Efficient Finite-State Analysis for Large Security Protocols. - Vitaly Shmatikov; Ulrich Stern (CSFW, 1998)

Finite-State Analysis of SSL 3.0. - John C. Mitchell; Vitaly Shmatikov; Ulrich Stern (USENIX Security Symposium, 1998)

A Core Calculus of Classes and Mixins. - Viviana Bono; Amit Patel 001; Vitaly Shmatikov (ECOOP, 1999)

A Core Calculus of Classes and Objects. - Viviana Bono; John C. Mitchell; Amit Patel 001; Vitaly Shmatikov (MFPS, 1999)

Analysis of Abuse-Free Contract Signing. - Vitaly Shmatikov; John C. Mitchell (Financial Cryptography, 2000)

Analysis of a Fair Exchange Protocol. - Vitaly Shmatikov; John C. Mitchell (NDSS, 2000)

Finite-state analysis of security protocols. - Vitaly Shmatikov (2000)

Constraint solving for bounded-process cryptographic protocol analysis. - Jonathan K. Millen; Vitaly Shmatikov (CCS, 2001)

Probabilistic Analysis of Anonymity. - Vitaly Shmatikov (CSFW, 2002)

Negotiated Privacy: (Extended Abstract). - Stanislaw Jarecki; Patrick Lincoln; Vitaly Shmatikov (ISSS, 2002)

Finite-state analysis of two contract signing protocols. - Vitaly Shmatikov; John C. Mitchell (Theor. Comput. Sci., 2002)

Symbolic Protocol Analysis with Products and Diffie-Hellman Exponentiation. - Jonathan K. Millen; Vitaly Shmatikov (CSFW, 2003)

Intruder Deductions, Constraint Solving and Insecurity Decision in Presence of Exclusive or. - Hubert Comon-Lundh; Vitaly Shmatikov (LICS, 2003)

Decidable Analysis of Cryptographic Protocols with Products and Modular Exponentiation. - Vitaly Shmatikov (ESOP, 2004)

Handcuffing Big Brother: an Abuse-Resilient Transaction Escrow Scheme. - Stanislaw Jarecki; Vitaly Shmatikov (EUROCRYPT, 2004)

Synchronous Batching: From Cascades to Free Routes. - Roger Dingledine; Vitaly Shmatikov; Paul F. Syverson (Privacy Enhancing Technologies, 2004)

Privacy-Preserving Sharing and Correlation of Security Alerts. - Patrick Lincoln; Phillip A. Porras; Vitaly Shmatikov (USENIX Security Symposium, 2004)

Information Hiding, Anonymity and Privacy: a Modular Approach. - Dominic J. D. Hughes; Vitaly Shmatikov (J. Comput. Secur., 2004)

Probabilistic analysis of an anonymity system. - Vitaly Shmatikov (J. Comput. Secur., 2004)

Privacy-Preserving Graph Algorithms in the Semi-honest Model. - Justin Brickell; Vitaly Shmatikov (ASIACRYPT, 2005)

Obfuscated databases and group privacy. - Arvind Narayanan; Vitaly Shmatikov (CCS, 2005)

Fast dictionary attacks on passwords using time-space tradeoff. - Arvind Narayanan; Vitaly Shmatikov (CCS, 2005)

Game-Based Analysis of Denial-of-Service Prevention Protocols. - Ajay Mahimkar; Vitaly Shmatikov (CSFW, 2005)

Probabilistic Escrow of Financial Transactions with Cumulative Threshold Disclosure. - Stanislaw Jarecki; Vitaly Shmatikov (Financial Cryptography, 2005)

Probabilistic Polynomial-Time Semantics for a Protocol Security Logic. - Anupam Datta; Ante Derek; John C. Mitchell; Vitaly Shmatikov; Mathieu Turuani (ICALP, 2005)

