Blockwise p-Tampering Attacks on Cryptographic Primitives, Extractors, and Learners. - Saeed Mahloujifar; Mohammad Mahmoody (IACR Cryptol. ePrint Arch., 2017)

Learning under $p$-Tampering Attacks. - Saeed Mahloujifar; Dimitrios I. Diochnos; Mohammad Mahmoody (ALT, 2018)

Adversarial Risk and Robustness: General Definitions and Implications for the Uniform Distribution. - Dimitrios I. Diochnos; Saeed Mahloujifar; Mohammad Mahmoody (NeurIPS, 2018)

Can Adversarially Robust Learning Leverage Computational Hardness? - Saeed Mahloujifar; Mohammad Mahmoody (CoRR, 2018)

Multi-party Poisoning through Generalized p-Tampering. - Saeed Mahloujifar; Mohammad Mahmoody; Ameer Mohammed (IACR Cryptol. ePrint Arch., 2018)

The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure. - Saeed Mahloujifar; Dimitrios I. Diochnos; Mohammad Mahmoody (AAAI, 2019)

Can Adversarially Robust Learning LeverageComputational Hardness? - Saeed Mahloujifar; Mohammad Mahmoody (ALT, 2019)

Data Poisoning Attacks in Multi-Party Learning. - Saeed Mahloujifar; Mohammad Mahmoody; Ameer Mohammed (ICML, 2019)

Empirically Measuring Concentration: Fundamental Limits on Intrinsic Robustness. - Saeed Mahloujifar; Xiao Zhang 016; Mohammad Mahmoody; David Evans 001 (NeurIPS, 2019)

Adversarially Robust Learning Could Leverage Computational Hardness. - Sanjam Garg; Somesh Jha; Saeed Mahloujifar; Mohammad Mahmoody (ALT, 2020)

Lower Bounds for Adversarially Robust PAC Learning under Evasion and Hybrid Attacks. - Dimitrios I. Diochnos; Saeed Mahloujifar; Mohammad Mahmoody (ICMLA, 2020)

Lower Bounds for Adversarially Robust PAC Learning. - Dimitrios I. Diochnos; Saeed Mahloujifar; Mohammad Mahmoody (ISAIM, 2020)

Computational Concentration of Measure: Optimal Bounds, Reductions, and More. - Omid Etesami; Saeed Mahloujifar; Mohammad Mahmoody (SODA, 2020)

Learning under p-tampering poisoning attacks. - Saeed Mahloujifar; Dimitrios I. Diochnos; Mohammad Mahmoody (Ann. Math. Artif. Intell., 2020)

Obliviousness Makes Poisoning Adversaries Weaker. - Sanjam Garg; Somesh Jha; Saeed Mahloujifar; Mohammad Mahmoody; Abhradeep Thakurta (CoRR, 2020)

Model-Targeted Poisoning Attacks: Provable Convergence and Certified Bounds. - Fnu Suya; Saeed Mahloujifar; David Evans 001; Yuan Tian 001 (CoRR, 2020)

An Attack on InstaHide: Is Private Learning Possible with Instance Encoding? - Nicholas Carlini; Samuel Deng; Sanjam Garg; Somesh Jha; Saeed Mahloujifar; Mohammad Mahmoody; Shuang Song 001; Abhradeep Thakurta; Florian Tramèr (CoRR, 2020)

Model-Targeted Poisoning Attacks with Provable Convergence. - Fnu Suya; Saeed Mahloujifar; Anshuman Suri; David Evans 001; Yuan Tian 001 (ICML, 2021)

A Separation Result Between Data-oblivious and Data-aware Poisoning Attacks. - Samuel Deng; Sanjam Garg; Somesh Jha; Saeed Mahloujifar; Mohammad Mahmoody; Abhradeep Guha Thakurta (NeurIPS, 2021)

Is Private Learning Possible with Instance Encoding? - Nicholas Carlini; Samuel Deng; Sanjam Garg; Somesh Jha; Saeed Mahloujifar; Mohammad Mahmoody; Abhradeep Thakurta; Florian Tramèr (SP, 2021)

Improving Adversarial Robustness Using Proxy Distributions. - Vikash Sehwag; Saeed Mahloujifar; Tinashe Handina; Sihui Dai; Chong Xiang 001; Mung Chiang; Prateek Mittal (CoRR, 2021)

Membership Inference on Word Embedding and Beyond. - Saeed Mahloujifar; Huseyin A. Inan; Melissa Chase; Esha Ghosh; Marcello Hasegawa (CoRR, 2021)

