Publication

The following list of publications may not be up-to-date. Please refer to the Google Scholar pages of our team members for the most recent information.

Conference and journal articles

2026

• Evaluating concept filtering defenses against child sexual abuse material generation by text-to-image models
  Ana-Maria Creţu, Klim Kireev, Amro Abdalla, Wisdom Obinna, Raphael Meier, Sarah Adel Bargal, Elissa M. Redmiles, and Carmela Troncoso
  2026 IEEE Symposium on Security and Privacy (SP), 2026.
  • BibTeX

  @inproceedings{crectu2026evaluating,
    title = {Evaluating concept filtering defenses against child sexual abuse material generation by text-to-image models},
    author = {Cre{\c{t}}u, Ana-Maria and Kireev, Klim and Abdalla, Amro and Obinna, Wisdom and Meier, Raphael and Bargal, Sarah Adel and Redmiles, Elissa M and Troncoso, Carmela},
    booktitle = {2026 IEEE Symposium on Security and Privacy (SP)},
    year = {2026},
    organization = {IEEE}
  }
  

• Should I use Synthetic Data for That? An Analysis of the Suitability of Synthetic Data for Data Sharing and Augmentation
  Bogdan Kulynych, Theresa Stadler, Jean Louis Raisaro, and Carmela Troncoso
  arXiv preprint arXiv:2602.03791, 2026.
  • BibTeX

  @inproceedings{kulynych2026should,
    title = {Should I use Synthetic Data for That? An Analysis of the Suitability of Synthetic Data for Data Sharing and Augmentation},
    author = {Kulynych, Bogdan and Stadler, Theresa and Raisaro, Jean Louis and Troncoso, Carmela},
    booktitle = {arXiv preprint arXiv:2602.03791},
    year = {2026}
  }
  

• Website fingerprinting on Nym: Attacks and Defenses
  Eric Jollès, Simon Wicky, Ania M. Piotrowska, Harry Halpin, and Carmela Troncoso
  Proceedings on Privacy Enhancing Technologies, 2026.
  • BibTeX
  • Publication

  @inproceedings{jolles2026website,
    title = {Website fingerprinting on Nym: Attacks and Defenses},
    author = {Joll{\`e}s, Eric and Wicky, Simon and Piotrowska, Ania M and Halpin, Harry and Troncoso, Carmela},
    booktitle = {Proceedings on Privacy Enhancing Technologies},
    year = {2026},
    url = {https://petsymposium.org/popets/2026/popets-2026-0055.pdf}
  }
  

• End-to-End Encrypted Collaborative Documents
  Christian Knabenhans, Zayd Maradni, and Carmela Troncoso
  USENIX Security Symposium (USENIX Security 26), 2026.
  • BibTeX
  • Publication
  
  award Internet Defense Prize, Distinguished Paper Runner-Up

  @inproceedings{knabenhans2026end,
    title = {{End-to-End Encrypted Collaborative Documents}},
    author = {Knabenhans, Christian and Maradni, Zayd and Troncoso, Carmela},
    booktitle = {USENIX Security Symposium (USENIX Security 26)},
    year = {2026},
    award = {Internet Defense Prize, Distinguished Paper Runner-Up},
    url = {https://www.usenix.org/system/files/usenixsecurity26-knabenhans.pdf}
  }
  

• Humanitarian Aid Distribution with Privacy-Preserving Assessment Capabilities
  Christian Knabenhans, Lucy Qin, Justinas Sukaitis, Vincent Graf Narbel, and Carmela Troncoso
  Proceedings on Privacy Enhancing Technologies, 2026.
  • BibTeX
  • Publication

  @inproceedings{knabenhans2026humanitarian,
    title = {Humanitarian Aid Distribution with Privacy-Preserving Assessment Capabilities},
    author = {Knabenhans, Christian and Qin, Lucy and Sukaitis, Justinas and Narbel, Vincent Graf and Troncoso, Carmela},
    booktitle = {Proceedings on Privacy Enhancing Technologies},
    year = {2026},
    url = {https://petsymposium.org/popets/2026/popets-2026-0051.pdf}
  }
  

2025

• Reimagining Wearable-Based Digital Contact Tracing: Insights from Kenya and Côte d’Ivoire
  Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems, New York, NY, USA, 2025.
  • BibTeX
  • Publication

  @inproceedings{Salehzadeh2025Reimagining,
    author = {},
    title = {Reimagining Wearable-Based Digital Contact Tracing: Insights from Kenya and Côte d'Ivoire},
    year = {2025},
    publisher = {Association for Computing Machinery},
    address = {New York, NY, USA},
    url = {https://dl.acm.org/doi/10.1145/3706598.3713817},
    booktitle = {Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems},
    location = {Yokohama, Japan},
    series = {CHI '25}
  }
  

• A telegram dataset of propaganda and its moderation
  Klim Kireev, Yevhen Mykhno, Carmela Troncoso, and Rebekah Overdorf
  Proceedings of the International AAAI Conference on Web and Social Media, 2025, vol. 19.
  • BibTeX

  @inproceedings{kireev2025telegram,
    title = {A telegram dataset of propaganda and its moderation},
    author = {Kireev, Klim and Mykhno, Yevhen and Troncoso, Carmela and Overdorf, Rebekah},
    booktitle = {Proceedings of the International AAAI Conference on Web and Social Media},
    volume = {19},
    year = {2025}
  }
  

• Characterizing and Detecting {Propaganda-Spreading} Accounts on Telegram
  Klim Kireev, Yevhen Mykhno, Carmela Troncoso, and Rebekah Overdorf
  USENIX Security Symposium (USENIX), 2025, pp. 161–180.
  • BibTeX
  
  award Distinguished Paper Award at USENIX Security 2025

  @inproceedings{kireev2025characterizing,
    title = {Characterizing and Detecting $\{$Propaganda-Spreading$\}$ Accounts on Telegram},
    author = {Kireev, Klim and Mykhno, Yevhen and Troncoso, Carmela and Overdorf, Rebekah},
    booktitle = {USENIX Security Symposium (USENIX)},
    year = {2025},
    pages = {161--180},
    award = {Distinguished Paper Award at USENIX Security 2025}
  }
  

• A low-cost privacy-preserving digital wallet for humanitarian aid distribution
  Eva Luvison, Sylvain Chatel, Justinas Sukaitis, Vincent Graf Narbel, Carmela Troncoso, and Wouter Lueks
  2025 IEEE Symposium on Security and Privacy (SP), 2025.
  • BibTeX

  @inproceedings{luvison2025low,
    title = {A low-cost privacy-preserving digital wallet for humanitarian aid distribution},
    author = {Luvison, Eva and Chatel, Sylvain and Sukaitis, Justinas and Narbel, Vincent Graf and Troncoso, Carmela and Lueks, Wouter},
    booktitle = {2025 IEEE Symposium on Security and Privacy (SP)},
    year = {2025},
    organization = {IEEE}
  }
  

• On the Conflict Between Robustness and Learning in Collaborative Machine Learning
  Mathilde Raynal and Carmela Troncoso
  2025 IEEE Symposium on Security and Privacy (SP), 2025.
  • BibTeX
  • Publication

  @inproceedings{11023472,
    author = {Raynal, Mathilde and Troncoso, Carmela},
    booktitle = {2025 IEEE Symposium on Security and Privacy (SP)},
    title = {On the Conflict Between Robustness and Learning in Collaborative Machine Learning},
    year = {2025},
    keywords = {Training;Privacy;Collaboration;Training data;Robustness;Data models;Multi-party computation;Medical diagnosis;Protection;Recommender systems},
    doi = {10.1109/SP61157.2025.00249}
  }
  

• Double-Edged Shield: On the Fingerprintability of Customized Ad Blockers
  Saiid El Hajj Chehade, Ben Stock, and Carmela Troncoso
  USENIX Security Symposium (USENIX), 2025.
  • BibTeX

  @inproceedings{flfp2025saiid,
    title = {Double-Edged Shield: On the Fingerprintability of Customized Ad Blockers},
    author = {El Hajj Chehade, Saiid and Stock, Ben and Troncoso, Carmela},
    booktitle = {USENIX Security Symposium (USENIX)},
    year = {2025},
    shorttitle = {FLFP},
    shortdescription = {Ad-blocker Filter-list Fingerprinting},
    keywords = {privacy;web;ad blocking;filter lists;browser fingerprinting}
  }
  

