Publications

Here is a list of our recent publications and pre-prints. The list may not be NOT be up to date. Please refer to the Google Scholar pages of our team members for the most recent information.

Preprints

Universal Neural-Cracking-Machines: Self-Configurable Password Models from Auxiliary Data

Dario Pasquini, Giuseppe Ateniese, and Carmela Troncoso

arXiv, 2023.

@misc{UNCM23,
  doi = {10.48550/ARXIV.2301.07628},
  url = {https://arxiv.org/abs/2301.07628},
  author = {Pasquini, Dario and Ateniese, Giuseppe and Troncoso, Carmela},
  publisher = {arXiv},
  keywords = {preprint},
  title = {Universal Neural-Cracking-Machines: Self-Configurable Password Models from Auxiliary Data},
  year = {2023}
}

On the Privacy of Decentralized Machine Learning

Dario Pasquini, Mathilde Raynal, and Carmela Troncoso

arXiv, 2022.

@misc{dlprivacy22,
  url = {https://arxiv.org/abs/2205.08443},
  author = {Pasquini, Dario and Raynal, Mathilde and Troncoso, Carmela},
  publisher = {arXiv},
  keywords = {preprint},
  title = {On the Privacy of Decentralized Machine Learning},
  year = {2022}
}

Private Collection Matching Protocols

Kasra EdalatNejad, Mathilde Raynal, Wouter Lueks, and Carmela Troncoso

arXiv, 2022.

@misc{https://doi.org/10.48550/arxiv.2206.07009,
  doi = {10.48550/ARXIV.2206.07009},
  url = {https://arxiv.org/abs/2206.07009},
  author = {EdalatNejad, Kasra and Raynal, Mathilde and Lueks, Wouter and Troncoso, Carmela},
  title = {Private Collection Matching Protocols},
  keywords = {preprint},
  publisher = {arXiv},
  year = {2022},
  copyright = {arXiv.org perpetual, non-exclusive license}
}

COOKIEGRAPH: Measuring and Countering First-Party Tracking Cookies

Shaoor Munir, Sandra Siby, Umar Iqbal, Steven Englehardt, Zubair Shafiq, and Carmela Troncoso

arXiv, 2022.

@misc{https://doi.org/10.48550/arxiv.2208.12370,
  doi = {10.48550/ARXIV.2208.12370},
  url = {https://arxiv.org/abs/2208.12370},
  author = {Munir, Shaoor and Siby, Sandra and Iqbal, Umar and Englehardt, Steven and Shafiq, Zubair and Troncoso, Carmela},
  keywords = {preprint},
  title = {COOKIEGRAPH: Measuring and Countering First-Party Tracking Cookies},
  publisher = {arXiv},
  year = {2022},
  copyright = {Creative Commons Attribution 4.0 International}
}

You get PADDING, everybody gets PADDING! You get privacy? Evaluating practical QUIC website fingerprinting protections for the masses

Sandra Siby, Ludovic Barman, Christopher Wood, Marwan Fayed, Nick Sullivan, and Carmela Troncoso

arXiv, 2022.

@misc{https://doi.org/10.48550/arxiv.2203.07806,
  doi = {10.48550/ARXIV.2203.07806},
  url = {https://arxiv.org/abs/2203.07806},
  author = {Siby, Sandra and Barman, Ludovic and Wood, Christopher and Fayed, Marwan and Sullivan, Nick and Troncoso, Carmela},
  keywords = {preprint},
  title = {You get PADDING, everybody gets PADDING! You get privacy? Evaluating practical QUIC website fingerprinting protections for the masses},
  publisher = {arXiv},
  year = {2022},
  copyright = {arXiv.org perpetual, non-exclusive license}
}

Preliminary Analysis of Potential Harms in the Luca Tracing System

Theresa Stadler, Wouter Lueks, Katharina Kohls, and Carmela Troncoso

CoRR, vol. abs/2103.11958, 2021.

@article{StadlerLKT21,
  author = {Stadler, Theresa and Lueks, Wouter and Kohls, Katharina and Troncoso, Carmela},
  title = {Preliminary Analysis of Potential Harms in the Luca Tracing System},
  journal = {CoRR},
  volume = {abs/2103.11958},
  year = {2021},
  url = {https://arxiv.org/abs/2103.11958},
  eprinttype = {arXiv},
  eprint = {2103.11958},
  keywords = {preprint}
}

Privacy Engineering Meets Software Engineering. On the Challenges of Engineering Privacy ByDesign

Blagovesta Kostova, Seda F. Gürses, and Carmela Troncoso

CoRR, vol. abs/2007.08613, 2020.

@article{abs-2007-08613,
  author = {Kostova, Blagovesta and G{\"{u}}rses, Seda F. and Troncoso, Carmela},
  title = {Privacy Engineering Meets Software Engineering. On the Challenges of Engineering Privacy ByDesign},
  journal = {CoRR},
  volume = {abs/2007.08613},
  year = {2020},
  url = {https://arxiv.org/abs/2007.08613},
  eprinttype = {arXiv},
  eprint = {2007.08613},
  timestamp = {Tue, 28 Jul 2020 14:46:12 +0200},
  keywords = {preprint}
}

The Bayes Security Measure

Konstantinos Chatzikokolakis, Giovanni Cherubin, Catuscia Palamidessi, and Carmela Troncoso

CoRR, vol. abs/2011.03396, 2020.