Towards computationally sound symbolic analysis of key exchange protocols. - Prateek Gupta; Vitaly Shmatikov (IACR Cryptol. ePrint Arch., 2005)

Symbolic protocol analysis with an Abelian group operator or Diffie-Hellman exponentiation. - Jonathan K. Millen; Vitaly Shmatikov (J. Comput. Secur., 2005)

Reputation-based trust management. - Vitaly Shmatikov; Carolyn L. Talcott (J. Comput. Secur., 2005)

Contract signing, optimism, and advantage. - Rohit Chadha; John C. Mitchell; Andre Scedrov; Vitaly Shmatikov (J. Log. Algebraic Methods Program., 2005)

Timing Analysis in Low-Latency Mix Networks: Attacks and Defenses. - Vitaly Shmatikov; Ming-Hsiu Wang (ESORICS, 2006)

Efficient anonymity-preserving data collection. - Justin Brickell; Vitaly Shmatikov (KDD, 2006)

Large-scale collection and sanitization of network security data: risks and challenges. - Phillip A. Porras; Vitaly Shmatikov (NSPW, 2006)

Measuring relationship anonymity in mix networks. - Vitaly Shmatikov; Ming-Hsiu Wang (WPES, 2006)

How To Break Anonymity of the Netflix Prize Dataset - Arvind Narayanan; Vitaly Shmatikov (CoRR, 2006)

Key confirmation and adaptive corruptions in the protocol security logic. - Prateek Gupta; Vitaly Shmatikov (IACR Cryptol. ePrint Arch., 2006)

Security Analysis of Voice-over-IP Protocols. - Prateek Gupta; Vitaly Shmatikov (IACR Cryptol. ePrint Arch., 2006)

On the Limits of Point Function Obfuscation. - Arvind Narayanan; Vitaly Shmatikov (IACR Cryptol. ePrint Arch., 2006)

Analysis of probabilistic contract signing. - Gethin Norman; Vitaly Shmatikov (J. Comput. Secur., 2006)

Secure Verification of Location Claims with Simultaneous Distance Modification. - Vitaly Shmatikov; Ming-Hsiu Wang (ASIAN, 2007)

Privacy-preserving remote diagnostics. - Justin Brickell; Donald E. Porter; Vitaly Shmatikov; Emmett Witchel (CCS, 2007)

Efficient Two-Party Secure Computation on Committed Inputs. - Stanislaw Jarecki; Vitaly Shmatikov (EUROCRYPT, 2007)

dFence: Transparent Network-based Denial of Service Mitigation. - Ajay Mahimkar; Jasraj Dange; Vitaly Shmatikov; Harrick M. Vin; Yin Zhang 001 (NSDI, 2007)

Truth in advertising: lightweight verification of route integrity. - Edmund L. Wong; Praveen Balasubramanian; Lorenzo Alvisi; Mohamed G. Gouda; Vitaly Shmatikov (PODC, 2007)

Security against probe-response attacks in collaborative intrusion detection. - Vitaly Shmatikov; Ming-Hsiu Wang (LSAD@SIGCOMM, 2007)

The cost of privacy: destruction of data-mining utility in anonymized data publishing. - Justin Brickell; Vitaly Shmatikov (KDD, 2008)

Towards Practical Privacy for Genomic Computation. - Somesh Jha; Louis Kruger; Vitaly Shmatikov (SP, 2008)

Robust De-anonymization of Large Sparse Datasets. - Arvind Narayanan; Vitaly Shmatikov (SP, 2008)

Inputs of Coma: Static Detection of Denial-of-Service Vulnerabilities. - Richard M. Chang; Guofei Jiang; Franjo Ivancic; Sriram Sankaranarayanan 001; Vitaly Shmatikov (CSF, 2009)

Privacy-Preserving Classifier Learning. - Justin Brickell; Vitaly Shmatikov (Financial Cryptography, 2009)

De-anonymizing Social Networks. - Arvind Narayanan; Vitaly Shmatikov (SP, 2009)