• 403 Forbidden? Ethically Evaluating Broken Access Control in the Wild
  Saiid El Hajj Chehade, Florian Hantke, and Ben Stock
  2025 IEEE Symposium on Security and Privacy (SP), 2025.
  • BibTeX

  @inproceedings{vsf2025saiid,
    title = {{403 Forbidden? Ethically Evaluating Broken Access Control in the Wild}},
    author = {El Hajj Chehade, Saiid and Hantke, Florian and Stock, Ben},
    booktitle = {2025 IEEE Symposium on Security and Privacy (SP)},
    year = {2025},
    shorttitle = {403 Forbidden},
    shortdescription = {Ethical Access Control Testing in the Wild},
    keywords = {access control; web security; ethical server-side scanning; responsible disclosure}
  }
  

2024

• Holding Secrets Accountable: Auditing Privacy-Preserving Machine Learning
  Hidde Lycklama, Alexander Viand, Nicolas Küchler, Christian Knabenhans, and Anwar Hithnawi
  33rd USENIX Security Symposium, USENIX Security 2024, Philadelphia, PA, USA, August 14-16, 2024, 2024.
  • BibTeX
  • Publication

  @inproceedings{arc,
    author = {Lycklama, Hidde and Viand, Alexander and K{\"{u}}chler, Nicolas and Knabenhans, Christian and Hithnawi, Anwar},
    editor = {Balzarotti, Davide and Xu, Wenyuan},
    title = {Holding Secrets Accountable: Auditing Privacy-Preserving Machine Learning},
    booktitle = {33rd {USENIX} Security Symposium, {USENIX} Security 2024, Philadelphia,
                      PA, USA, August 14-16, 2024},
    publisher = {{USENIX} Association},
    year = {2024},
    url = {https://www.usenix.org/conference/usenixsecurity24/presentation/lycklama},
    timestamp = {Mon, 22 Jul 2024 17:10:49 +0200},
    biburl = {https://dblp.org/rec/conf/uss/LycklamaVKKH24.bib},
    bibsource = {dblp computer science bibliography, https://dblp.org}
  }
  

• Designing a Data-Driven Survey System: Leveraging Participants’ Online Data to Personalize Surveys
  Lev Velykoivanenko, Kavous Salehzadeh Niksirat, Stefan Teofanovic, Bertil Chapuis, Michelle L. Mazurek, and Kévin Huguenin
  Proceedings of the CHI Conference on Human Factors in Computing Systems, New York, NY, USA, 2024, pp. 1–22.
  • BibTeX
  • Publication

  @inproceedings{velykoivanenko_designing_2024,
    title = {Designing a {{Data-Driven Survey System}}: {{Leveraging Participants}}' {{Online Data}} to {{Personalize Surveys}}},
    shorttitle = {Designing a {{Data-Driven Survey System}}},
    booktitle = {Proceedings of the {{CHI Conference}} on {{Human Factors}} in {{Computing Systems}}},
    author = {Velykoivanenko, Lev and Salehzadeh Niksirat, Kavous and Teofanovic, Stefan and Chapuis, Bertil and Mazurek, Michelle L. and Huguenin, K{\'e}vin},
    year = {2024},
    month = may,
    series = {{{CHI}} '24},
    pages = {1--22},
    publisher = {Association for Computing Machinery},
    address = {New York, NY, USA},
    doi = {10.1145/3613904.3642572},
    url = {https://dl.acm.org/doi/10.1145/3613904.3642572},
    urldate = {2024-09-09},
    isbn = {9798400703300}
  }
  

• Know Their Customers: An Empirical Study of Online Account Enumeration Attacks
  Maël Maceiras, Kavous Salehzadeh Niksirat, Gaël Bernard, Benoit Garbinato, Mauro Cherubini, Mathias Humbert, and Kévin Huguenin
  ACM Trans. Web, vol. 18, no. 3, pp. 37:1–37:36, Jun. 2024.
  • BibTeX
  • Publication

  @article{maceiras_know_2024,
    title = {Know Their {{Customers}}: {{An Empirical Study}} of {{Online Account Enumeration Attacks}}},
    shorttitle = {Know Their {{Customers}}},
    author = {Maceiras, Ma{\"e}l and Salehzadeh Niksirat, Kavous and Bernard, Ga{\"e}l and Garbinato, Benoit and Cherubini, Mauro and Humbert, Mathias and Huguenin, K{\'e}vin},
    year = {2024},
    month = jun,
    journal = {ACM Trans. Web},
    volume = {18},
    number = {3},
    pages = {37:1--37:36},
    issn = {1559-1131},
    doi = {10.1145/3664201},
    url = {https://dl.acm.org/doi/10.1145/3664201},
    urldate = {2024-09-09}
  }
  

• Our Data, Our Solutions: A Participatory Approach for Enhancing Privacy in Wearable Activity Tracker Third-Party Apps
  Noé Zufferey, Kavous Salehzadeh Niksirat, Mathias Humbert, and Kévin Huguenin
  Proceedings on Privacy Enhancing Technologies, 2024.
  • BibTeX
  • Publication

  @article{zufferey_our_2024,
    title = {Our {{Data}}, {{Our Solutions}}: {{A Participatory Approach}} for {{Enhancing Privacy}} in {{Wearable Activity Tracker Third-Party Apps}}},
    shorttitle = {Our {{Data}}, {{Our Solutions}}},
    author = {Zufferey, No{\'e} and Niksirat, Kavous Salehzadeh and Humbert, Mathias and Huguenin, K{\'e}vin},
    year = {2024},
    journal = {Proceedings on Privacy Enhancing Technologies},
    issn = {2299-0984},
    url = {https://petsymposium.org/popets/2024/popets-2024-0139.php},
    urldate = {2024-09-09}
  }
  

• Security and Privacy with Second-Hand Storage Devices: A User-Centric Perspective from Switzerland
  Kavous Salehzadeh Niksirat, Diana Korka, Quentin Jacquemin, Céline Vanini, Mathias Humbert, Mauro Cherubini, Sylvain Métille, and Kévin Huguenin
  Proceedings on Privacy Enhancing Technologies, 2024.
  • BibTeX
  • Publication

  @article{niksirat_security_2024,
    title = {Security and {{Privacy}} with {{Second-Hand Storage Devices}}: {{A User-Centric Perspective}} from {{Switzerland}}},
    shorttitle = {Security and {{Privacy}} with {{Second-Hand Storage Devices}}},
    author = {Niksirat, Kavous Salehzadeh and Korka, Diana and Jacquemin, Quentin and Vanini, C{\'e}line and Humbert, Mathias and Cherubini, Mauro and M{\'e}tille, Sylvain and Huguenin, K{\'e}vin},
    year = {2024},
    journal = {Proceedings on Privacy Enhancing Technologies},
    issn = {2299-0984},
    url = {https://petsymposium.org/popets/2024/popets-2024-0057.php},
    urldate = {2024-09-09}
  }
  

• Shadow Health-Related Data: Definition, Categorization, and User Perspectives
  Yamane El Zein, Kavous Salehzadeh Niksirat, Noé Zufferey, Mathias Humbert, and Kévin Huguenin
  Proceedings of the European Symposium on Usable Security (EuroUSEC), Karlstad, Sweden, 2024.
  • BibTeX
  • Publication

  @inproceedings{el_zein_shadow_2024,
    title = {Shadow {{Health-Related Data}}: {{Definition}}, {{Categorization}}, and {{User Perspectives}}},
    shorttitle = {Shadow {{Health-Related Data}}},
    booktitle = {Proceedings of the {{European Symposium}} on {{Usable Security}} ({{EuroUSEC}})},
    author = {El Zein, Yamane and Salehzadeh Niksirat, Kavous and Zufferey, No{\'e} and Humbert, Mathias and Huguenin, K{\'e}vin},
    year = {2024},
    month = sep,
    address = {Karlstad, Sweden},
    doi = {10.1145/3688459.3688462},
    url = {https://hal.science/hal-04668582},
    urldate = {2024-09-09},
    keywords = {health-related data,privacy,user study}
  }
  