@article{abs-2011-03396,
  author = {Chatzikokolakis, Konstantinos and Cherubin, Giovanni and Palamidessi, Catuscia and Troncoso, Carmela},
  title = {The Bayes Security Measure},
  journal = {CoRR},
  volume = {abs/2011.03396},
  year = {2020},
  url = {https://arxiv.org/abs/2011.03396},
  eprinttype = {arXiv},
  eprint = {2011.03396},
  timestamp = {Thu, 12 Nov 2020 15:14:56 +0100},
  keywords = {preprint}
}

Evading classifiers in discrete domains with provable optimality guarantees

Bogdan Kulynych, Jamie Hayes, Nikita Samarin, and Carmela Troncoso

CoRR, vol. abs/1810.10939, 2018.

@article{abs-1810-10939,
  author = {Kulynych, Bogdan and Hayes, Jamie and Samarin, Nikita and Troncoso, Carmela},
  title = {Evading classifiers in discrete domains with provable optimality guarantees},
  journal = {CoRR},
  volume = {abs/1810.10939},
  year = {2018},
  url = {http://arxiv.org/abs/1810.10939},
  eprinttype = {arXiv},
  eprint = {1810.10939},
  timestamp = {Wed, 31 Oct 2018 14:24:29 +0100},
  keywords = {preprint}
}

Conference and journal articles

2023

Adversarial Robustness for Tabular Data through Cost and Utility Awareness

Klim Kireev, Bogdan Kulynych, and Carmela Troncoso

30th Annual Network and Distributed System Security Symposium, NDSS 2023, San Diego, California, USA, February 27 - March 3, 2023, 2023.

@inproceedings{DBLP:conf/ndss/KireevKT23,
  author = {Kireev, Klim and Kulynych, Bogdan and Troncoso, Carmela},
  title = {Adversarial Robustness for Tabular Data through Cost and Utility Awareness},
  booktitle = {30th Annual Network and Distributed System Security Symposium, {NDSS}
                    2023, San Diego, California, USA, February 27 - March 3, 2023},
  publisher = {The Internet Society},
  year = {2023},
  url = {https://www.ndss-symposium.org/ndss-paper/adversarial-robustness-for-tabular-data-through-cost-and-utility-awareness/},
  timestamp = {Thu, 16 Mar 2023 14:57:04 +0100},
  biburl = {https://dblp.org/rec/conf/ndss/KireevKT23.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

2022

Disparate Vulnerability to Membership Inference Attacks

Bogdan Kulynych, Mohammad Yaghini, Giovanni Cherubin, Michael Veale, and Carmela Troncoso

Proc. Priv. Enhancing Technol., vol. 2022, no. 1, pp. 460–480, 2022.

@article{KulynychYCVT22,
  author = {Kulynych, Bogdan and Yaghini, Mohammad and Cherubin, Giovanni and Veale, Michael and Troncoso, Carmela},
  title = {Disparate Vulnerability to Membership Inference Attacks},
  journal = {Proc. Priv. Enhancing Technol.},
  volume = {2022},
  number = {1},
  pages = {460--480},
  year = {2022},
  url = {https://doi.org/10.2478/popets-2022-0023},
  doi = {10.2478/popets-2022-0023},
  timestamp = {Mon, 06 Dec 2021 16:57:43 +0100}
}

Eluding Secure Aggregation in Federated Learning via Model Inconsistency

Dario Pasquini, Danilo Francati, and Giuseppe Ateniese

Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, New York, NY, USA, 2022, pp. 2429–2443.

@inproceedings{3560557,
  author = {Pasquini, Dario and Francati, Danilo and Ateniese, Giuseppe},
  title = {Eluding Secure Aggregation in Federated Learning via Model Inconsistency},
  year = {2022},
  isbn = {9781450394505},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  doi = {10.1145/3548606.3560557},
  booktitle = {Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security},
  pages = {2429–2443},
  numpages = {15},
  keywords = {federated learning, model inconsistency, secure aggregation},
  location = {Los Angeles, CA, USA},
  series = {CCS '22},
  url = {https://arxiv.org/abs/2111.07380}
}

HyperLogLog: Exponentially Bad in Adversarial Settings

Kenneth G. Paterson and Mathilde Raynal

2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P), 2022, pp. 154–170.

@inproceedings{9797350,
  author = {Paterson, Kenneth G. and Raynal, Mathilde},
  booktitle = {2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P)},
  title = {HyperLogLog: Exponentially Bad in Adversarial Settings},
  year = {2022},
  pages = {154-170},
  doi = {10.1109/EuroSP53844.2022.00018}
}

What You See is What You Get: Principled Deep Learning via Distributional Generalization

Bogdan Kulynych, Yao-Yuan Yang, Yaodong Yu, Jaroslaw Blasiok, and Preetum Nakkiran

NeurIPS, 2022.

@article{kulynych2022what,
  author = {Kulynych, Bogdan and Yang, Yao{-}Yuan and Yu, Yaodong and Blasiok, Jaroslaw and Nakkiran, Preetum},
  title = {What You See is What You Get: Principled Deep Learning via Distributional
                    Generalization},
  booktitle = {NeurIPS},
  year = {2022},
  url = {http://papers.nips.cc/paper\_files/paper/2022/hash/0f4bbaaaf1e167f79134dd4cf11e3ed4-Abstract-Conference.html}
}

Online Website Fingerprinting: Evaluating Website Fingerprinting Attacks on Tor in the Real World

Giovanni Cherubin, Rob Jansen, and Carmela Troncoso

31st USENIX Security Symposium (USENIX Security 22), Boston, MA, 2022, pp. 753–770.

award Distinguished Paper Award Winner and Second Prize Winner (tie) of the 2022 Internet Defense Prize

@inproceedings{277132,
  author = {Cherubin, Giovanni and Jansen, Rob and Troncoso, Carmela},
  title = {Online Website Fingerprinting: Evaluating Website Fingerprinting Attacks on Tor in the Real World},
  booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
  year = {2022},
  isbn = {978-1-939133-31-1},
  address = {Boston, MA},
  pages = {753--770},
  url = {https://www.usenix.org/conference/usenixsecurity22/presentation/cherubin},
  publisher = {USENIX Association},
  award = {Distinguished Paper Award Winner and Second Prize Winner (tie) of the 2022 Internet Defense Prize},
  month = aug
}

WebGraph: Capturing Advertising and Tracking Information Flows for Robust Blocking

Sandra Siby, Umar Iqbal, Steven Englehardt, Zubair Shafiq, and Carmela Troncoso

31st USENIX Security Symposium (USENIX Security 22), Boston, MA, 2022.

