2023

• Automatic Bill of Materials. Preprint. 15 October 2023Preprint

• When Vision Fails: Text Attacks Against ViT and OCR. 2nd ACM Workshop on Large AI Systems and Models with Privacy and Security Analysis (LAMPS '25). 12 June 2023Workshop PaperBest Paper Award

• If it's Provably Secure, It Probably Isn't: Why Learning from Proof Failure is Hard. 28th International Workshop on Security Protocols (SPW '23). 8 May 2023Workshop Paper

• Boosting Big Brother: Attacking Search Engines with Encodings. 26th Symposium on Research in Attacks, Intrusions and Defenses (RAID '23). 27 April 2023Conference PaperBest Paper Award

Press Coverage: LBT

• Threat Models over Space and Time: A Case Study of E2EE Messaging Applications. 9th International Workshop on Privacy Engineering (IWPE '23). 13 January 2023Workshop Paper

2022

• Talking Trojan: Analyzing an Industry-Wide Disclosure. ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses (SCORED '22). 22 September 2022 Workshop Paper
  Press Coverage: LBT

2021

• Trojan Source: Invisible Vulnerabilities. 32nd USENIX Security Symposium (USENIX '23). 1 November 2021 Conference Paper
  Paper Website: trojansource.codes
  Press Coverage: Krebs, Schneier, CERT, Python, Rust, GitHub, LWN, ZDNet, Gizmodo, Computer Weekly, Bleeping Computer, RedHat, LBT

• Bad Characters: Imperceptible NLP Attacks. 43rd IEEE Symposium on Security and Privacy (S&P '22). 18 June 2021 Conference Paper
  Paper Website: imperceptible.ml
  Press Coverage: The Register, New York Tech, The Data Exchange

2020

• Three Paper Thursday: Vēnī, Vīdī, Vote-y – Election Security. Light Blue Touchpaper. 26 November 2020Blog Post