• Wearable Activity Trackers: A Survey on Utility, Privacy, and Security
  Kavous Salehzadeh Niksirat, Lev Velykoivanenko, Noé Zufferey, Mauro Cherubini, Kévin Huguenin, and Mathias Humbert
  ACM Comput. Surv., vol. 56, no. 7, pp. 183:1–183:40, Apr. 2024.
  • BibTeX
  • Publication

  @article{salehzadeh_niksirat_wearable_2024,
    title = {Wearable {{Activity Trackers}}: {{A Survey}} on {{Utility}}, {{Privacy}}, and {{Security}}},
    shorttitle = {Wearable {{Activity Trackers}}},
    author = {Salehzadeh Niksirat, Kavous and Velykoivanenko, Lev and Zufferey, No{\'e} and Cherubini, Mauro and Huguenin, K{\'e}vin and Humbert, Mathias},
    year = {2024},
    month = apr,
    journal = {ACM Comput. Surv.},
    volume = {56},
    number = {7},
    pages = {183:1--183:40},
    issn = {0360-0300},
    doi = {10.1145/3645091},
    url = {https://dl.acm.org/doi/10.1145/3645091},
    urldate = {2024-09-09}
  }
  

• vFHE: Verifiable Fully Homomorphic Encryption
  Christian Knabenhans, Alexander Viand, Antonio Merino-Gallardo, and Anwar Hithnawi
  Proceedings of the 12th Workshop on Encrypted Computing & Applied Homomorphic Cryptography, Salt Lake City, U.S.A., 14 October 2024, 2024.
  • BibTeX
  • Publication

  @inproceedings{vfhe,
    author = {Knabenhans, Christian and Viand, Alexander and Merino-Gallardo, Antonio and Hithnawi, Anwar},
    editor = {Bergamaschi, Flavio and Costache, Anamaria and Rohloff, Kurt},
    title = {{vFHE}: Verifiable Fully Homomorphic Encryption},
    booktitle = {Proceedings of the 12th Workshop on Encrypted Computing {\&} Applied
                      Homomorphic Cryptography, Salt Lake City, U.S.A., 14 October 2024},
    publisher = {{ACM}},
    year = {2024},
    url = {https://doi.org/110.1145/3689945.3694806},
    doi = {10.1145/3689945.3694806}
  }
  

• Universal Neural-Cracking-Machines: Self-Configurable Password Models from Auxiliary Data
  D. Pasquini, G. Ateniese, and C. Troncoso
  2024 IEEE Symposium on Security and Privacy (SP), Los Alamitos, CA, USA, 2024, pp. 32–32.
  • BibTeX
  • Publication

  @inproceedings{pasquini_carmela_neural,
    author = {Pasquini, D. and Ateniese, G. and Troncoso, C.},
    booktitle = {2024 IEEE Symposium on Security and Privacy (SP)},
    title = {Universal Neural-Cracking-Machines: Self-Configurable Password Models from Auxiliary Data},
    year = {2024},
    issn = {2375-1207},
    pages = {32-32},
    keywords = {password guessing;deep learning;differential privacy},
    doi = {10.1109/SP54263.2024.00032},
    url = {https://doi.ieeecomputersociety.org/10.1109/SP54263.2024.00032},
    publisher = {IEEE Computer Society},
    address = {Los Alamitos, CA, USA},
    month = may
  }
  

• Breach Extraction Attacks: Exposing and Addressing the Leakage in Second Generation Compromised Credential Checking Services
  D. Pasquini, D. Francati, G. Ateniese, and E. M. Kornaropoulos
  2024 IEEE Symposium on Security and Privacy (SP), Los Alamitos, CA, USA, 2024, pp. 114–114.
  • BibTeX
  • Publication

  @inproceedings{pasquini_kornaropoulos_breach,
    author = {Pasquini, D. and Francati, D. and Ateniese, G. and Kornaropoulos, E. M.},
    booktitle = {2024 IEEE Symposium on Security and Privacy (SP)},
    title = {Breach Extraction Attacks: Exposing and Addressing the Leakage in Second Generation Compromised Credential Checking Services},
    year = {2024},
    issn = {2375-1207},
    pages = {114-114},
    doi = {10.1109/SP54263.2024.00114},
    url = {https://doi.ieeecomputersociety.org/10.1109/SP54263.2024.00114},
    publisher = {IEEE Computer Society},
    address = {Los Alamitos, CA, USA},
    month = may
  }
  

• SINBAD: Saliency-informed detection of breakage caused by ad blocking
  Saiid El Hajj Chehade, Sandra Siby, and Carmela Troncoso
  2024 IEEE Symposium on Security and Privacy (SP), Los Alamitos, CA, USA, 2024, pp. 211–211.
  • BibTeX
  • Publication

  @inproceedings{saiid_sandra_sinbad,
    author = {El Hajj Chehade, Saiid and Siby, Sandra and Troncoso, Carmela},
    booktitle = {2024 IEEE Symposium on Security and Privacy (SP)},
    title = {SINBAD: Saliency-informed detection of breakage caused by ad blocking},
    year = {2024},
    issn = {2375-1207},
    pages = {211-211},
    keywords = {privacy;web;ad blocking;web breakage;machine learning},
    doi = {10.1109/SP54263.2024.00199},
    url = {https://doi.ieeecomputersociety.org/10.1109/SP54263.2024.00199},
    publisher = {IEEE Computer Society},
    address = {Los Alamitos, CA, USA},
    month = may
  }
  

• The Fundamental Limits of Least-Privilege Learning
  Theresa Stadler, Bogdan Kulynych, Nicoals Papernot, Michael Gastpar, and Carmela Troncoso
  Proceedings of the 41th International Conference on Machine Learning (ICML 24). 2024.
  • BibTeX

  @misc{stadler2024fundamental,
    title = {The Fundamental Limits of Least-Privilege Learning},
    author = {Stadler, Theresa and Kulynych, Bogdan and Papernot, Nicoals and Gastpar, Michael and Troncoso, Carmela},
    year = {2024},
    booktitle = {Proceedings of the 41th International Conference on Machine Learning (ICML 24)}
  }
  

• VERITAS: Plaintext Encoders for Practical Verifiable Homomorphic Encryption
  Sylvain Chatel, Christian Knabenhans, Apostolos Pyrgelis, Carmela Troncoso, and Jean-Pierre Hubaux
  Proceedings of the 2024 ACM SIGSAC Conference on Computer and Communications Security, 2024.
  • BibTeX
  • Publication

  @inproceedings{sylvain_christian_veritas,
    title = {VERITAS: Plaintext Encoders for Practical Verifiable Homomorphic Encryption},
    author = {Chatel, Sylvain and Knabenhans, Christian and Pyrgelis, Apostolos and Troncoso, Carmela and Hubaux, Jean{-}Pierre},
    year = {2024},
    booktitle = {Proceedings of the 2024 ACM SIGSAC Conference on Computer and Communications Security},
    doi = {10.1145/3658644.3670282},
    url = {https://doi.org/10.1145/3658644.3670282},
    series = {CCS '24},
    biburl = {https://dblp.org/rec/journals/corr/abs-2207-14071.bib},
    bibsource = {dblp computer science bibliography, https://dblp.org}
  }
  

2023

• Bayes Security: A Not So Average Metric
  Konstantinos Chatzikokolakis, Giovanni Cherubin, Catuscia Palamidessi, and Carmela Troncoso
  36th IEEE Computer Security Foundations Symposium, CSF 2023, Dubrovnik, Croatia, July 10-14, 2023, 2023, pp. 388–406.
  • BibTeX
  • Publication

