The Futility of Bias-Free Learning and Search. - George D. Montañez; Jonathan Hayase; Julius Lauw; Dominique Macias; Akshay Trikha; Julia Vendemiatti (Australasian Conference on Artificial Intelligence, 2019)

Defense against backdoor attacks via robust covariance estimation. - Jonathan Hayase; Weihao Kong; Raghav Somani; Sewoong Oh (ICML, 2021)

SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics. - Jonathan Hayase; Weihao Kong; Raghav Somani; Sewoong Oh (CoRR, 2021)

Zonotope Domains for Lagrangian Neural Network Verification. - Matt Jordan; Jonathan Hayase; Alex Dimakis; Sewoong Oh (NeurIPS, 2022)

Towards a Defense against Backdoor Attacks in Continual Federated Learning. - Shuaiqi Wang; Jonathan Hayase; Giulia Fanti; Sewoong Oh (CoRR, 2022)

Git Re-Basin: Merging Models modulo Permutation Symmetries. - Samuel K. Ainsworth; Jonathan Hayase; Siddhartha S. Srinivasa (ICLR, 2023)

Few-shot Backdoor Attacks via Neural Tangent Kernels. - Jonathan Hayase; Sewoong Oh (ICLR, 2023)

DataComp: In search of the next generation of multimodal datasets. - Samir Yitzhak Gadre; Gabriel Ilharco; Alex Fang; Jonathan Hayase; Georgios Smyrnis; Thao Nguyen; Ryan Marten; Mitchell Wortsman; Dhruba Ghosh; Jieyu Zhang 001; Eyal Orgad; Rahim Entezari; et al. (NeurIPS, 2023)

Label Poisoning is All You Need. - Rishi D. Jha; Jonathan Hayase; Sewoong Oh (NeurIPS, 2023)

Scalable Extraction of Training Data from (Production) Language Models. - Milad Nasr; Nicholas Carlini; Jonathan Hayase; Matthew Jagielski; A. Feder Cooper; Daphne Ippolito; Christopher A. Choquette-Choo; Eric Wallace; Florian Tramèr; Katherine Lee (CoRR, 2023)

Towards a Defense Against Federated Backdoor Attacks Under Continuous Training. - Shuaiqi Wang; Jonathan Hayase; Giulia Fanti; Sewoong Oh (Trans. Mach. Learn. Res., 2023)

Insufficient Statistics Perturbation: Stable Estimators for Private Least Squares Extended Abstract. - Gavin Brown 003; Jonathan Hayase; Samuel B. Hopkins 001; Weihao Kong; Xiyang Liu; Sewoong Oh; Juan C. Perdomo; Adam Smith 006 (COLT, 2024)

Stealing part of a production language model. - Nicholas Carlini; Daniel Paleka; Krishnamurthy Dj Dvijotham; Thomas Steinke 002; Jonathan Hayase; A. Feder Cooper; Katherine Lee; Matthew Jagielski; Milad Nasr; Arthur Conmy; Eric Wallace; David Rolnick; et al. (ICML, 2024)

Query-Based Adversarial Prompt Generation. - Jonathan Hayase; Ema Borevkovic; Nicholas Carlini; Florian Tramèr; Milad Nasr (NeurIPS, 2024)

Data Mixture Inference Attack: BPE Tokenizers Reveal Training Data Compositions. - Jonathan Hayase; Alisa Liu; Yejin Choi 001; Sewoong Oh; Noah A. Smith (NeurIPS, 2024)

Insufficient Statistics Perturbation: Stable Estimators for Private Least Squares. - Gavin Brown 003; Jonathan Hayase; Samuel B. Hopkins 001; Weihao Kong; Xiyang Liu; Sewoong Oh; Juan C. Perdomo; Adam Smith 006 (CoRR, 2024)

Data Mixture Inference: What do BPE Tokenizers Reveal about their Training Data? - Jonathan Hayase; Alisa Liu; Yejin Choi 001; Sewoong Oh; Noah A. Smith (CoRR, 2024)

Monge-Kantorovich Fitting With Sobolev Budgets. - Forest Kobayashi; Jonathan Hayase; Young-Heon Kim (CoRR, 2024)

OML: Open, Monetizable, and Loyal AI. - Zerui Cheng; Edoardo Contente; Ben Finch; Oleg Golev; Jonathan Hayase; Andrew Miller 001; Niusha Moshrefi; Anshul Nasery; Sandeep Nailwal; Sewoong Oh; Himanshu Tyagi; Pramod Viswanath (IACR Cryptol. ePrint Arch., 2024)

PLeaS - Merging Models with Permutations and Least Squares. - Anshul Nasery; Jonathan Hayase; Pang Wei Koh; Sewoong Oh (CVPR, 2025)

Scalable Extraction of Training Data from Aligned, Production Language Models. - Milad Nasr; Javier Rando; Nicholas Carlini; Jonathan Hayase; Matthew Jagielski; A. Feder Cooper; Daphne Ippolito; Christopher A. Choquette-Choo; Florian Tramèr; Katherine Lee (ICLR, 2025)

Scalable Fingerprinting of Large Language Models. - Anshul Nasery; Jonathan Hayase; Creston Brooks; Peiyao Sheng; Himanshu Tyagi; Pramod Viswanath; Sewoong Oh (CoRR, 2025)

SuperBPE: Space Travel for Language Models. - Alisa Liu; Jonathan Hayase; Valentin Hofmann; Sewoong Oh; Noah A. Smith; Yejin Choi 001 (CoRR, 2025)

Sampling from Your Language Model One Byte at a Time. - Jonathan Hayase; Alisa Liu; Noah A. Smith; Sewoong Oh (CoRR, 2025)

Broken Tokens? Your Language Model can Secretly Handle Non-Canonical Tokenizations. - Brian Siyuan Zheng; Alisa Liu; Orevaoghene Ahia; Jonathan Hayase; Yejin Choi; Noah A. Smith (CoRR, 2025)