SNAP: Efficient Extraction of Private Properties with Poisoning. - Harsh Chaudhari; John Abascal; Alina Oprea; Matthew Jagielski; Florian Tramèr; Jonathan R. Ullman (SP, 2023)

Phantom: General Trigger Attacks on Retrieval Augmented Language Generation. - Harsh Chaudhari; Giorgio Severi; John Abascal; Matthew Jagielski; Christopher A. Choquette-Choo; Milad Nasr; Cristina Nita-Rotaru; Alina Oprea (CoRR, 2024)

TMI! Finetuned Models Leak Private Information from their Pretraining Data. - John Abascal; Stanley Wu; Alina Oprea; Jonathan R. Ullman (Proc. Priv. Enhancing Technol., 2024)

Black-Box Privacy Attacks on Shared Representations in Multitask Learning. - John Abascal; Nicolás Berrios; Alina Oprea; Jonathan R. Ullman; Adam Smith 006; Matthew Jagielski (CoRR, 2025)