  @inproceedings{DBLP:conf/csfw/ChatzikokolakisCPT23,
    author = {Chatzikokolakis, Konstantinos and Cherubin, Giovanni and Palamidessi, Catuscia and Troncoso, Carmela},
    title = {Bayes Security: {A} Not So Average Metric},
    booktitle = {36th {IEEE} Computer Security Foundations Symposium, {CSF} 2023, Dubrovnik,
                      Croatia, July 10-14, 2023},
    pages = {388--406},
    publisher = {{IEEE}},
    year = {2023},
    url = {https://doi.org/10.1109/CSF57540.2023.00011},
    doi = {10.1109/CSF57540.2023.00011},
    timestamp = {Tue, 05 Sep 2023 20:33:27 +0200},
    biburl = {https://dblp.org/rec/conf/csfw/ChatzikokolakisCPT23.bib},
    bibsource = {dblp computer science bibliography, https://dblp.org}
  }
  

• Not Yet Another Digital ID: Privacy-Preserving Humanitarian Aid Distribution
  Boya Wang, Wouter Lueks, Justinas Sukaitis, Vincent Graf Narbel, and Carmela Troncoso
  44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 2023, pp. 645–663.
  • BibTeX
  • Publication
  
  award Distinguished Paper Award

  @inproceedings{DBLP:conf/sp/WangLSNT23,
    author = {Wang, Boya and Lueks, Wouter and Sukaitis, Justinas and Narbel, Vincent Graf and Troncoso, Carmela},
    title = {Not Yet Another Digital {ID:} Privacy-Preserving Humanitarian Aid
                      Distribution},
    booktitle = {44th {IEEE} Symposium on Security and Privacy, {SP} 2023, San Francisco,
                      CA, USA, May 21-25, 2023},
    pages = {645--663},
    publisher = {{IEEE}},
    year = {2023},
    url = {https://doi.org/10.1109/SP46215.2023.10179306},
    doi = {10.1109/SP46215.2023.10179306},
    timestamp = {Thu, 27 Jul 2023 08:17:10 +0200},
    biburl = {https://dblp.org/rec/conf/sp/WangLSNT23.bib},
    bibsource = {dblp computer science bibliography, https://dblp.org},
    award = {Distinguished Paper Award}
  }
  

• On the (In)security of Peer-to-Peer Decentralized Machine Learning
  Dario Pasquini, Mathilde Raynal, and Carmela Troncoso
  44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 2023, pp. 418–436.
  • BibTeX
  • Publication

  @inproceedings{DBLP:conf/sp/PasquiniRT23,
    author = {Pasquini, Dario and Raynal, Mathilde and Troncoso, Carmela},
    title = {On the (In)security of Peer-to-Peer Decentralized Machine Learning},
    booktitle = {44th {IEEE} Symposium on Security and Privacy, {SP} 2023, San Francisco,
                      CA, USA, May 21-25, 2023},
    pages = {418--436},
    publisher = {{IEEE}},
    year = {2023},
    url = {https://doi.org/10.1109/SP46215.2023.10179291},
    doi = {10.1109/SP46215.2023.10179291},
    timestamp = {Thu, 27 Jul 2023 08:17:10 +0200},
    biburl = {https://dblp.org/rec/conf/sp/PasquiniRT23.bib},
    bibsource = {dblp computer science bibliography, https://dblp.org}
  }
  

• Evaluating practical QUIC website fingerprinting defenses for the masses
  Sandra Siby, Ludovic Barman, Christopher A. Wood, Marwan Fayed, Nick Sullivan, and Carmela Troncoso
  Proc. Priv. Enhancing Technol., vol. 2023, no. 4, pp. 79–95, 2023.
  • BibTeX
  • Publication

  @article{DBLP:journals/popets/SibyBWFST23,
    author = {Siby, Sandra and Barman, Ludovic and Wood, Christopher A. and Fayed, Marwan and Sullivan, Nick and Troncoso, Carmela},
    title = {Evaluating practical {QUIC} website fingerprinting defenses for the
                      masses},
    journal = {Proc. Priv. Enhancing Technol.},
    volume = {2023},
    number = {4},
    pages = {79--95},
    year = {2023},
    url = {https://doi.org/10.56553/popets-2023-0099},
    doi = {10.56553/POPETS-2023-0099},
    timestamp = {Thu, 17 Aug 2023 15:37:20 +0200},
    biburl = {https://dblp.org/rec/journals/popets/SibyBWFST23.bib},
    bibsource = {dblp computer science bibliography, https://dblp.org}
  }
  

• Arbitrary Decisions are a Hidden Cost of Differentially Private Training
  Bogdan Kulynych, Hsiang Hsu, Carmela Troncoso, and Flávio P. Calmon
  Proceedings of the 2023 ACM Conference on Fairness, Accountability, and Transparency, FAccT 2023, Chicago, IL, USA, June 12-15, 2023, 2023, pp. 1609–1623.
  • BibTeX
  • Publication

  @inproceedings{DBLP:conf/fat/KulynychHTC23,
    author = {Kulynych, Bogdan and Hsu, Hsiang and Troncoso, Carmela and Calmon, Fl{\'{a}}vio P.},
    title = {Arbitrary Decisions are a Hidden Cost of Differentially Private Training},
    booktitle = {Proceedings of the 2023 {ACM} Conference on Fairness, Accountability,
                      and Transparency, FAccT 2023, Chicago, IL, USA, June 12-15, 2023},
    pages = {1609--1623},
    publisher = {{ACM}},
    year = {2023},
    url = {https://doi.org/10.1145/3593013.3594103},
    doi = {10.1145/3593013.3594103},
    timestamp = {Thu, 15 Jun 2023 21:57:00 +0200},
    biburl = {https://dblp.org/rec/conf/fat/KulynychHTC23.bib},
    bibsource = {dblp computer science bibliography, https://dblp.org}
  }
  

• Adversarial Robustness for Tabular Data through Cost and Utility Awareness
  Klim Kireev, Bogdan Kulynych, and Carmela Troncoso
  30th Annual Network and Distributed System Security Symposium, NDSS 2023, San Diego, California, USA, February 27 - March 3, 2023, 2023.
  • BibTeX
  • Publication

  @inproceedings{DBLP:conf/ndss/KireevKT23,
    author = {Kireev, Klim and Kulynych, Bogdan and Troncoso, Carmela},
    title = {Adversarial Robustness for Tabular Data through Cost and Utility Awareness},
    booktitle = {30th Annual Network and Distributed System Security Symposium, {NDSS}
                      2023, San Diego, California, USA, February 27 - March 3, 2023},
    publisher = {The Internet Society},
    year = {2023},
    url = {https://www.ndss-symposium.org/ndss-paper/adversarial-robustness-for-tabular-data-through-cost-and-utility-awareness/},
    timestamp = {Thu, 15 Jun 2023 16:53:21 +0200},
    biburl = {https://dblp.org/rec/conf/ndss/KireevKT23.bib},
    bibsource = {dblp computer science bibliography, https://dblp.org}
  }
  

• Private Collection Matching Protocols
  Kasra Edalatnejad, Mathilde Raynal, Wouter Lueks, and Carmela Troncoso
  Proc. Priv. Enhancing Technol., vol. 2023, no. 3, pp. 446–468, 2023.
  • BibTeX
  • Publication

  @article{DBLP:journals/popets/EdalatnejadRLT23,
    author = {Edalatnejad, Kasra and Raynal, Mathilde and Lueks, Wouter and Troncoso, Carmela},
    title = {Private Collection Matching Protocols},
    journal = {Proc. Priv. Enhancing Technol.},
    volume = {2023},
    number = {3},
    pages = {446--468},
    year = {2023},
    url = {https://doi.org/10.56553/popets-2023-0091},
    doi = {10.56553/POPETS-2023-0091},
    timestamp = {Sat, 24 Jun 2023 18:23:33 +0200},
    biburl = {https://dblp.org/rec/journals/popets/EdalatnejadRLT23.bib},
    bibsource = {dblp computer science bibliography, https://dblp.org}
  }
  

• Your Email Address Holds the Key: Understanding the Connection Between Email and Password Security with Deep Learning
  Etienne Salimbeni, Nina Mainusch, and Dario Pasquini
  2023 IEEE Security and Privacy Workshops (SPW), 2023, pp. 94–104.
  • BibTeX
  • Publication

