Cover Image

Privacy Side Channels in Machine Learning Systems

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Debenedetti, Edoardo, Severi, Giorgio, Carlini, Nicholas, Choquette-Choo, Christopher A., Jagielski, Matthew, Nasr, Milad, Wallace, Eric, Tramèr, Florian
Format:	Preprint
Published:	2023
Subjects:	Cryptography and Security Machine Learning
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

LLMs unlock new paths to monetizing exploits
by: Carlini, Nicholas, et al.
Published: (2025)

AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses
by: Carlini, Nicholas, et al.
Published: (2025)

Evading Black-box Classifiers Without Breaking Eggs
by: Debenedetti, Edoardo, et al.
Published: (2023)

Auditing Private Prediction
by: Chadha, Karan, et al.
Published: (2024)

Poisoning Web-Scale Training Datasets is Practical
by: Carlini, Nicholas, et al.
Published: (2023)

Adversarial Search Engine Optimization for Large Language Models
by: Nestaas, Fredrik, et al.
Published: (2024)

Phantom: General Backdoor Attacks on Retrieval Augmented Language Generation
by: Chaudhari, Harsh, et al.
Published: (2024)

Are aligned neural networks adversarially aligned?
by: Carlini, Nicholas, et al.
Published: (2023)

Exploring and Mitigating Adversarial Manipulation of Voting-Based Leaderboards
by: Huang, Yangsibo, et al.
Published: (2025)

Remote Timing Attacks on Efficient Language Model Inference
by: Carlini, Nicholas, et al.
Published: (2024)

Privacy Auditing of Large Language Models
by: Panda, Ashwinee, et al.
Published: (2025)

Query-Based Adversarial Prompt Generation
by: Hayase, Jonathan, et al.
Published: (2024)

Stealing Part of a Production Language Model
by: Carlini, Nicholas, et al.
Published: (2024)

Position: Considerations for Differentially Private Learning with Large-Scale Public Pretraining
by: Tramèr, Florian, et al.
Published: (2022)

Privacy Ripple Effects from Adding or Removing Personal Information in Language Model Training
by: Borkar, Jaydeep, et al.
Published: (2025)

Adversarial Perturbations Cannot Reliably Protect Artists From Generative AI
by: Hönig, Robert, et al.
Published: (2024)

Evaluations of Machine Learning Privacy Defenses are Misleading
by: Aerni, Michael, et al.
Published: (2024)

The Last Iterate Advantage: Empirical Auditing and Principled Heuristic Analysis of Differentially Private SGD
by: Steinke, Thomas, et al.
Published: (2024)

Defeating Prompt Injections by Design
by: Debenedetti, Edoardo, et al.
Published: (2025)

Synthetic Query Generation for Privacy-Preserving Deep Retrieval Systems using Differentially Private Language Models
by: Carranza, Aldo Gael, et al.
Published: (2023)

AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents
by: Debenedetti, Edoardo, et al.
Published: (2024)

Adversarial ML Problems Are Getting Harder to Solve and to Evaluate
by: Rando, Javier, et al.
Published: (2025)

Near Exact Privacy Amplification for Matrix Mechanisms
by: Choquette-Choo, Christopher A., et al.
Published: (2024)

Privacy Amplification for Matrix Mechanisms
by: Choquette-Choo, Christopher A., et al.
Published: (2023)

On Evaluating the Durability of Safeguards for Open-Weight LLMs
by: Qi, Xiangyu, et al.
Published: (2024)

Cascading Adversarial Bias from Injection to Distillation in Language Models
by: Chaudhari, Harsh, et al.
Published: (2025)

Privacy Backdoors: Stealing Data with Corrupted Pretrained Models
by: Feng, Shanglun, et al.
Published: (2024)

Optimal Rates for $O(1)$-Smooth DP-SCO with a Single Epoch and Large Batches
by: Choquette-Choo, Christopher A., et al.
Published: (2024)

Thought-Transfer: Indirect Targeted Poisoning Attacks on Chain-of-Thought Reasoning Models
by: Chaudhari, Harsh, et al.
Published: (2026)

Language Models May Verbatim Complete Text They Were Not Explicitly Trained On
by: Liu, Ken Ziyu, et al.
Published: (2025)

Covert Attacks on Machine Learning Training in Passively Secure MPC
by: Jagielski, Matthew, et al.
Published: (2025)

Evaluating the Robustness of the "Ensemble Everything Everywhere" Defense
by: Zhang, Jie, et al.
Published: (2024)

Persistent Pre-Training Poisoning of LLMs
by: Zhang, Yiming, et al.
Published: (2024)

Large-scale online deanonymization with LLMs
by: Lermen, Simon, et al.
Published: (2026)

Machine Learning Power Side-Channel Attack on SNOW-V
by: Deepak, et al.
Published: (2025)

JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models
by: Chao, Patrick, et al.
Published: (2024)

Black-Box Privacy Attacks on Shared Representations in Multitask Learning
by: Abascal, John, et al.
Published: (2025)

SNPeek: Side-Channel Analysis for Privacy Applications on Confidential VMs
by: Zhang, Ruiyi, et al.
Published: (2025)

The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections
by: Nasr, Milad, et al.
Published: (2025)

Detection of Dark Web Threats Using Machine Learning and Image Processing
by: Medipelly, Swetha, et al.
Published: (2024)