@inproceedings{277176,
  author = {Siby, Sandra and Iqbal, Umar and Englehardt, Steven and Shafiq, Zubair and Troncoso, Carmela},
  title = {WebGraph: Capturing Advertising and Tracking Information Flows for Robust Blocking},
  booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
  publisher = {USENIX Association},
  address = {Boston, MA},
  url = {https://www.usenix.org/conference/usenixsecurity22/presentation/siby},
  year = {2022},
  month = aug
}

Synthetic Data – Anonymisation Groundhog Day

Theresa Stadler, Bristena Oprisanu, and Carmela Troncoso

31st USENIX Security Symposium (USENIX Security 22), Boston, MA, 2022.

@inproceedings{277172,
  author = {Stadler, Theresa and Oprisanu, Bristena and Troncoso, Carmela},
  title = {Synthetic Data {\textendash} Anonymisation Groundhog Day},
  booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
  publisher = {USENIX Association},
  address = {Boston, MA},
  url = {https://www.usenix.org/conference/usenixsecurity22/presentation/stadler},
  year = {2022},
  month = aug
}

2021

Toward a Common Performance and Effectiveness Terminology for Digital Proximity Tracing Applications

Wouter Lueks, Justus Benzler, Dan Bogdanov, Göran Kirchner, Raquel Lucas, Rui Oliveira, Bart Preneel, Marcel Salathé, Carmela Troncoso, and Viktor von Wyl

Frontiers Digit. Health, vol. 3, p. 677929, 2021.

@article{LueksBBKL0PSTW21,
  author = {Lueks, Wouter and Benzler, Justus and Bogdanov, Dan and Kirchner, G{\"{o}}ran and Lucas, Raquel and Oliveira, Rui and Preneel, Bart and Salath{\'{e}}, Marcel and Troncoso, Carmela and von Wyl, Viktor},
  title = {Toward a Common Performance and Effectiveness Terminology for Digital Proximity Tracing Applications},
  journal = {Frontiers Digit. Health},
  volume = {3},
  pages = {677929},
  year = {2021},
  url = {https://doi.org/10.3389/fdgth.2021.677929},
  doi = {10.3389/fdgth.2021.677929},
  timestamp = {Tue, 07 Sep 2021 18:07:14 +0200}
}

CrowdNotifier: Decentralized Privacy-Preserving Presence Tracing

Wouter Lueks, Seda F. Gürses, Michael Veale, Edouard Bugnion, Marcel Salathé, Kenneth G. Paterson, and Carmela Troncoso

Proc. Priv. Enhancing Technol., vol. 2021, no. 4, pp. 350–368, 2021.

@article{LueksGVBSPT21,
  author = {Lueks, Wouter and G{\"{u}}rses, Seda F. and Veale, Michael and Bugnion, Edouard and Salath{\'{e}}, Marcel and Paterson, Kenneth G. and Troncoso, Carmela},
  title = {CrowdNotifier: Decentralized Privacy-Preserving Presence Tracing},
  journal = {Proc. Priv. Enhancing Technol.},
  volume = {2021},
  number = {4},
  pages = {350--368},
  code = {https://github.com/CrowdNotifier/documents},
  year = {2021},
  url = {https://doi.org/10.2478/popets-2021-0074},
  doi = {10.2478/popets-2021-0074},
  timestamp = {Thu, 14 Oct 2021 09:26:27 +0200}
}

Unleashing the Tiger: Inference Attacks on Split Learning

Dario Pasquini, Giuseppe Ateniese, and Massimo Bernaschi

Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, New York, NY, USA, 2021, pp. 2113–2129.

@inproceedings{pasquini2021unleashing,
  author = {Pasquini, Dario and Ateniese, Giuseppe and Bernaschi, Massimo},
  title = {Unleashing the Tiger: Inference Attacks on Split Learning},
  year = {2021},
  isbn = {9781450384544},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  url = {https://doi.org/10.1145/3460120.3485259},
  doi = {10.1145/3460120.3485259},
  booktitle = {Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security},
  pages = {2113–2129},
  numpages = {17},
  keywords = {ML security, deep learning, collaborative learning},
  location = {Virtual Event, Republic of Korea},
  series = {CCS '21}
}

2020

Tandem: Securing Keys by Using a Central Server While Preserving Privacy

Wouter Lueks, Brinda Hampiholi, Greg Alpár, and Carmela Troncoso

Proc. Priv. Enhancing Technol., vol. 2020, no. 3, pp. 327–355, 2020.