  @inproceedings{10188635,
    author = {Salimbeni, Etienne and Mainusch, Nina and Pasquini, Dario},
    booktitle = {2023 IEEE Security and Privacy Workshops (SPW)},
    title = {Your Email Address Holds the Key: Understanding the Connection Between Email and Password Security with Deep Learning},
    year = {2023},
    pages = {94-104},
    keywords = {Deep learning;Hash functions;Analytical models;Computational modeling;Sociology;Passwords;Data models;password-security;deep-learning;conditional-strength-estimation},
    doi = {10.1109/SPW59333.2023.00015}
  }
  

• CookieGraph: Understanding and Detecting First-Party Tracking Cookies
  Shaoor Munir, Sandra Siby, Umar Iqbal, Steven Englehardt, Zubair Shafiq, and Carmela Troncoso
  Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, New York, NY, USA, 2023, pp. 3490–3504.
  • BibTeX
  • Publication

  @inproceedings{10.1145/3576915.3616586,
    author = {Munir, Shaoor and Siby, Sandra and Iqbal, Umar and Englehardt, Steven and Shafiq, Zubair and Troncoso, Carmela},
    title = {CookieGraph: Understanding and Detecting First-Party Tracking Cookies},
    year = {2023},
    isbn = {9798400700507},
    publisher = {Association for Computing Machinery},
    address = {New York, NY, USA},
    url = {https://doi.org/10.1145/3576915.3616586},
    doi = {10.1145/3576915.3616586},
    booktitle = {Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security},
    pages = {3490–3504},
    numpages = {15},
    keywords = {cookies, machine learning, privacy, tracking, web security},
    location = {, Copenhagen, Denmark, },
    series = {CCS '23}
  }
  

• Evaluating Practical QUIC Website Fingerprinting Defenses for the Masses
  Sandra Siby, Ludovic Barman, Christopher Wood, Marwan Fayed, Nick Sullivan, and Carmela Troncoso
  Proceedings on Privacy Enhancing Technologies, 2023.
  • BibTeX
  • Publication

  @article{siby2023EvaluatingPracticalQUIC,
    title = {Evaluating Practical {{QUIC}} Website Fingerprinting Defenses for the Masses},
    author = {Siby, Sandra and Barman, Ludovic and Wood, Christopher and Fayed, Marwan and Sullivan, Nick and Troncoso, Carmela},
    date = {2023},
    journaltitle = {Proceedings on Privacy Enhancing Technologies},
    issn = {2299-0984},
    url = {https://petsymposium.org/popets/2023/popets-2023-0099.php},
    urldate = {2024-02-29}
  }
  

2022

• Deploying decentralized, privacy-preserving proximity tracing
  Carmela Troncoso, Dan Bogdanov, Edouard Bugnion, Sylvain Chatel, Cas Cremers, Seda F. Gürses, Jean-Pierre Hubaux, Dennis Jackson, James R. Larus, Wouter Lueks, Rui Oliveira, Mathias Payer, Bart Preneel, Apostolos Pyrgelis, Marcel Salathé, Theresa Stadler, and Michael Veale
  Commun. ACM, vol. 65, no. 9, pp. 48–57, 2022.
  • BibTeX
  • Publication

  @article{DBLP:journals/cacm/TroncosoBBCCGHJ22,
    author = {Troncoso, Carmela and Bogdanov, Dan and Bugnion, Edouard and Chatel, Sylvain and Cremers, Cas and G{\"{u}}rses, Seda F. and Hubaux, Jean{-}Pierre and Jackson, Dennis and Larus, James R. and Lueks, Wouter and Oliveira, Rui and Payer, Mathias and Preneel, Bart and Pyrgelis, Apostolos and Salath{\'{e}}, Marcel and Stadler, Theresa and Veale, Michael},
    title = {Deploying decentralized, privacy-preserving proximity tracing},
    journal = {Commun. {ACM}},
    volume = {65},
    number = {9},
    pages = {48--57},
    year = {2022},
    url = {https://doi.org/10.1145/3524107},
    doi = {10.1145/3524107},
    timestamp = {Sun, 02 Oct 2022 15:29:10 +0200},
    biburl = {https://dblp.org/rec/journals/cacm/TroncosoBBCCGHJ22.bib},
    bibsource = {dblp computer science bibliography, https://dblp.org}
  }
  

• Disparate Vulnerability to Membership Inference Attacks
  Bogdan Kulynych, Mohammad Yaghini, Giovanni Cherubin, Michael Veale, and Carmela Troncoso
  Proc. Priv. Enhancing Technol., vol. 2022, no. 1, pp. 460–480, 2022.
  • BibTeX
  • Publication

  @article{KulynychYCVT22,
    author = {Kulynych, Bogdan and Yaghini, Mohammad and Cherubin, Giovanni and Veale, Michael and Troncoso, Carmela},
    title = {Disparate Vulnerability to Membership Inference Attacks},
    journal = {Proc. Priv. Enhancing Technol.},
    volume = {2022},
    number = {1},
    pages = {460--480},
    year = {2022},
    url = {https://doi.org/10.2478/popets-2022-0023},
    doi = {10.2478/popets-2022-0023},
    timestamp = {Mon, 06 Dec 2021 16:57:43 +0100}
  }
  

• Eluding Secure Aggregation in Federated Learning via Model Inconsistency
  Dario Pasquini, Danilo Francati, and Giuseppe Ateniese
  Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, New York, NY, USA, 2022, pp. 2429–2443.
  • BibTeX
  • Publication

  @inproceedings{3560557,
    author = {Pasquini, Dario and Francati, Danilo and Ateniese, Giuseppe},
    title = {Eluding Secure Aggregation in Federated Learning via Model Inconsistency},
    year = {2022},
    isbn = {9781450394505},
    publisher = {Association for Computing Machinery},
    address = {New York, NY, USA},
    doi = {10.1145/3548606.3560557},
    booktitle = {Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security},
    pages = {2429–2443},
    numpages = {15},
    keywords = {federated learning, model inconsistency, secure aggregation},
    location = {Los Angeles, CA, USA},
    series = {CCS '22},
    url = {https://arxiv.org/abs/2111.07380}
  }
  

• HyperLogLog: Exponentially Bad in Adversarial Settings
  Kenneth G. Paterson and Mathilde Raynal
  2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P), 2022, pp. 154–170.
  • BibTeX
  • Publication

  @inproceedings{9797350,
    author = {Paterson, Kenneth G. and Raynal, Mathilde},
    booktitle = {2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P)},
    title = {HyperLogLog: Exponentially Bad in Adversarial Settings},
    year = {2022},
    pages = {154-170},
    doi = {10.1109/EuroSP53844.2022.00018}
  }
  

• What You See is What You Get: Principled Deep Learning via Distributional Generalization
  Bogdan Kulynych, Yao-Yuan Yang, Yaodong Yu, Jaroslaw Blasiok, and Preetum Nakkiran
  NeurIPS, 2022.
  • BibTeX
  • Publication

  @article{kulynych2022what,
    author = {Kulynych, Bogdan and Yang, Yao{-}Yuan and Yu, Yaodong and Blasiok, Jaroslaw and Nakkiran, Preetum},
    title = {What You See is What You Get: Principled Deep Learning via Distributional
                      Generalization},
    booktitle = {NeurIPS},
    year = {2022},
    url = {http://papers.nips.cc/paper\_files/paper/2022/hash/0f4bbaaaf1e167f79134dd4cf11e3ed4-Abstract-Conference.html}
  }
  

• Online Website Fingerprinting: Evaluating Website Fingerprinting Attacks on Tor in the Real World
  Giovanni Cherubin, Rob Jansen, and Carmela Troncoso
  31st USENIX Security Symposium (USENIX Security 22), Boston, MA, 2022, pp. 753–770.
  • BibTeX
  • Publication
  
  award Distinguished Paper Award and Second Prize (tie) of the 2022 Internet Defense Prize

  @inproceedings{277132,
    author = {Cherubin, Giovanni and Jansen, Rob and Troncoso, Carmela},
    title = {Online Website Fingerprinting: Evaluating Website Fingerprinting Attacks on Tor in the Real World},
    booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
    year = {2022},
    isbn = {978-1-939133-31-1},
    address = {Boston, MA},
    pages = {753--770},
    url = {https://www.usenix.org/conference/usenixsecurity22/presentation/cherubin},
    publisher = {USENIX Association},
    award = {Distinguished Paper Award and Second Prize (tie) of the 2022 Internet Defense Prize},
    month = aug
  }
  