NeuraCrypt is not private. - Nicholas Carlini; Sanjam Garg; Somesh Jha; Saeed Mahloujifar; Mohammad Mahmoody; Florian Tramèr (CoRR, 2021)

Property Inference from Poisoning. - Melissa Chase; Esha Ghosh; Saeed Mahloujifar (IACR Cryptol. ePrint Arch., 2021)

Polynomial-time targeted attacks on coin tossing for any number of corruptions. - Omid Etesami; Ji Gao; Saeed Mahloujifar; Mohammad Mahmoody (IACR Cryptol. ePrint Arch., 2021)

SparseFed: Mitigating Model Poisoning Attacks in Federated Learning with Sparsification. - Ashwinee Panda; Saeed Mahloujifar; Arjun Nitin Bhagoji; Supriyo Chakraborty; Prateek Mittal (AISTATS, 2022)

Just Rotate it: Deploying Backdoor Attacks via Rotation Transformation. - Tong Wu; Tianhao Wang 021; Vikash Sehwag; Saeed Mahloujifar; Prateek Mittal (AISec@CCS, 2022)

Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness? - Vikash Sehwag; Saeed Mahloujifar; Tinashe Handina; Sihui Dai; Chong Xiang 001; Mung Chiang; Prateek Mittal (ICLR, 2022)

Formulating Robustness Against Unforeseen Attacks. - Sihui Dai; Saeed Mahloujifar; Prateek Mittal (NeurIPS, 2022)

Overparameterization from Computational Constraints. - Sanjam Garg; Somesh Jha; Saeed Mahloujifar; Mohammad Mahmoody; Mingyuan Wang 001 (NeurIPS, 2022)

Renyi Differential Privacy of Propose-Test-Release and Applications to Private and Robust Machine Learning. - Jiachen T. Wang; Saeed Mahloujifar; Shouda Wang; Ruoxi Jia 001; Prateek Mittal (NeurIPS, 2022)

Parameterizing Activation Functions for Adversarial Robustness. - Sihui Dai; Saeed Mahloujifar; Prateek Mittal (SP (Workshops), 2022)

PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier. - Chong Xiang 001; Saeed Mahloujifar; Prateek Mittal (USENIX Security Symposium, 2022)

Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture. - Xinyu Tang 003; Saeed Mahloujifar; Liwei Song; Virat Shejwalkar; Milad Nasr; Amir Houmansadr; Prateek Mittal (USENIX Security Symposium, 2022)

Optimal Membership Inference Bounds for Adaptive Composition of Sampled Gaussian Mechanisms. - Saeed Mahloujifar; Alexandre Sablayrolles; Graham Cormode; Somesh Jha (CoRR, 2022)

Circumventing Backdoor Defenses That Are Based on Latent Separability. - Xiangyu Qi; Tinghao Xie; Saeed Mahloujifar; Prateek Mittal (CoRR, 2022)

Fight Poison with Poison: Detecting Backdoor Poison Samples via Decoupling Benign Correlations. - Xiangyu Qi; Tinghao Xie; Saeed Mahloujifar; Prateek Mittal (CoRR, 2022)

Overparameterized (robust) models from computational constraints. - Sanjam Garg; Somesh Jha; Saeed Mahloujifar; Mohammad Mahmoody; Mingyuan Wang 001 (CoRR, 2022)

DP-RAFT: A Differentially Private Recipe for Accelerated Fine-Tuning. - Ashwinee Panda; Xinyu Tang 003; Vikash Sehwag; Saeed Mahloujifar; Prateek Mittal (CoRR, 2022)

Machine Learning with Differentially Private Labels: Mechanisms and Frameworks. - Xinyu Tang 003; Milad Nasr; Saeed Mahloujifar; Virat Shejwalkar; Liwei Song; Amir Houmansadr; Prateek Mittal (Proc. Priv. Enhancing Technol., 2022)

Revisiting the Assumption of Latent Separability for Backdoor Defenses. - Xiangyu Qi; Tinghao Xie; Yiming Li; Saeed Mahloujifar; Prateek Mittal (ICLR, 2023)

MultiRobustBench: Benchmarking Robustness Against Multiple Attacks. - Sihui Dai; Saeed Mahloujifar; Chong Xiang 001; Vikash Sehwag; Pin-Yu Chen; Prateek Mittal (ICML, 2023)