@article{LueksHAT20,
  author = {Lueks, Wouter and Hampiholi, Brinda and Alp{\'{a}}r, Greg and Troncoso, Carmela},
  title = {Tandem: Securing Keys by Using a Central Server While Preserving Privacy},
  journal = {Proc. Priv. Enhancing Technol.},
  volume = {2020},
  number = {3},
  pages = {327--355},
  year = {2020},
  url = {https://doi.org/10.2478/popets-2020-0055},
  doi = {10.2478/popets-2020-0055},
  timestamp = {Wed, 30 Sep 2020 16:54:04 +0200}
}

Measuring Membership Privacy on Aggregate Location Time-Series

Apostolos Pyrgelis, Carmela Troncoso, and Emiliano De Cristofaro

Proc. ACM Meas. Anal. Comput. Syst., vol. 4, no. 2, pp. 36:1–36:28, 2020.

@article{PyrgelisTC20,
  author = {Pyrgelis, Apostolos and Troncoso, Carmela and Cristofaro, Emiliano De},
  title = {Measuring Membership Privacy on Aggregate Location Time-Series},
  journal = {Proc. {ACM} Meas. Anal. Comput. Syst.},
  volume = {4},
  number = {2},
  pages = {36:1--36:28},
  year = {2020},
  url = {https://doi.org/10.1145/3392154},
  doi = {10.1145/3392154},
  timestamp = {Wed, 15 Jul 2020 12:06:19 +0200}
}

GenoShare: Supporting Privacy-Informed Decisions for Sharing Individual-Level Genetic Data

Jean Louis Raisaro, Juan Ramón Troncoso-Pastoriza, Yamane El-Zein, Mathias Humbert, Carmela Troncoso, Jacques Fellay, and Jean-Pierre Hubaux

Digital Personalized Health and Medicine - Proceedings of MIE 2020, Medical Informatics Europe, Geneva, Switzerland, April 28 - May 1, 2020, 2020, vol. 270, pp. 238–241.

@inproceedings{RaisaroTEHTFH20,
  author = {Raisaro, Jean Louis and Troncoso{-}Pastoriza, Juan Ram{\'{o}}n and El{-}Zein, Yamane and Humbert, Mathias and Troncoso, Carmela and Fellay, Jacques and Hubaux, Jean{-}Pierre},
  editor = {Pape{-}Haugaard, Louise Bilenberg and Lovis, Christian and Madsen, Inge Cort and Weber, Patrick and Nielsen, Per Hostrup and Scott, Philip},
  title = {GenoShare: Supporting Privacy-Informed Decisions for Sharing Individual-Level Genetic Data},
  booktitle = {Digital Personalized Health and Medicine - Proceedings of {MIE} 2020, Medical Informatics Europe, Geneva, Switzerland, April 28 - May 1, 2020},
  series = {Studies in Health Technology and Informatics},
  volume = {270},
  pages = {238--241},
  publisher = {{IOS} Press},
  year = {2020},
  url = {https://doi.org/10.3233/SHTI200158},
  doi = {10.3233/SHTI200158},
  timestamp = {Wed, 03 Feb 2021 08:37:05 +0100}
}

POTs: protective optimization technologies

Bogdan Kulynych, Rebekah Overdorf, Carmela Troncoso, and Seda F. Gürses

FAT* ’20: Conference on Fairness, Accountability, and Transparency, Barcelona, Spain, January 27-30, 2020, 2020, pp. 177–188.

@inproceedings{KulynychOTG20,
  author = {Kulynych, Bogdan and Overdorf, Rebekah and Troncoso, Carmela and G{\"{u}}rses, Seda F.},
  editor = {Hildebrandt, Mireille and Castillo, Carlos and Celis, L. Elisa and Ruggieri, Salvatore and Taylor, Linnet and Zanfir{-}Fortuna, Gabriela},
  title = {POTs: protective optimization technologies},
  booktitle = {FAT* '20: Conference on Fairness, Accountability, and Transparency, Barcelona, Spain, January 27-30, 2020},
  pages = {177--188},
  publisher = {{ACM}},
  year = {2020},
  url = {https://doi.org/10.1145/3351095.3372853},
  doi = {10.1145/3351095.3372853},
  timestamp = {Thu, 26 Aug 2021 22:19:24 +0200}
}

Decentralized Privacy-Preserving Proximity Tracing

Carmela Troncoso, Mathias Payer, Jean-Pierre Hubaux, Marcel Salathé, James R. Larus, Wouter Lueks, Theresa Stadler, Apostolos Pyrgelis, Daniele Antonioli, Ludovic Barman, Sylvain Chatel, Kenneth G. Paterson, Srdjan Capkun, David A. Basin, Jan Beutel, Dennis Jackson, Marc Roeschlin, Patrick Leu, Bart Preneel, Nigel P. Smart, Aysajan Abidin, Seda Gurses, Michael Veale, Cas Cremers, Michael Backes, Nils Ole Tippenhauer, Reuben Binns, Ciro Cattuto, Alain Barrat, Dario Fiore, Manuel Barbosa, Rui Oliveira, and José Pereira

IEEE Data Eng. Bull., vol. 43, no. 2, pp. 36–66, 2020.