• WebGraph: Capturing Advertising and Tracking Information Flows for Robust Blocking
  Sandra Siby, Umar Iqbal, Steven Englehardt, Zubair Shafiq, and Carmela Troncoso
  31st USENIX Security Symposium (USENIX Security 22), Boston, MA, 2022.
  • BibTeX
  • Publication

  @inproceedings{277176,
    author = {Siby, Sandra and Iqbal, Umar and Englehardt, Steven and Shafiq, Zubair and Troncoso, Carmela},
    title = {WebGraph: Capturing Advertising and Tracking Information Flows for Robust Blocking},
    booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
    publisher = {USENIX Association},
    address = {Boston, MA},
    url = {https://www.usenix.org/conference/usenixsecurity22/presentation/siby},
    year = {2022},
    month = aug
  }
  

• Synthetic Data – Anonymisation Groundhog Day
  Theresa Stadler, Bristena Oprisanu, and Carmela Troncoso
  31st USENIX Security Symposium (USENIX Security 22), Boston, MA, 2022.
  • BibTeX
  • Publication

  @inproceedings{277172,
    author = {Stadler, Theresa and Oprisanu, Bristena and Troncoso, Carmela},
    title = {Synthetic Data {\textendash} Anonymisation Groundhog Day},
    booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
    publisher = {USENIX Association},
    address = {Boston, MA},
    url = {https://www.usenix.org/conference/usenixsecurity22/presentation/stadler},
    year = {2022},
    month = aug
  }
  

2021

• Toward a Common Performance and Effectiveness Terminology for Digital Proximity Tracing Applications
  Wouter Lueks, Justus Benzler, Dan Bogdanov, Göran Kirchner, Raquel Lucas, Rui Oliveira, Bart Preneel, Marcel Salathé, Carmela Troncoso, and Viktor von Wyl
  Frontiers Digit. Health, vol. 3, p. 677929, 2021.
  • BibTeX
  • Publication

  @article{LueksBBKL0PSTW21,
    author = {Lueks, Wouter and Benzler, Justus and Bogdanov, Dan and Kirchner, G{\"{o}}ran and Lucas, Raquel and Oliveira, Rui and Preneel, Bart and Salath{\'{e}}, Marcel and Troncoso, Carmela and von Wyl, Viktor},
    title = {Toward a Common Performance and Effectiveness Terminology for Digital Proximity Tracing Applications},
    journal = {Frontiers Digit. Health},
    volume = {3},
    pages = {677929},
    year = {2021},
    url = {https://doi.org/10.3389/fdgth.2021.677929},
    doi = {10.3389/fdgth.2021.677929},
    timestamp = {Tue, 07 Sep 2021 18:07:14 +0200}
  }
  

• CrowdNotifier: Decentralized Privacy-Preserving Presence Tracing
  Wouter Lueks, Seda F. Gürses, Michael Veale, Edouard Bugnion, Marcel Salathé, Kenneth G. Paterson, and Carmela Troncoso
  Proc. Priv. Enhancing Technol., vol. 2021, no. 4, pp. 350–368, 2021.
  • BibTeX
  • Publication
  • code

  @article{LueksGVBSPT21,
    author = {Lueks, Wouter and G{\"{u}}rses, Seda F. and Veale, Michael and Bugnion, Edouard and Salath{\'{e}}, Marcel and Paterson, Kenneth G. and Troncoso, Carmela},
    title = {CrowdNotifier: Decentralized Privacy-Preserving Presence Tracing},
    journal = {Proc. Priv. Enhancing Technol.},
    volume = {2021},
    number = {4},
    pages = {350--368},
    code = {https://github.com/CrowdNotifier/documents},
    year = {2021},
    url = {https://doi.org/10.2478/popets-2021-0074},
    doi = {10.2478/popets-2021-0074},
    timestamp = {Thu, 14 Oct 2021 09:26:27 +0200}
  }
  

• Unleashing the Tiger: Inference Attacks on Split Learning
  Dario Pasquini, Giuseppe Ateniese, and Massimo Bernaschi
  Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, New York, NY, USA, 2021, pp. 2113–2129.
  • BibTeX
  • Publication

  @inproceedings{pasquini2021unleashing,
    author = {Pasquini, Dario and Ateniese, Giuseppe and Bernaschi, Massimo},
    title = {Unleashing the Tiger: Inference Attacks on Split Learning},
    year = {2021},
    isbn = {9781450384544},
    publisher = {Association for Computing Machinery},
    address = {New York, NY, USA},
    url = {https://doi.org/10.1145/3460120.3485259},
    doi = {10.1145/3460120.3485259},
    booktitle = {Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security},
    pages = {2113–2129},
    numpages = {17},
    keywords = {ML security, deep learning, collaborative learning},
    location = {Virtual Event, Republic of Korea},
    series = {CCS '21}
  }
  

2020

• Tandem: Securing Keys by Using a Central Server While Preserving Privacy
  Wouter Lueks, Brinda Hampiholi, Greg Alpár, and Carmela Troncoso
  Proc. Priv. Enhancing Technol., vol. 2020, no. 3, pp. 327–355, 2020.
  • BibTeX
  • Publication

  @article{LueksHAT20,
    author = {Lueks, Wouter and Hampiholi, Brinda and Alp{\'{a}}r, Greg and Troncoso, Carmela},
    title = {Tandem: Securing Keys by Using a Central Server While Preserving Privacy},
    journal = {Proc. Priv. Enhancing Technol.},
    volume = {2020},
    number = {3},
    pages = {327--355},
    year = {2020},
    url = {https://doi.org/10.2478/popets-2020-0055},
    doi = {10.2478/popets-2020-0055},
    timestamp = {Wed, 30 Sep 2020 16:54:04 +0200}
  }
  

• Measuring Membership Privacy on Aggregate Location Time-Series
  Apostolos Pyrgelis, Carmela Troncoso, and Emiliano De Cristofaro
  Proc. ACM Meas. Anal. Comput. Syst., vol. 4, no. 2, pp. 36:1–36:28, 2020.
  • BibTeX
  • Publication

  @article{PyrgelisTC20,
    author = {Pyrgelis, Apostolos and Troncoso, Carmela and Cristofaro, Emiliano De},
    title = {Measuring Membership Privacy on Aggregate Location Time-Series},
    journal = {Proc. {ACM} Meas. Anal. Comput. Syst.},
    volume = {4},
    number = {2},
    pages = {36:1--36:28},
    year = {2020},
    url = {https://doi.org/10.1145/3392154},
    doi = {10.1145/3392154},
    timestamp = {Wed, 15 Jul 2020 12:06:19 +0200}
  }
  

• GenoShare: Supporting Privacy-Informed Decisions for Sharing Individual-Level Genetic Data
  Jean Louis Raisaro, Juan Ramón Troncoso-Pastoriza, Yamane El-Zein, Mathias Humbert, Carmela Troncoso, Jacques Fellay, and Jean-Pierre Hubaux
  Digital Personalized Health and Medicine - Proceedings of MIE 2020, Medical Informatics Europe, Geneva, Switzerland, April 28 - May 1, 2020, 2020, vol. 270, pp. 238–241.
  • BibTeX
  • Publication

  @inproceedings{RaisaroTEHTFH20,
    author = {Raisaro, Jean Louis and Troncoso{-}Pastoriza, Juan Ram{\'{o}}n and El{-}Zein, Yamane and Humbert, Mathias and Troncoso, Carmela and Fellay, Jacques and Hubaux, Jean{-}Pierre},
    editor = {Pape{-}Haugaard, Louise Bilenberg and Lovis, Christian and Madsen, Inge Cort and Weber, Patrick and Nielsen, Per Hostrup and Scott, Philip},
    title = {GenoShare: Supporting Privacy-Informed Decisions for Sharing Individual-Level Genetic Data},
    booktitle = {Digital Personalized Health and Medicine - Proceedings of {MIE} 2020, Medical Informatics Europe, Geneva, Switzerland, April 28 - May 1, 2020},
    series = {Studies in Health Technology and Informatics},
    volume = {270},
    pages = {238--241},
    publisher = {{IOS} Press},
    year = {2020},
    url = {https://doi.org/10.3233/SHTI200158},
    doi = {10.3233/SHTI200158},
    timestamp = {Wed, 03 Feb 2021 08:37:05 +0100}
  }
  

