Robert Hönig; Javier Rando; Nicholas Carlini; Florian Tramèr (ICLR, 2025)

Scalable Extraction of Training Data from Aligned, Production Language Models. - Milad Nasr; Javier Rando; Nicholas Carlini; Jonathan Hayase; Matthew Jagielski; A. Feder Cooper; Daphne Ippolito; Christopher A. Choquette-Choo; Florian Tramèr; Katherine Lee (ICLR, 2025)

Persistent Pre-training Poisoning of LLMs. - Yiming Zhang; Javier Rando; Ivan Evtimov; Jianfeng Chi; Eric Michael Smith; Nicholas Carlini; Florian Tramèr; Daphne Ippolito (ICLR, 2025)

An Adversarial Perspective on Machine Unlearning for AI Safety. - Jakub Lucki; Boyi Wei; Yangsibo Huang; Peter Henderson 002; Florian Tramèr; Javier Rando (Trans. Mach. Learn. Res., 2025)

Adversarial ML Problems Are Getting Harder to Solve and to Evaluate. - Javier Rando; Jie Zhang 107; Nicholas Carlini; Florian Tramèr (CoRR, 2025)

AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses. - Nicholas Carlini; Javier Rando; Edoardo Debenedetti; Milad Nasr; Florian Tramèr (CoRR, 2025)