@article{TroncosoPHSLLSP20,
  author = {Troncoso, Carmela and Payer, Mathias and Hubaux, Jean{-}Pierre and Salath{\'{e}}, Marcel and Larus, James R. and Lueks, Wouter and Stadler, Theresa and Pyrgelis, Apostolos and Antonioli, Daniele and Barman, Ludovic and Chatel, Sylvain and Paterson, Kenneth G. and Capkun, Srdjan and Basin, David A. and Beutel, Jan and Jackson, Dennis and Roeschlin, Marc and Leu, Patrick and Preneel, Bart and Smart, Nigel P. and Abidin, Aysajan and Gurses, Seda and Veale, Michael and Cremers, Cas and Backes, Michael and Tippenhauer, Nils Ole and Binns, Reuben and Cattuto, Ciro and Barrat, Alain and Fiore, Dario and Barbosa, Manuel and Oliveira, Rui and Pereira, Jos{\'{e}}},
  title = {Decentralized Privacy-Preserving Proximity Tracing},
  journal = {{IEEE} Data Eng. Bull.},
  volume = {43},
  number = {2},
  pages = {36--66},
  year = {2020},
  url = {http://sites.computer.org/debull/A20june/p36.pdf},
  preprint = {https://arxiv.org/abs/2005.12273},
  documentation = {https://github.com/DP-3T/documents},
  timestamp = {Thu, 06 May 2021 17:57:16 +0200}
}

Angel or Devil? A Privacy Study of Mobile Parental Control Apps

Álvaro Feal, Paolo Calciati, Narseo Vallina-Rodriguez, Carmela Troncoso, and Alessandra Gorla

Proc. Priv. Enhancing Technol., vol. 2020, no. 2, pp. 314–335, 2020.

award Emilio Aced Award

@article{FealCVTG20,
  author = {{\'{A}}lvaro Feal and Calciati, Paolo and Vallina{-}Rodriguez, Narseo and Troncoso, Carmela and Gorla, Alessandra},
  title = {Angel or Devil? {A} Privacy Study of Mobile Parental Control Apps},
  journal = {Proc. Priv. Enhancing Technol.},
  volume = {2020},
  number = {2},
  pages = {314--335},
  year = {2020},
  url = {https://doi.org/10.2478/popets-2020-0029},
  doi = {10.2478/popets-2020-0029},
  award = {Emilio Aced Award},
  awardlink = {https://www.aepd.es/es/prensa-y-comunicacion/notas-de-prensa/aepd-publica-premios-pd-2020},
  timestamp = {Mon, 26 Oct 2020 08:50:10 +0100}
}

Encrypted DNS -\textgreater Privacy? A Traffic Analysis Perspective

Sandra Siby, Marc Juárez, Dı́az Claudia, Narseo Vallina-Rodriguez, and Carmela Troncoso

27th Annual Network and Distributed System Security Symposium, NDSS 2020, San Diego, California, USA, February 23-26, 2020, 2020.

@inproceedings{SibyJDVT20,
  author = {Siby, Sandra and Ju{\'{a}}rez, Marc and D{\'{\i}}az, Claudia and Vallina{-}Rodriguez, Narseo and Troncoso, Carmela},
  title = {Encrypted {DNS} -{\textgreater} Privacy? {A} Traffic Analysis Perspective},
  booktitle = {27th Annual Network and Distributed System Security Symposium, {NDSS} 2020, San Diego, California, USA, February 23-26, 2020},
  publisher = {The Internet Society},
  year = {2020},
  url = {https://www.ndss-symposium.org/ndss-paper/encrypted-dns-privacy-a-traffic-analysis-perspective/},
  timestamp = {Mon, 01 Feb 2021 08:42:10 +0100}
}

VoteAgain: A scalable coercion-resistant voting system

Wouter Lueks, Iñigo Querejeta-Azurmendi, and Carmela Troncoso

29th USENIX Security Symposium, USENIX Security 2020, August 12-14, 2020, 2020, pp. 1553–1570.

@inproceedings{LueksQT20,
  author = {Lueks, Wouter and Querejeta{-}Azurmendi, I{\~{n}}igo and Troncoso, Carmela},
  editor = {Capkun, Srdjan and Roesner, Franziska},
  title = {VoteAgain: {A} scalable coercion-resistant voting system},
  booktitle = {29th {USENIX} Security Symposium, {USENIX} Security 2020, August 12-14, 2020},
  pages = {1553--1570},
  publisher = {{USENIX} Association},
  year = {2020},
  url = {https://www.usenix.org/conference/usenixsecurity20/presentation/lueks},
  timestamp = {Fri, 29 Jan 2021 22:08:55 +0100}
}

DatashareNetwork: A Decentralized Privacy-Preserving Search Engine for Investigative Journalists

Kasra Edalatnejad, Wouter Lueks, Julien Pierre Martin, Soline Ledésert, Anne L’Hôte, Bruno Thomas, Laurent Girod, and Carmela Troncoso

USENIX Security Symposium, 2020.

BibTeX

runner-up 2021 Caspar Bowden Award for Outstanding Research in Privacy Enhancing Technologies
runner-up CNIL - Inria Data Protection Award

@inproceedings{EdalatnejadLMLL20,
  author = {Edalatnejad, Kasra and Lueks, Wouter and Martin, Julien Pierre and Led{\'{e}}sert, Soline and L'H{\^{o}}te, Anne and Thomas, Bruno and Girod, Laurent and Troncoso, Carmela},
  title = {DatashareNetwork: {A} Decentralized Privacy-Preserving Search Engine for Investigative Journalists},
  booktitle = {{USENIX} Security Symposium},
  year = {2020},
  runnerup = {2021 Caspar Bowden Award for Outstanding Research in Privacy Enhancing Technologies,CNIL - Inria Data Protection Award},
  runneruplink = {https://petsymposium.org/award/winners.php,https://www.cnil.fr/en/2021-inria-and-cnil-award-european-researchers-awarded-their-work-privacy-protection}
}

Early evidence of effectiveness of digital contact tracing for SARS-CoV-2 in Switzerland.

Marcel Salathé, Christian Althaus, Nanina Tamar Anderegg, Daniele Antonioli, Tala Ballouz, Edouard Bugnon, Srdjan Čapkun, Dennis Jackson, Sang-Il Kim, Jim Larus, Nicola Low, Wouter Lueks, Dominik Menges, Cédric Moullet, Mathias Payer, Julien Riou, Theresa Stadler, Carmela Troncoso, Effy Vayena, and Viktor von Wyl

Swiss medical weekly, vol. 150, p. w20457, 2020.