Effectively Using Public Data in Privacy Preserving Machine Learning. - Milad Nasr; Saeed Mahloujifar; Xinyu Tang 003; Prateek Mittal; Amir Houmansadr (ICML, 2023)

Uncovering Adversarial Risks of Test-Time Adaptation. - Tong Wu; Feiran Jia; Xiangyu Qi; Jiachen T. Wang; Vikash Sehwag; Saeed Mahloujifar; Prateek Mittal (ICML, 2023)

Bounding training data reconstruction in DP-SGD. - Jamie Hayes; Borja Balle; Saeed Mahloujifar (NeurIPS, 2023)

A Randomized Approach to Tight Privacy Accounting. - Jiachen T. Wang; Saeed Mahloujifar; Tong Wu; Ruoxi Jia 001; Prateek Mittal (NeurIPS, 2023)

ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking. - Chong Xiang 001; Alexander Valtchanov; Saeed Mahloujifar; Prateek Mittal (SP, 2023)

Towards A Proactive ML Approach for Detecting Backdoor Poison Samples. - Xiangyu Qi; Tinghao Xie; Jiachen T. Wang; Tong Wu; Saeed Mahloujifar; Prateek Mittal (USENIX Security Symposium, 2023)

A Randomized Approach for Tight Privacy Accounting. - Jiachen T. Wang; Saeed Mahloujifar; Tong Wu; Ruoxi Jia 001; Prateek Mittal (CoRR, 2023)

Experimenting with Zero-Knowledge Proofs of Training. - Sanjam Garg; Aarushi Goel; Somesh Jha; Saeed Mahloujifar; Mohammad Mahmoody; Guru-Vamsi Policharla; Mingyuan Wang 001 (IACR Cryptol. ePrint Arch., 2023)

A New Linear Scaling Rule for Private Adaptive Hyperparameter Optimization. - Ashwinee Panda; Xinyu Tang 003; Saeed Mahloujifar; Vikash Sehwag; Prateek Mittal (ICML, 2024)

Horus: Granular In-Network Task Scheduler for Cloud Datacenters. - Parham Yassini; Khaled Diab 001; Saeed Mahloujifar; Mohamed Hefeeda (NSDI, 2024)

Publicly-Detectable Watermarking for Language Models. - Jaiden Fairoze; Sanjam Garg; Somesh Jha; Saeed Mahloujifar; Mohammad Mahmoody; Mingyuan Wang 001 (IACR Commun. Cryptol., 2024)

Privacy Amplification for the Gaussian Mechanism via Bounded Support. - Shengyuan Hu 001; Saeed Mahloujifar; Virginia Smith; Kamalika Chaudhuri; Chuan Guo 001 (CoRR, 2024)

Aligning LLMs to Be Robust Against Prompt Injection. - Sizhe Chen; Arman Zharmagambetov; Saeed Mahloujifar; Kamalika Chaudhuri; Chuan Guo 001 (CoRR, 2024)

Auditing f-Differential Privacy in One Run. - Saeed Mahloujifar; Luca Melis; Kamalika Chaudhuri (CoRR, 2024)

Guarantees of confidentiality via Hammersley-Chapman-Robbins bounds. - Kamalika Chaudhuri; Chuan Guo 001; Laurens van der Maaten; Saeed Mahloujifar; Mark Tygert (Trans. Mach. Learn. Res., 2024)

Machine Learning with Privacy for Protected Attributes. - Saeed Mahloujifar; Chuan Guo 001; G. Edward Suh; Kamalika Chaudhuri (SP, 2025)

Private Fine-tuning of Large Language Models with Zeroth-order Optimization. - Xinyu Tang 003; Ashwinee Panda; Milad Nasr; Saeed Mahloujifar; Prateek Mittal (Trans. Mach. Learn. Res., 2025)

Unlocking Visual Secrets: Inverting Features with Diffusion Priors for Image Reconstruction. - Sai Qian Zhang; Ziyun Li; Chuan Guo 001; Saeed Mahloujifar; Deeksha Dangwal; G. Edward Suh; Barbara De Salvo; Chiao Liu (Trans. Mach. Learn. Res., 2025)

Detecting Benchmark Contamination Through Watermarking. - Tom Sander; Pierre Fernandez; Saeed Mahloujifar; Alain Durmus; Chuan Guo 001 (CoRR, 2025)

How much do language models memorize? - John X. Morris; Chawin Sitawarin; Chuan Guo 001; Narine Kokhlikyan; G. Edward Suh; Alexander M. Rush; Kamalika Chaudhuri; Saeed Mahloujifar (CoRR, 2025)