• POTs: protective optimization technologies
  Bogdan Kulynych, Rebekah Overdorf, Carmela Troncoso, and Seda F. Gürses
  FAT* ’20: Conference on Fairness, Accountability, and Transparency, Barcelona, Spain, January 27-30, 2020, 2020, pp. 177–188.
  • BibTeX
  • Publication

  @inproceedings{KulynychOTG20,
    author = {Kulynych, Bogdan and Overdorf, Rebekah and Troncoso, Carmela and G{\"{u}}rses, Seda F.},
    editor = {Hildebrandt, Mireille and Castillo, Carlos and Celis, L. Elisa and Ruggieri, Salvatore and Taylor, Linnet and Zanfir{-}Fortuna, Gabriela},
    title = {POTs: protective optimization technologies},
    booktitle = {FAT* '20: Conference on Fairness, Accountability, and Transparency, Barcelona, Spain, January 27-30, 2020},
    pages = {177--188},
    publisher = {{ACM}},
    year = {2020},
    url = {https://doi.org/10.1145/3351095.3372853},
    doi = {10.1145/3351095.3372853},
    timestamp = {Thu, 26 Aug 2021 22:19:24 +0200}
  }
  

• Decentralized Privacy-Preserving Proximity Tracing
  Carmela Troncoso, Mathias Payer, Jean-Pierre Hubaux, Marcel Salathé, James R. Larus, Wouter Lueks, Theresa Stadler, Apostolos Pyrgelis, Daniele Antonioli, Ludovic Barman, Sylvain Chatel, Kenneth G. Paterson, Srdjan Capkun, David A. Basin, Jan Beutel, Dennis Jackson, Marc Roeschlin, Patrick Leu, Bart Preneel, Nigel P. Smart, Aysajan Abidin, Seda Gurses, Michael Veale, Cas Cremers, Michael Backes, Nils Ole Tippenhauer, Reuben Binns, Ciro Cattuto, Alain Barrat, Dario Fiore, Manuel Barbosa, Rui Oliveira, and José Pereira
  IEEE Data Eng. Bull., vol. 43, no. 2, pp. 36–66, 2020.
  • BibTeX
  • Publication
  • documentation
  • preprint

  @article{TroncosoPHSLLSP20,
    author = {Troncoso, Carmela and Payer, Mathias and Hubaux, Jean{-}Pierre and Salath{\'{e}}, Marcel and Larus, James R. and Lueks, Wouter and Stadler, Theresa and Pyrgelis, Apostolos and Antonioli, Daniele and Barman, Ludovic and Chatel, Sylvain and Paterson, Kenneth G. and Capkun, Srdjan and Basin, David A. and Beutel, Jan and Jackson, Dennis and Roeschlin, Marc and Leu, Patrick and Preneel, Bart and Smart, Nigel P. and Abidin, Aysajan and Gurses, Seda and Veale, Michael and Cremers, Cas and Backes, Michael and Tippenhauer, Nils Ole and Binns, Reuben and Cattuto, Ciro and Barrat, Alain and Fiore, Dario and Barbosa, Manuel and Oliveira, Rui and Pereira, Jos{\'{e}}},
    title = {Decentralized Privacy-Preserving Proximity Tracing},
    journal = {{IEEE} Data Eng. Bull.},
    volume = {43},
    number = {2},
    pages = {36--66},
    year = {2020},
    url = {http://sites.computer.org/debull/A20june/p36.pdf},
    preprint = {https://arxiv.org/abs/2005.12273},
    documentation = {https://github.com/DP-3T/documents},
    timestamp = {Thu, 06 May 2021 17:57:16 +0200}
  }
  

• Angel or Devil? A Privacy Study of Mobile Parental Control Apps
  Álvaro Feal, Paolo Calciati, Narseo Vallina-Rodriguez, Carmela Troncoso, and Alessandra Gorla
  Proc. Priv. Enhancing Technol., vol. 2020, no. 2, pp. 314–335, 2020.
  • BibTeX
  • Publication
  
  award Emilio Aced Award

  @article{FealCVTG20,
    author = {{\'{A}}lvaro Feal and Calciati, Paolo and Vallina{-}Rodriguez, Narseo and Troncoso, Carmela and Gorla, Alessandra},
    title = {Angel or Devil? {A} Privacy Study of Mobile Parental Control Apps},
    journal = {Proc. Priv. Enhancing Technol.},
    volume = {2020},
    number = {2},
    pages = {314--335},
    year = {2020},
    url = {https://doi.org/10.2478/popets-2020-0029},
    doi = {10.2478/popets-2020-0029},
    award = {Emilio Aced Award},
    awardlink = {https://www.aepd.es/es/prensa-y-comunicacion/notas-de-prensa/aepd-publica-premios-pd-2020},
    timestamp = {Mon, 26 Oct 2020 08:50:10 +0100}
  }
  

• Encrypted DNS -\textgreater Privacy? A Traffic Analysis Perspective
  Sandra Siby, Marc Juárez, Dı́az Claudia, Narseo Vallina-Rodriguez, and Carmela Troncoso
  27th Annual Network and Distributed System Security Symposium, NDSS 2020, San Diego, California, USA, February 23-26, 2020, 2020.
  • BibTeX
  • Publication

  @inproceedings{SibyJDVT20,
    author = {Siby, Sandra and Ju{\'{a}}rez, Marc and D{\'{\i}}az, Claudia and Vallina{-}Rodriguez, Narseo and Troncoso, Carmela},
    title = {Encrypted {DNS} -{\textgreater} Privacy? {A} Traffic Analysis Perspective},
    booktitle = {27th Annual Network and Distributed System Security Symposium, {NDSS} 2020, San Diego, California, USA, February 23-26, 2020},
    publisher = {The Internet Society},
    year = {2020},
    url = {https://www.ndss-symposium.org/ndss-paper/encrypted-dns-privacy-a-traffic-analysis-perspective/},
    timestamp = {Mon, 01 Feb 2021 08:42:10 +0100}
  }
  

• VoteAgain: A scalable coercion-resistant voting system
  Wouter Lueks, Iñigo Querejeta-Azurmendi, and Carmela Troncoso
  29th USENIX Security Symposium, USENIX Security 2020, August 12-14, 2020, 2020, pp. 1553–1570.
  • BibTeX
  • Publication

  @inproceedings{LueksQT20,
    author = {Lueks, Wouter and Querejeta{-}Azurmendi, I{\~{n}}igo and Troncoso, Carmela},
    editor = {Capkun, Srdjan and Roesner, Franziska},
    title = {VoteAgain: {A} scalable coercion-resistant voting system},
    booktitle = {29th {USENIX} Security Symposium, {USENIX} Security 2020, August 12-14, 2020},
    pages = {1553--1570},
    publisher = {{USENIX} Association},
    year = {2020},
    url = {https://www.usenix.org/conference/usenixsecurity20/presentation/lueks},
    timestamp = {Fri, 29 Jan 2021 22:08:55 +0100}
  }
  

• DatashareNetwork: A Decentralized Privacy-Preserving Search Engine for Investigative Journalists
  Kasra Edalatnejad, Wouter Lueks, Julien Pierre Martin, Soline Ledésert, Anne L’Hôte, Bruno Thomas, Laurent Girod, and Carmela Troncoso
  USENIX Security Symposium, 2020.
  • BibTeX
  
  runner-up 2021 Caspar Bowden Award for Outstanding Research in Privacy Enhancing Technologies
  runner-up CNIL - Inria Data Protection Award

