Generic Gram-Schmidt Orthogonalization by Exact Division. - Úlfar Erlingsson; Erich L. Kaltofen; David R. Musser (ISSAC, 1996)

Efficient Multiway Radix Search Trees. - Úlfar Erlingsson; Mukkai S. Krishnamoorthy; T. V. Raman 001 (Inf. Process. Lett., 1996)

SASI enforcement of security policies: a retrospective. - Úlfar Erlingsson; Fred B. Schneider (NSPW, 1999)

Efficient and Flexible Value Sampling. - Michael Burrows; Úlfar Erlingsson; Shun-Tak Leung; Mark T. Vandevoorde; Carl A. Waldspurger; Kip Walker; William E. Weihl (ASPLOS, 2000)

IRM Enforcement of Java Stack Inspection. - Úlfar Erlingsson; Fred B. Schneider (S&P, 2000)

The Inlined Reference Monitor Approach to Security Policy Enforcement. - Úlfar Erlingsson (2004)

Control-flow integrity. - Martín Abadi; Mihai Budiu; Úlfar Erlingsson; Jay Ligatti (CCS, 2005)

A Theory of Secure Control Flow. - Martín Abadi; Mihai Budiu; Úlfar Erlingsson; Jay Ligatti (ICFEM, 2005)

Architectural support for software-based protection. - Mihai Budiu; Úlfar Erlingsson; Martín Abadi (ASID, 2006)

XFI: Software Guards for System Address Spaces. - Úlfar Erlingsson; Martín Abadi; Michael Vrable; Mihai Budiu; George C. Necula (OSDI, 2006)

Ad hoc extensibility and access control. - Úlfar Erlingsson; John MacCormick (ACM SIGOPS Oper. Syst. Rev., 2006)

Low-Level Software Security: Attacks and Defenses. - Úlfar Erlingsson (FOSAD, 2007)

End-to-End Web Application Security. - Úlfar Erlingsson; V. Benjamin Livshits; Yinglian Xie (HotOS, 2007)

Using web application construction frameworks to protect against code injection attacks. - V. Benjamin Livshits; Úlfar Erlingsson (PLAS, 2007)

Enforcing authorization policies using transactional memory introspection. - Arnar Birgisson; Mohan Dhawan; Úlfar Erlingsson; Vinod Ganapathy; Liviu Iftode (CCS, 2008)

DryadLINQ: A System for General-Purpose Distributed Data-Parallel Computing Using a High-Level Language. - Yuan Yu; Michael Isard; Dennis Fetterly; Mihai Budiu; Úlfar Erlingsson; Pradeep Kumar Gunda; Jon Currey (OSDI, 2008)

Workshop on programming languages and analysis for security (PLAS 2008). - Marco Pistoia; Úlfar Erlingsson (ACM SIGPLAN Notices, 2008)

PLAS 2008 paper abstracts. - Marco Pistoia; Úlfar Erlingsson (ACM SIGPLAN Notices, 2008)

Programming languages and program analysis for security: a three-year retrospective. - Marco Pistoia; Úlfar Erlingsson (ACM SIGPLAN Notices, 2008)

09141 Abstracts Collection - Web Application Security. - Dan Boneh; Úlfar Erlingsson; Martin Johns; Benjamin Livshits (Web Application Security, 2009)

09141 Executive Summary - Web Application Security. - Dan Boneh; Úlfar Erlingsson; Martin Johns; Benjamin Livshits (Web Application Security, 2009)

An implementation and semantics for transactional memory introspection in Haskell. - Arnar Birgisson; Úlfar Erlingsson (PLAS, 2009)

Control-flow integrity principles, implementations, and applications. - Martín Abadi; Mihai Budiu; Úlfar Erlingsson; Jay Ligatti (ACM Trans. Inf. Syst. Secur., 2009)

Low-Level Software Security by Example. - Úlfar Erlingsson; Yves Younan; Frank Piessens (Handbook of Information and Communication Security, 2010)

Language-independent sandboxing of just-in-time compilation and self-modifying code. - Jason Ansel; Petr Marchenko; Úlfar Erlingsson; Elijah Taylor; Brad Chen; Derek L. Schuff; David Sehr; Cliff Biffle; Bennet Yee (PLDI, 2011)

Fay: extensible distributed tracing from kernels to clusters. - Úlfar Erlingsson; Marcus Peinado; Simon Peter 001; Mihai Budiu (SOSP, 2011)

Automated Analysis of Security-Critical JavaScript APIs. - Ankur Taly; Úlfar Erlingsson; John C. Mitchell; Mark S. Miller; Jasvir Nagra (IEEE Symposium on Security and Privacy, 2011)

Let's Parse to Prevent Pwnage. - Mike Samuel; Úlfar Erlingsson (LEET, 2012)

Fay: Extensible Distributed Tracing from Kernels to Clusters. - Úlfar Erlingsson; Marcus Peinado; Simon Peter 001; Mihai Budiu; Gloria Mainar-Ruiz (ACM Trans. Comput. Syst., 2012)