Airavat: Security and Privacy for MapReduce. - Indrajit Roy 001; Srinath T. V. Setty; Ann Kilzer; Vitaly Shmatikov; Emmett Witchel (NSDI, 2010)

Efficient, context-sensitive detection of real-world semantic attacks. - Michael D. Bond; Varun Srivastava; Kathryn S. McKinley; Vitaly Shmatikov (PLAS, 2010)

The Hitchhiker's Guide to DNS Cache Poisoning. - Sooel Son; Vitaly Shmatikov (SecureComm, 2010)

Myths and fallacies of "personally identifiable information". - Arvind Narayanan; Vitaly Shmatikov (Commun. ACM, 2010)

Get off my prefix! the need for dynamic, gerontocratic policies in inter-domain routing. - Edmund L. Wong; Vitaly Shmatikov (DSN, 2011)

EVE: Verifying Correct Execution of Cloud-Hosted Web Applications. - Suman Jana; Vitaly Shmatikov (HotCloud, 2011)

RoleCast: finding missing security checks when you do not know what checks are. - Sooel Son; Kathryn S. McKinley; Vitaly Shmatikov (OOPSLA, 2011)

SAFERPHP: finding semantic vulnerabilities in PHP applications. - Sooel Son; Vitaly Shmatikov (PLAS, 2011)

A security policy oracle: detecting security holes using multiple API implementations. - Varun Srivastava; Michael D. Bond; Kathryn S. McKinley; Vitaly Shmatikov (PLDI, 2011)

"You Might Also Like: " Privacy Risks of Collaborative Filtering. - Joseph A. Calandrino; Ann Kilzer; Arvind Narayanan; Edward W. Felten; Vitaly Shmatikov (IEEE Symposium on Security and Privacy, 2011)

TxBox: Building Secure, Efficient Sandboxes with System Transactions. - Suman Jana; Donald E. Porter; Vitaly Shmatikov (IEEE Symposium on Security and Privacy, 2011)

Anonymity is not privacy: technical perspective. - Vitaly Shmatikov (Commun. ACM, 2011)

The most dangerous code in the world: validating SSL certificates in non-browser software. - Martin Georgiev; Subodh Iyengar; Suman Jana; Rishita Anubhai; Dan Boneh; Vitaly Shmatikov (CCS, 2012)

Eternal Sunshine of the Spotless Machine: Protecting Privacy with Ephemeral Channels. - Alan M. Dunn; Michael Z. Lee; Suman Jana; Sangman Kim; Mark Silberstein; Yuanzhong Xu; Vitaly Shmatikov; Emmett Witchel (OSDI, 2012)

Abusing File Processing in Malware Detectors for Fun and Profit. - Suman Jana; Vitaly Shmatikov (IEEE Symposium on Security and Privacy, 2012)

Memento: Learning Secrets from Process Footprints. - Suman Jana; Vitaly Shmatikov (IEEE Symposium on Security and Privacy, 2012)

Diglossia: detecting code injection attacks with precision and efficiency. - Sooel Son; Kathryn S. McKinley; Vitaly Shmatikov (CCS, 2013)

Privacy-preserving data exploration in genome-wide association studies. - Aaron Johnson 001; Vitaly Shmatikov (KDD, 2013)

Fix Me Up: Repairing Access-Control Bugs in Web Applications. - Sooel Son; Kathryn S. McKinley; Vitaly Shmatikov (NDSS, 2013)

The Postman Always Rings Twice: Attacking and Defending postMessage in HTML5 Websites. - Sooel Son; Vitaly Shmatikov (NDSS, 2013)

πBox: A Platform for Privacy-Preserving Apps. - Sangmin Lee; Edmund L. Wong; Deepak Goel; Mike Dahlin; Vitaly Shmatikov (NSDI, 2013)