@article{salathe2020early,
  title = {Early evidence of effectiveness of digital contact tracing for SARS-CoV-2 in Switzerland.},
  author = {Salath{\'e}, Marcel and Althaus, Christian and Anderegg, Nanina Tamar and Antonioli, Daniele and Ballouz, Tala and Bugnon, Edouard and {\v{C}}apkun, Srdjan and Jackson, Dennis and Kim, Sang-Il and Larus, Jim and Low, Nicola and Lueks, Wouter and Menges, Dominik and Moullet, C{\'e}dric and Payer, Mathias and Riou, Julien and Stadler, Theresa and Troncoso, Carmela and Vayena, Effy and von Wyl, Viktor},
  journal = {Swiss medical weekly},
  volume = {150},
  pages = {w20457},
  year = {2020},
  doi = {10.4414/smw.2020.20457}
}

A research agenda for digital proximity tracing apps

Viktor von Wyl, Sebastian Bonhoeffer, Edouard Bugnion, Milo Alan Puhan, Marcel Salathé, Theresa Stadler, Carmela Troncoso, Effy Vayena, and Nicola Low

Swiss medical weekly, vol. 150, p. w20324, 2020.

@article{wyl2020early,
  title = {A research agenda for digital proximity tracing apps},
  author = {von Wyl, Viktor and Bonhoeffer, Sebastian and Bugnion, Edouard and Puhan, Milo Alan and Salathé, Marcel and Stadler, Theresa and Troncoso, Carmela and Vayena, Effy and Low, Nicola},
  journal = {Swiss medical weekly},
  volume = {150},
  pages = {w20324},
  year = {2020},
  doi = {10.4414/smw.2020.20324}
}

2019

Rethinking Location Privacy for Unknown Mobility Behaviors

Simon Oya, Carmela Troncoso, and Fernando Pérez-González

IEEE European Symposium on Security and Privacy, EuroS&P 2019, Stockholm, Sweden, June 17-19, 2019, 2019, pp. 416–431.

@inproceedings{OyaTP19,
  author = {Oya, Simon and Troncoso, Carmela and P{\'{e}}rez{-}Gonz{\'{a}}lez, Fernando},
  title = {Rethinking Location Privacy for Unknown Mobility Behaviors},
  booktitle = {{IEEE} European Symposium on Security and Privacy, EuroS{\&}P 2019, Stockholm, Sweden, June 17-19, 2019},
  pages = {416--431},
  publisher = {{IEEE}},
  year = {2019},
  url = {https://doi.org/10.1109/EuroSP.2019.00038},
  doi = {10.1109/EuroSP.2019.00038},
  timestamp = {Wed, 16 Oct 2019 14:14:55 +0200}
}

zksk: A Library for Composable Zero-Knowledge Proofs

Wouter Lueks, Bogdan Kulynych, Jules Fasquelle, Simon Le Bail-Collet, and Carmela Troncoso

Proceedings of the 18th ACM Workshop on Privacy in the Electronic Society, WPES@CCS 2019, London, UK, November 11, 2019, 2019, pp. 50–54.

@inproceedings{LueksKFBT19,
  author = {Lueks, Wouter and Kulynych, Bogdan and Fasquelle, Jules and Bail{-}Collet, Simon Le and Troncoso, Carmela},
  editor = {Cavallaro, Lorenzo and Kinder, Johannes and Domingo{-}Ferrer, Josep},
  title = {zksk: {A} Library for Composable Zero-Knowledge Proofs},
  booktitle = {Proceedings of the 18th {ACM} Workshop on Privacy in the Electronic Society, WPES@CCS 2019, London, UK, November 11, 2019},
  pages = {50--54},
  publisher = {{ACM}},
  year = {2019},
  url = {https://doi.org/10.1145/3338498.3358653},
  doi = {10.1145/3338498.3358653},
  timestamp = {Thu, 14 Nov 2019 11:57:18 +0100}
}

On (The Lack Of) Location Privacy in Crowdsourcing Applications

Spyros Boukoros, Mathias Humbert, Stefan Katzenbeisser, and Carmela Troncoso

28th USENIX Security Symposium, USENIX Security 2019, Santa Clara, CA, USA, August 14-16, 2019, 2019, pp. 1859–1876.

@inproceedings{BoukorosH0T19,
  author = {Boukoros, Spyros and Humbert, Mathias and Katzenbeisser, Stefan and Troncoso, Carmela},
  editor = {Heninger, Nadia and Traynor, Patrick},
  title = {On (The Lack Of) Location Privacy in Crowdsourcing Applications},
  booktitle = {28th {USENIX} Security Symposium, {USENIX} Security 2019, Santa Clara, CA, USA, August 14-16, 2019},
  pages = {1859--1876},
  publisher = {{USENIX} Association},
  year = {2019},
  url = {https://www.usenix.org/conference/usenixsecurity19/presentation/boukoros},
  timestamp = {Mon, 01 Feb 2021 08:43:13 +0100}
}

Lightnion: seamless anonymous communication from any web browser

Wouter Lueks, Matthieu Daumas, and Carmela Troncoso

Workshop on Measurements, Attacks and Defenses for the Web (MADWeb) 2019, 2019.

