DroidDisintegrator: Intra-Application Information Flow Control in Android Apps. - Eran Tromer; Roei Schuster (AsiaCCS, 2016)

Beauty and the Burst: Remote Identification of Encrypted Video Streams. - Roei Schuster; Vitaly Shmatikov; Eran Tromer (USENIX Security Symposium, 2017)

Situational Access Control in the Internet of Things. - Roei Schuster; Vitaly Shmatikov; Eran Tromer (CCS, 2018)

Synesthesia: Detecting Screen Content via Remote Acoustic Side Channels. - Daniel Genkin; Mihir Pattani; Roei Schuster; Eran Tromer (IEEE Symposium on Security and Privacy, 2019)

Are We Safe Yet? The Limitations of Distributional Features for Fake News Detection. - Tal Schuster; Roei Schuster; Darsh J. Shah; Regina Barzilay (CoRR, 2019)

De-Anonymizing Text by Fingerprinting Language Generation. - Zhen Sun; Roei Schuster; Vitaly Shmatikov (NeurIPS, 2020)

Humpty Dumpty: Controlling Word Meanings via Corpus Poisoning. - Roei Schuster; Tal Schuster; Yoav Meri; Vitaly Shmatikov (SP, 2020)

The Limitations of Stylometry for Detecting Machine-Generated Fake News. - Tal Schuster; Roei Schuster; Darsh J. Shah; Regina Barzilay (Comput. Linguistics, 2020)

Transformer Feed-Forward Layers Are Key-Value Memories. - Mor Geva; Roei Schuster; Jonathan Berant; Omer Levy (EMNLP (1), 2021)

You Autocomplete Me: Poisoning Vulnerabilities in Neural Code Completion. - Roei Schuster; Congzheng Song; Eran Tromer; Vitaly Shmatikov (USENIX Security Symposium, 2021)

Squint Hard Enough: Evaluating Perceptual Hashing with Machine Learning. - Jonathan Prokos; Tushar M. Jois; Neil Fendley; Roei Schuster; Matthew Green 001; Eran Tromer; Yinzhi Cao (IACR Cryptol. ePrint Arch., 2021)

Data-Oriented Systems Security - Roei Schuster (2021)

In Differential Privacy, There is Truth: on Vote-Histogram Leakage in Ensemble Private Learning. - Jiaqi Wang; Roei Schuster; Ilia Shumailov; David Lie; Nicolas Papernot (NeurIPS, 2022)

Lend Me Your Ear: Passive Remote Physical Side Channels on PCs. - Daniel Genkin; Noam Nissan; Roei Schuster; Eran Tromer (USENIX Security Symposium, 2022)

In Differential Privacy, There is Truth: On Vote Leakage in Ensemble Private Learning. - Jiaqi Wang; Roei Schuster; Ilia Shumailov; David Lie; Nicolas Papernot (CoRR, 2022)

Learned Systems Security. - Roei Schuster; Jin Peng Zhou; Thorsten Eisenhofer; Paul Grubbs; Nicolas Papernot (CoRR, 2022)

Toward Proactive Support for Older Adults: Predicting the Right Moment for Providing Mobile Safety Help. - Tamir Mendel; Roei Schuster; Eran Tromer; Eran Toch (Proc. ACM Interact. Mob. Wearable Ubiquitous Technol., 2022)

The Adversarial Implications of Variable-Time Inference. - Dudi Biton; Aditi Misra; Efrat Levy; Jaidip Kotak; Ron Bitton; Roei Schuster; Nicolas Papernot; Yuval Elovici; Ben Nassi (AISec@CCS, 2023)

Understanding Transformer Memorization Recall Through Idioms. - Adi Haviv; Ido Cohen 002; Jacob Gidron; Roei Schuster; Yoav Goldberg; Mor Geva (EACL, 2023)

When the Curious Abandon Honesty: Federated Learning Is Not Private. - Franziska Boenisch; Adam Dziedzic; Roei Schuster; Ali Shahin Shamsabadi; Ilia Shumailov; Nicolas Papernot (EuroS&P, 2023)

Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregation. - Franziska Boenisch; Adam Dziedzic; Roei Schuster; Ali Shahin Shamsabadi; Ilia Shumailov; Nicolas Papernot (EuroS&P, 2023)

Squint Hard Enough: Attacking Perceptual Hashing with Adversarial Machine Learning. - Jonathan Prokos; Neil Fendley; Matthew Green 001; Roei Schuster; Eran Tromer; Tushar M. Jois; Yinzhi Cao (USENIX Security Symposium, 2023)

Is Federated Learning a Practical PET Yet? - Franziska Boenisch; Adam Dziedzic; Roei Schuster; Ali Shahin Shamsabadi; Ilia Shumailov; Nicolas Papernot (CoRR, 2023)

Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents. - Avital Shafran; Roei Schuster; Vitaly Shmatikov (CoRR, 2024)

Learned-Database Systems Security. - Roei Schuster; Jin Peng Zhou; Thorsten Eisenhofer; Paul Grubbs; Nicolas Papernot (Trans. Mach. Learn. Res., 2025)

Rerouting LLM Routers. - Avital Shafran; Roei Schuster; Thomas Ristenpart; Vitaly Shmatikov (CoRR, 2025)