The Parrot Is Dead: Observing Unobservable Network Communications. - Amir Houmansadr; Chad Brubaker; Vitaly Shmatikov (IEEE Symposium on Security and Privacy, 2013)

A Scanner Darkly: Protecting User Privacy from Perceptual Applications. - Suman Jana; Arvind Narayanan; Vitaly Shmatikov (IEEE Symposium on Security and Privacy, 2013)

Breaking and Fixing Origin-Based Access Control in Hybrid Web/Mobile Application Frameworks. - Martin Georgiev; Suman Jana; Vitaly Shmatikov (NDSS, 2014)

No Direction Home: The True Cost of Routing Around Decoys. - Amir Houmansadr; Edmund L. Wong; Vitaly Shmatikov (NDSS, 2014)

CloudTransport: Using Cloud Storage for Censorship-Resistant Networking. - Chad Brubaker; Amir Houmansadr; Vitaly Shmatikov (Privacy Enhancing Technologies, 2014)

Using Frankencerts for Automated Adversarial Testing of Certificate Validation in SSL/TLS Implementations. - Chad Brubaker; Suman Jana; Baishakhi Ray; Sarfraz Khurshid; Vitaly Shmatikov (IEEE Symposium on Security and Privacy, 2014)

Privacy-Preserving Deep Learning. - Reza Shokri; Vitaly Shmatikov (CCS, 2015)

Rethinking Security of Web-Based System Applications. - Martin Georgiev; Suman Jana; Vitaly Shmatikov (WWW, 2015)

No Escape From Reality: Security and Privacy of Augmented Reality Browsers. - Richard McPherson; Suman Jana; Vitaly Shmatikov (WWW, 2015)

What Mobile Ads Know About Mobile Users. - Sooel Son; Daehyeok Kim; Vitaly Shmatikov (NDSS, 2016)

Can we still avoid automatic face detection? - Michael J. Wilber; Vitaly Shmatikov; Serge J. Belongie (WACV, 2016)

Towards a Privacy Research Roadmap for the Computing Community. - Lorrie Faith Cranor; Tal Rabin; Vitaly Shmatikov; Salil P. Vadhan; Daniel J. Weitzner (CoRR, 2016)

Gone in Six Characters: Short URLs Considered Harmful for Cloud Services. - Martin Georgiev; Vitaly Shmatikov (CoRR, 2016)

Defeating Image Obfuscation with Deep Learning. - Richard McPherson; Reza Shokri; Vitaly Shmatikov (CoRR, 2016)

Membership Inference Attacks against Machine Learning Models. - Reza Shokri; Marco Stronati; Vitaly Shmatikov (CoRR, 2016)

Breaking Web Applications Built On Top of Encrypted Data. - Paul Grubbs; Richard McPherson; Muhammad Naveed 001; Thomas Ristenpart; Vitaly Shmatikov (IACR Cryptol. ePrint Arch., 2016)

CovertCast: Using Live Streaming to Evade Internet Censorship. - Richard McPherson; Amir Houmansadr; Vitaly Shmatikov (Proc. Priv. Enhancing Technol., 2016)

EARP: Principled Storage, Sharing, and Protection for Mobile Apps. - Yuanzhong Xu; Tyler Hunt; Youngjin Kwon; Martin Georgiev; Vitaly Shmatikov; Emmett Witchel (GetMobile Mob. Comput. Commun., 2016)

Using Program Analysis to Synthesize Sensor Spoofing Attacks. - Ivan Pustogarov; Thomas Ristenpart; Vitaly Shmatikov (AsiaCCS, 2017)

Machine Learning Models that Remember Too Much. - Congzheng Song; Thomas Ristenpart; Vitaly Shmatikov (CCS, 2017)

Membership Inference Attacks Against Machine Learning Models. - Reza Shokri; Marco Stronati; Congzheng Song; Vitaly Shmatikov (IEEE Symposium on Security and Privacy, 2017)