BibTeX
code

@inproceedings{LueksDT19,
  author = {Lueks, Wouter and Daumas, Matthieu and Troncoso, Carmela},
  title = {Lightnion: seamless anonymous communication from any web browser},
  code = {https://github.com/spring-epfl/lightnion/},
  booktitle = {Workshop on Measurements, Attacks and Defenses for the Web (MADWeb) 2019},
  year = {2019}
}

2018

Evading classifiers in discrete domains with provable optimality guarantees

Bogdan Kulynych, Jamie Hayes, Nikita Samarin, and Carmela Troncoso

CoRR, vol. abs/1810.10939, 2018.

@article{abs-1810-10939,
  author = {Kulynych, Bogdan and Hayes, Jamie and Samarin, Nikita and Troncoso, Carmela},
  title = {Evading classifiers in discrete domains with provable optimality guarantees},
  journal = {CoRR},
  volume = {abs/1810.10939},
  year = {2018},
  url = {http://arxiv.org/abs/1810.10939},
  eprinttype = {arXiv},
  eprint = {1810.10939},
  timestamp = {Wed, 31 Oct 2018 14:24:29 +0100},
  keywords = {preprint}
}

ClaimChain: Improving the Security and Privacy of In-band Key Distribution for Messaging

Bogdan Kulynych, Wouter Lueks, Marios Isaakidis, George Danezis, and Carmela Troncoso

Proceedings of the 2018 Workshop on Privacy in the Electronic Society, WPES@CCS 2018, Toronto, ON, Canada, October 15-19, 2018, 2018, pp. 86–103.

@inproceedings{KulynychLIDT18,
  author = {Kulynych, Bogdan and Lueks, Wouter and Isaakidis, Marios and Danezis, George and Troncoso, Carmela},
  editor = {Lie, David and Mannan, Mohammad and Johnson, Aaron},
  title = {ClaimChain: Improving the Security and Privacy of In-band Key Distribution for Messaging},
  booktitle = {Proceedings of the 2018 Workshop on Privacy in the Electronic Society, WPES@CCS 2018, Toronto, ON, Canada, October 15-19, 2018},
  pages = {86--103},
  publisher = {{ACM}},
  year = {2018},
  url = {https://doi.org/10.1145/3267323.3268947},
  doi = {10.1145/3267323.3268947},
  timestamp = {Wed, 28 Jul 2021 08:57:48 +0200}
}

Knock Knock, Who’s There? Membership Inference on Aggregate Location Data

Apostolos Pyrgelis, Carmela Troncoso, and Emiliano De Cristofaro

25th Annual Network and Distributed System Security Symposium, NDSS 2018, San Diego, California, USA, February 18-21, 2018, 2018.

runner-up 2019 CNIL Privacy Protection Award
award Distinguished Paper Award at NDSS18

@inproceedings{PyrgelisTC18,
  author = {Pyrgelis, Apostolos and Troncoso, Carmela and Cristofaro, Emiliano De},
  title = {Knock Knock, Who's There? Membership Inference on Aggregate Location Data},
  booktitle = {25th Annual Network and Distributed System Security Symposium, {NDSS} 2018, San Diego, California, USA, February 18-21, 2018},
  publisher = {The Internet Society},
  year = {2018},
  url = {http://wp.internetsociety.org/ndss/wp-content/uploads/sites/25/2018/02/ndss2018\_05B-5\_Pyrgelis\_paper.pdf},
  award = {Distinguished Paper Award at NDSS18},
  awardlink = {https://www.ndss-symposium.org/ndss2018/},
  runnerup = {2019 CNIL Privacy Protection Award},
  runneruplink = {https://www.cnil.fr/en/inria-and-cnil-award-2019-privacy-protection-prize-european-research-team},
  timestamp = {Thu, 17 Jun 2021 16:04:48 +0200}
}

TARANET: Traffic-Analysis Resistant Anonymity at the Network Layer

Chen Chen, Daniele Enrico Asoni, Adrian Perrig, David Barrera, George Danezis, and Carmela Troncoso

2018 IEEE European Symposium on Security and Privacy, EuroS&P 2018, London, United Kingdom, April 24-26, 2018, 2018, pp. 137–152.

@inproceedings{0013APBDT18,
  author = {Chen, Chen and Asoni, Daniele Enrico and Perrig, Adrian and Barrera, David and Danezis, George and Troncoso, Carmela},
  title = {{TARANET:} Traffic-Analysis Resistant Anonymity at the Network Layer},
  booktitle = {2018 {IEEE} European Symposium on Security and Privacy, EuroS{\&}P 2018, London, United Kingdom, April 24-26, 2018},
  pages = {137--152},
  publisher = {{IEEE}},
  year = {2018},
  url = {https://doi.org/10.1109/EuroSP.2018.00018},
  doi = {10.1109/EuroSP.2018.00018},
  timestamp = {Mon, 18 May 2020 09:33:14 +0200}
}

Questioning the assumptions behind fairness solutions

Rebekah Overdorf, Bogdan Kulynych, Ero Balsa, Carmela Troncoso, and Seda F. Gürses

CoRR, vol. abs/1811.11293, 2018.

@article{abs-1811-11293,
  author = {Overdorf, Rebekah and Kulynych, Bogdan and Balsa, Ero and Troncoso, Carmela and G{\"{u}}rses, Seda F.},
  title = {Questioning the assumptions behind fairness solutions},
  journal = {CoRR},
  volume = {abs/1811.11293},
  year = {2018},
  url = {http://arxiv.org/abs/1811.11293},
  eprinttype = {arXiv},
  eprint = {1811.11293},
  timestamp = {Fri, 30 Nov 2018 12:44:28 +0100}
}

DNS privacy not so private: the traffic analysis perspective

Sandra Siby, Marc Juarez, Narseo Vallina-Rodriguez, and Carmela Troncoso

The 11th Workshop on Hot Topics in Privacy Enhancing Technologies (HotPETs 2018), 2018.