Strato: A Retargetable Framework for Low-Level Inlined-Reference Monitors. - Bin Zeng 004; Gang Tan; Úlfar Erlingsson (USENIX Security Symposium, 2013)

RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response. - Úlfar Erlingsson; Vasyl Pihur; Aleksandra Korolova (CCS, 2014)

Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud. - Arnar Birgisson; Joe Gibbs Politz; Úlfar Erlingsson; Ankur Taly; Michael Vrable; Mark Lentczner (NDSS, 2014)

Enforcing Forward-Edge Control-Flow Integrity in GCC & LLVM. - Caroline Tice; Tom Roeder; Peter Collingbourne; Stephen Checkoway; Úlfar Erlingsson; Luis Lozano; Geoff Pike (USENIX Security Symposium, 2014)

Apples and Oranges: Detecting Least-Privilege Violators with Peer Group Analysis. - Suman Jana; Úlfar Erlingsson; Iulia Ion (CoRR, 2015)

Data-Driven Software Security: Models and Methods. - Úlfar Erlingsson (CSF, 2016)

Building a RAPPOR with the Unknown: Privacy-Preserving Learning of Associations and Data Dictionaries. - Giulia Fanti; Vasyl Pihur; Úlfar Erlingsson (Proc. Priv. Enhancing Technol., 2016)

Data-driven Software Security and its Hardware Support. - Úlfar Erlingsson (ASHES@CCS, 2017)

On the Protection of Private Information in Machine Learning Systems: Two Recent Approches. - Martín Abadi; Úlfar Erlingsson; Ian J. Goodfellow; H. Brendan McMahan; Ilya Mironov; Nicolas Papernot; Kunal Talwar; Li Zhang 001 (CSF, 2017)

Semi-supervised Knowledge Transfer for Deep Learning from Private Training Data. - Nicolas Papernot; Martín Abadi; Úlfar Erlingsson; Ian J. Goodfellow; Kunal Talwar (ICLR, 2017)

Prochlo: Strong Privacy for Analytics in the Crowd. - Andrea Bittau; Úlfar Erlingsson; Petros Maniatis; Ilya Mironov; Ananth Raghunathan; David Lie; Mitch Rudominer; Ushasree Kode; Julien Tinnés; Bernhard Seefeld (SOSP, 2017)

On the Protection of Private Information in Machine Learning Systems: Two Recent Approaches. - Martín Abadi; Úlfar Erlingsson; Ian J. Goodfellow; H. Brendan McMahan; Ilya Mironov; Nicolas Papernot; Kunal Talwar; Li Zhang 001 (CoRR, 2017)

Scalable Private Learning with PATE. - Nicolas Papernot; Shuang Song 001; Ilya Mironov; Ananth Raghunathan; Kunal Talwar; Úlfar Erlingsson (ICLR, 2018)

The Secret Sharer: Measuring Unintended Neural Network Memorization & Extracting Secrets. - Nicholas Carlini; Chang Liu 021; Jernej Kos; Úlfar Erlingsson; Dawn Song (CoRR, 2018)

Reducing Permission Requests in Mobile Apps. - Sai Teja Peddinti; Igor Bilogrevic; Nina Taft; Martin Pelikan; Úlfar Erlingsson; Pauline Anthonysamy; Giles Hogben (Internet Measurement Conference, 2019)

Amplification by Shuffling: From Local to Central Differential Privacy via Anonymity. - Úlfar Erlingsson; Vitaly Feldman; Ilya Mironov; Ananth Raghunathan; Kunal Talwar; Abhradeep Thakurta (SODA, 2019)

The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks. - Nicholas Carlini; Chang Liu 021; Úlfar Erlingsson; Jernej Kos; Dawn Song (USENIX Security Symposium, 2019)

That which we call private. - Úlfar Erlingsson; Ilya Mironov; Ananth Raghunathan; Shuang Song 001 (CoRR, 2019)

Distribution Density, Tails, and Outliers in Machine Learning: Metrics and Applications. - Nicholas Carlini; Úlfar Erlingsson; Nicolas Papernot (CoRR, 2019)

Encode, Shuffle, Analyze Privacy Revisited: Formalizations and Empirical Evaluation. - Úlfar Erlingsson; Vitaly Feldman; Ilya Mironov; Ananth Raghunathan; Shuang Song 001; Kunal Talwar; Abhradeep Thakurta (CoRR, 2020)

Tempered Sigmoid Activations for Deep Learning with Differential Privacy. - Nicolas Papernot; Abhradeep Thakurta; Shuang Song 001; Steve Chien; Úlfar Erlingsson (AAAI, 2021)

Extracting Training Data from Large Language Models. - Nicholas Carlini; Florian Tramèr; Eric Wallace; Matthew Jagielski; Ariel Herbert-Voss; Katherine Lee; Adam Roberts; Tom B. Brown; Dawn Song; Úlfar Erlingsson; Alina Oprea; Colin Raffel (USENIX Security Symposium, 2021)

How to Secure Existing C and C++ Software without Memory Safety. - Úlfar Erlingsson (CoRR, 2025)