Beauty and the Burst: Remote Identification of Encrypted Video Streams. - Roei Schuster; Vitaly Shmatikov; Eran Tromer (USENIX Security Symposium, 2017)

Why Your Encrypted Database Is Not Secure. - Paul Grubbs; Thomas Ristenpart; Vitaly Shmatikov (IACR Cryptol. ePrint Arch., 2017)

Situational Access Control in the Internet of Things. - Roei Schuster; Vitaly Shmatikov; Eran Tromer (CCS, 2018)

Fooling OCR Systems with Adversarial Text Images. - Congzheng Song; Vitaly Shmatikov (CoRR, 2018)

Chiron: Privacy-preserving Machine Learning as a Service. - Tyler Hunt; Congzheng Song; Reza Shokri; Vitaly Shmatikov; Emmett Witchel (CoRR, 2018)

Inference Attacks Against Collaborative Learning. - Luca Melis; Congzheng Song; Emiliano De Cristofaro; Vitaly Shmatikov (CoRR, 2018)

The Natural Auditor: How To Tell If Someone Used Your Words To Train Their Model. - Congzheng Song; Vitaly Shmatikov (CoRR, 2018)

The Tao of Inference in Privacy-Protected Databases. - Vincent Bindschaedler; Paul Grubbs; David Cash; Thomas Ristenpart; Vitaly Shmatikov (Proc. VLDB Endow., 2018)

Auditing Data Provenance in Text-Generation Models. - Congzheng Song; Vitaly Shmatikov (KDD, 2019)

Differential Privacy Has Disparate Impact on Model Accuracy. - Eugene Bagdasaryan; Omid Poursaeed; Vitaly Shmatikov (NeurIPS, 2019)

Exploiting Unintended Feature Leakage in Collaborative Learning. - Luca Melis; Congzheng Song; Emiliano De Cristofaro; Vitaly Shmatikov (IEEE Symposium on Security and Privacy, 2019)

Differential Privacy Has Disparate Impact on Model Accuracy. - Eugene Bagdasaryan; Vitaly Shmatikov (CoRR, 2019)

How To Backdoor Federated Learning. - Eugene Bagdasaryan; Andreas Veit; Yiqing Hua; Deborah Estrin; Vitaly Shmatikov (AISTATS, 2020)

Adversarial Semantic Collisions. - Congzheng Song; Alexander M. Rush; Vitaly Shmatikov (EMNLP (1), 2020)

Overlearning Reveals Sensitive Attributes. - Congzheng Song; Vitaly Shmatikov (ICLR, 2020)

De-Anonymizing Text by Fingerprinting Language Generation. - Zhen Sun; Roei Schuster; Vitaly Shmatikov (NeurIPS, 2020)

Humpty Dumpty: Controlling Word Meanings via Corpus Poisoning. - Roei Schuster; Tal Schuster; Yoav Meri; Vitaly Shmatikov (SP, 2020)

Salvaging Federated Learning by Local Adaptation. - Tao Yu; Eugene Bagdasaryan; Vitaly Shmatikov (CoRR, 2020)

Blind Backdoors in Deep Learning Models. - Eugene Bagdasaryan; Vitaly Shmatikov (USENIX Security Symposium, 2021)

You Autocomplete Me: Poisoning Vulnerabilities in Neural Code Completion. - Roei Schuster; Congzheng Song; Eran Tromer; Vitaly Shmatikov (USENIX Security Symposium, 2021)

BigFoot: Exploiting and Mitigating Leakage in Encrypted Write-Ahead Logs. - Jialing Pei; Vitaly Shmatikov (CoRR, 2021)

Spinning Language Models for Propaganda-As-A-Service. - Eugene Bagdasaryan; Vitaly Shmatikov (CoRR, 2021)

Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures. - Eugene Bagdasaryan; Vitaly Shmatikov (SP, 2022)