  @inproceedings{EdalatnejadLMLL20,
    author = {Edalatnejad, Kasra and Lueks, Wouter and Martin, Julien Pierre and Led{\'{e}}sert, Soline and L'H{\^{o}}te, Anne and Thomas, Bruno and Girod, Laurent and Troncoso, Carmela},
    title = {DatashareNetwork: {A} Decentralized Privacy-Preserving Search Engine for Investigative Journalists},
    booktitle = {{USENIX} Security Symposium},
    year = {2020},
    runnerup = {2021 Caspar Bowden Award for Outstanding Research in Privacy Enhancing Technologies,CNIL - Inria Data Protection Award},
    runneruplink = {https://petsymposium.org/award/winners.php,https://www.cnil.fr/en/2021-inria-and-cnil-award-european-researchers-awarded-their-work-privacy-protection}
  }
  

• Early evidence of effectiveness of digital contact tracing for SARS-CoV-2 in Switzerland.
  Marcel Salathé, Christian Althaus, Nanina Tamar Anderegg, Daniele Antonioli, Tala Ballouz, Edouard Bugnon, Srdjan Čapkun, Dennis Jackson, Sang-Il Kim, Jim Larus, Nicola Low, Wouter Lueks, Dominik Menges, Cédric Moullet, Mathias Payer, Julien Riou, Theresa Stadler, Carmela Troncoso, Effy Vayena, and Viktor von Wyl
  Swiss medical weekly, vol. 150, p. w20457, 2020.
  • BibTeX
  • Publication

  @article{salathe2020early,
    title = {Early evidence of effectiveness of digital contact tracing for SARS-CoV-2 in Switzerland.},
    author = {Salath{\'e}, Marcel and Althaus, Christian and Anderegg, Nanina Tamar and Antonioli, Daniele and Ballouz, Tala and Bugnon, Edouard and {\v{C}}apkun, Srdjan and Jackson, Dennis and Kim, Sang-Il and Larus, Jim and Low, Nicola and Lueks, Wouter and Menges, Dominik and Moullet, C{\'e}dric and Payer, Mathias and Riou, Julien and Stadler, Theresa and Troncoso, Carmela and Vayena, Effy and von Wyl, Viktor},
    journal = {Swiss medical weekly},
    volume = {150},
    pages = {w20457},
    year = {2020},
    doi = {10.4414/smw.2020.20457}
  }
  

• A research agenda for digital proximity tracing apps
  Viktor von Wyl, Sebastian Bonhoeffer, Edouard Bugnion, Milo Alan Puhan, Marcel Salathé, Theresa Stadler, Carmela Troncoso, Effy Vayena, and Nicola Low
  Swiss medical weekly, vol. 150, p. w20324, 2020.
  • BibTeX
  • Publication

  @article{wyl2020early,
    title = {A research agenda for digital proximity tracing apps},
    author = {von Wyl, Viktor and Bonhoeffer, Sebastian and Bugnion, Edouard and Puhan, Milo Alan and Salathé, Marcel and Stadler, Theresa and Troncoso, Carmela and Vayena, Effy and Low, Nicola},
    journal = {Swiss medical weekly},
    volume = {150},
    pages = {w20324},
    year = {2020},
    doi = {10.4414/smw.2020.20324}
  }
  

Preprints

• A Manually Annotated Image-Caption Dataset for Detecting Children in the Wild
  Klim Kireev, Ana-Maria Creţu, Raphael Meier, Sarah Adel Bargal, Elissa Redmiles, and Carmela Troncoso
  arXiv preprint arXiv:2506.10117, 2025.
  • BibTeX
  • Publication

  @article{kireev2025manually,
    title = {A Manually Annotated Image-Caption Dataset for Detecting Children in the Wild},
    author = {Kireev, Klim and Cre{\c{t}}u, Ana-Maria and Meier, Raphael and Bargal, Sarah Adel and Redmiles, Elissa and Troncoso, Carmela},
    journal = {arXiv preprint arXiv:2506.10117},
    year = {2025},
    url = {https://arxiv.org/abs/2506.10117},
    eprinttype = {arXiv},
    eprint = {2506.10117},
    keywords = {preprint}
  }
  

• The Many Ways of Being Transparent in Human-Computer Interaction Research
  Yvonne Jansen, Jan Benjamin Vornhagen, Olga Iarygina, Kavous Salehzadeh Niksirat, Lonni Besançon, Pierre Dragicevic, Julien Gori, and Chat Wacharamanotham
  OSF, Jul-2024.
  • BibTeX
  • Publication

  @misc{jansen_many_2024,
    title = {The {{Many Ways}} of {{Being Transparent}} in {{Human-Computer Interaction Research}}},
    author = {Jansen, Yvonne and Vornhagen, Jan Benjamin and Iarygina, Olga and Niksirat, Kavous Salehzadeh and Besan{\c c}on, Lonni and Dragicevic, Pierre and Gori, Julien and Wacharamanotham, Chat},
    year = {2024},
    month = jul,
    publisher = {OSF},
    doi = {10.31219/osf.io/2wze6},
    url = {https://osf.io/2wze6},
    urldate = {2024-09-09},
    archiveprefix = {OSF},
    langid = {american},
    keywords = {preprint},
    file = {/Users/kavous/Zotero/storage/WL4Q2AXE/Jansen et al. - 2024 - The Many Ways of Being Transparent in Human-Comput.pdf}
  }
  

• Preliminary Analysis of Potential Harms in the Luca Tracing System
  Theresa Stadler, Wouter Lueks, Katharina Kohls, and Carmela Troncoso
  CoRR, vol. abs/2103.11958, 2021.
  • BibTeX
  • Publication

  @article{StadlerLKT21,
    author = {Stadler, Theresa and Lueks, Wouter and Kohls, Katharina and Troncoso, Carmela},
    title = {Preliminary Analysis of Potential Harms in the Luca Tracing System},
    journal = {CoRR},
    volume = {abs/2103.11958},
    year = {2021},
    url = {https://arxiv.org/abs/2103.11958},
    eprinttype = {arXiv},
    eprint = {2103.11958},
    keywords = {preprint}
  }
  

• Privacy Engineering Meets Software Engineering. On the Challenges of Engineering Privacy ByDesign
  Blagovesta Kostova, Seda F. Gürses, and Carmela Troncoso
  CoRR, vol. abs/2007.08613, 2020.
  • BibTeX
  • Publication

  @article{abs-2007-08613,
    author = {Kostova, Blagovesta and G{\"{u}}rses, Seda F. and Troncoso, Carmela},
    title = {Privacy Engineering Meets Software Engineering. On the Challenges of Engineering Privacy ByDesign},
    journal = {CoRR},
    volume = {abs/2007.08613},
    year = {2020},
    url = {https://arxiv.org/abs/2007.08613},
    eprinttype = {arXiv},
    eprint = {2007.08613},
    timestamp = {Tue, 28 Jul 2020 14:46:12 +0200},
    keywords = {preprint}
  }
  

• The Bayes Security Measure
  Konstantinos Chatzikokolakis, Giovanni Cherubin, Catuscia Palamidessi, and Carmela Troncoso
  CoRR, vol. abs/2011.03396, 2020.
  • BibTeX
  • Publication

  @article{abs-2011-03396,
    author = {Chatzikokolakis, Konstantinos and Cherubin, Giovanni and Palamidessi, Catuscia and Troncoso, Carmela},
    title = {The Bayes Security Measure},
    journal = {CoRR},
    volume = {abs/2011.03396},
    year = {2020},
    url = {https://arxiv.org/abs/2011.03396},
    eprinttype = {arXiv},
    eprint = {2011.03396},
    timestamp = {Thu, 12 Nov 2020 15:14:56 +0100},
    keywords = {preprint}
  }
  

• Evading classifiers in discrete domains with provable optimality guarantees
  Bogdan Kulynych, Jamie Hayes, Nikita Samarin, and Carmela Troncoso
  CoRR, vol. abs/1810.10939, 2018.
  • BibTeX
  • Publication

  @article{abs-1810-10939,
    author = {Kulynych, Bogdan and Hayes, Jamie and Samarin, Nikita and Troncoso, Carmela},
    title = {Evading classifiers in discrete domains with provable optimality guarantees},
    journal = {CoRR},
    volume = {abs/1810.10939},
    year = {2018},
    url = {http://arxiv.org/abs/1810.10939},
    eprinttype = {arXiv},
    eprint = {1810.10939},
    timestamp = {Wed, 31 Oct 2018 14:24:29 +0100},
    keywords = {preprint}
  }