Text Embeddings Reveal (Almost) As Much As Text. - John X. Morris; Volodymyr Kuleshov; Vitaly Shmatikov; Alexander M. Rush (EMNLP, 2023)

Telepath: A Minecraft-based Covert Communication System. - Zhen Sun; Vitaly Shmatikov (SP, 2023)

Hyperparameter Search Is All You Need For Training-Agnostic Backdoor Robustness. - Eugene Bagdasaryan; Vitaly Shmatikov (CoRR, 2023)

(Ab)using Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs. - Eugene Bagdasaryan; Tsung-Yin Hsieh; Ben Nassi; Vitaly Shmatikov (CoRR, 2023)

Ceci n'est pas une pomme: Adversarial Illusions in Multi-Modal Embeddings. - Eugene Bagdasaryan; Vitaly Shmatikov (CoRR, 2023)

Mithridates: Auditing and Boosting Backdoor Resistance of Machine Learning Pipelines. - Eugene Bagdasarian; Vitaly Shmatikov (CCS, 2024)

Extracting Prompts by Inverting LLM Outputs. - Collin Zhang; John X. Morris; Vitaly Shmatikov (EMNLP, 2024)

Language Model Inversion. - John X. Morris; Wenting Zhao; Justin T. Chiu; Vitaly Shmatikov; Alexander M. Rush (ICLR, 2024)

Adversarial Illusions in Multi-Modal Embeddings. - Tingwei Zhang; Rishi D. Jha; Eugene Bagdasaryan; Vitaly Shmatikov (USENIX Security Symposium, 2024)

Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents. - Avital Shafran; Roei Schuster; Vitaly Shmatikov (CoRR, 2024)

Soft Prompts Go Hard: Steering Visual Language Models with Hidden Meta-Instructions. - Tingwei Zhang; Collin Zhang; John X. Morris; Eugene Bagdasaryan; Vitaly Shmatikov (CoRR, 2024)

Differential Degradation Vulnerabilities in Censorship Circumvention Systems. - Zhen Sun; Vitaly Shmatikov (CoRR, 2024)

Controlled Generation of Natural Adversarial Documents for Stealthy Retrieval Poisoning. - Collin Zhang; Tingwei Zhang; Vitaly Shmatikov (CoRR, 2024)

Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy, Research, and Practice. - A. Feder Cooper; Christopher A. Choquette-Choo; Miranda Bogen; Matthew Jagielski; Katja Filippova; Ken Ziyu Liu; Alexandra Chouldechova; Jamie Hayes; Yangsibo Huang; Niloofar Mireshghallah; Ilia Shumailov; Eleni Triantafillou; et al. (CoRR, 2024)

Adversarial Hubness in Multi-Modal Retrieval. - Tingwei Zhang; Fnu Suya; Rishi D. Jha; Collin Zhang; Vitaly Shmatikov (CoRR, 2024)

Data Isotopes for Data Provenance in DNNs. - Emily Wenger; Xiuyu Li; Ben Y. Zhao; Vitaly Shmatikov (Proc. Priv. Enhancing Technol., 2024)

Rerouting LLM Routers. - Avital Shafran; Roei Schuster; Thomas Ristenpart; Vitaly Shmatikov (CoRR, 2025)

Multi-Agent Systems Execute Arbitrary Malicious Code. - Harold Triedman; Rishi D. Jha; Vitaly Shmatikov (CoRR, 2025)

Universal Zero-shot Embedding Inversion. - Collin Zhang; John X. Morris; Vitaly Shmatikov (CoRR, 2025)

Harnessing the Universal Geometry of Embeddings. - Rishi D. Jha; Collin Zhang; Vitaly Shmatikov; John X. Morris (CoRR, 2025)

Approximating Language Model Training Data from Weights. - John X. Morris; Junjie Oscar Yin; Woojeong Kim; Vitaly Shmatikov; Alexander M. Rush (CoRR, 2025)