BibTeX

@inproceedings{siby2018dns,
  title = {DNS privacy not so private: the traffic analysis perspective},
  author = {Siby, Sandra and Juarez, Marc and Vallina-Rodriguez, Narseo and Troncoso, Carmela},
  booktitle = {The 11th Workshop on Hot Topics in Privacy Enhancing Technologies (HotPETs 2018)},
  year = {2018}
}

2017

Small Data

Oliver Kennedy, D. Richard Hipp, Stratos Idreos, Amélie Marian, Arnab Nandi, Carmela Troncoso, and Eugene Wu

33rd IEEE International Conference on Data Engineering, ICDE 2017, San Diego, CA, USA, April 19-22, 2017, 2017, pp. 1475–1476.

@inproceedings{KennedyHIMNT017,
  author = {Kennedy, Oliver and Hipp, D. Richard and Idreos, Stratos and Marian, Am{\'{e}}lie and Nandi, Arnab and Troncoso, Carmela and Wu, Eugene},
  title = {Small Data},
  booktitle = {33rd {IEEE} International Conference on Data Engineering, {ICDE} 2017, San Diego, CA, USA, April 19-22, 2017},
  pages = {1475--1476},
  publisher = {{IEEE} Computer Society},
  year = {2017},
  url = {https://doi.org/10.1109/ICDE.2017.216},
  doi = {10.1109/ICDE.2017.216},
  timestamp = {Wed, 16 Oct 2019 14:14:56 +0200}
}

Filter design for delay-based anonymous communications

Simon Oya, Fernando Pérez-González, and Carmela Troncoso

2017 IEEE International Conference on Acoustics, Speech and Signal Processing, ICASSP 2017, New Orleans, LA, USA, March 5-9, 2017, 2017, pp. 2107–2111.

@inproceedings{OyaPT17,
  author = {Oya, Simon and P{\'{e}}rez{-}Gonz{\'{a}}lez, Fernando and Troncoso, Carmela},
  title = {Filter design for delay-based anonymous communications},
  booktitle = {2017 {IEEE} International Conference on Acoustics, Speech and Signal Processing, {ICASSP} 2017, New Orleans, LA, USA, March 5-9, 2017},
  pages = {2107--2111},
  publisher = {{IEEE}},
  year = {2017},
  url = {https://doi.org/10.1109/ICASSP.2017.7952528},
  doi = {10.1109/ICASSP.2017.7952528},
  timestamp = {Wed, 16 Oct 2019 14:14:52 +0200}
}

Back to the Drawing Board: Revisiting the Design of Optimal Location Privacy-preserving Mechanisms

Simon Oya, Carmela Troncoso, and Fernando Pérez-González

Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, CCS 2017, Dallas, TX, USA, October 30 - November 03, 2017, 2017, pp. 1959–1972.

@inproceedings{OyaTP17,
  author = {Oya, Simon and Troncoso, Carmela and P{\'{e}}rez{-}Gonz{\'{a}}lez, Fernando},
  editor = {Thuraisingham, Bhavani M. and Evans, David and Malkin, Tal and Xu, Dongyan},
  title = {Back to the Drawing Board: Revisiting the Design of Optimal Location Privacy-preserving Mechanisms},
  booktitle = {Proceedings of the 2017 {ACM} {SIGSAC} Conference on Computer and Communications Security, {CCS} 2017, Dallas, TX, USA, October 30 - November 03, 2017},
  pages = {1959--1972},
  publisher = {{ACM}},
  year = {2017},
  url = {https://doi.org/10.1145/3133956.3134004},
  doi = {10.1145/3133956.3134004},
  timestamp = {Tue, 10 Nov 2020 19:59:50 +0100}
}

What Does The Crowd Say About You? Evaluating Aggregation-based Location Privacy

Apostolos Pyrgelis, Carmela Troncoso, and Emiliano De Cristofaro

Proc. Priv. Enhancing Technol., vol. 2017, no. 4, pp. 156–176, 2017.

@article{PyrgelisTC17,
  author = {Pyrgelis, Apostolos and Troncoso, Carmela and Cristofaro, Emiliano De},
  title = {What Does The Crowd Say About You? Evaluating Aggregation-based Location Privacy},
  journal = {Proc. Priv. Enhancing Technol.},
  volume = {2017},
  number = {4},
  pages = {156--176},
  year = {2017},
  url = {https://doi.org/10.1515/popets-2017-0043},
  doi = {10.1515/popets-2017-0043},
  timestamp = {Tue, 01 Sep 2020 13:13:13 +0200}
}

Systematizing Decentralization and Privacy: Lessons from 15 years of research and deployments

Carmela Troncoso, George Danezis, Marios Isaakidis, and Harry Halpin

CoRR, vol. abs/1704.08065, 2017.

@article{TroncosoDIH17,
  author = {Troncoso, Carmela and Danezis, George and Isaakidis, Marios and Halpin, Harry},
  title = {Systematizing Decentralization and Privacy: Lessons from 15 years of research and deployments},
  journal = {CoRR},
  volume = {abs/1704.08065},
  year = {2017},
  url = {http://arxiv.org/abs/1704.08065},
  eprinttype = {arXiv},
  eprint = {1704.08065},
  timestamp = {Mon, 13 Aug 2018 16:48:31 +0200}
}

Dissecting Tor Bridges: A Security Evaluation of their Private and Public Infrastructures

Srdjan Matic, Carmela Troncoso, and Juan Caballero

24th Annual Network and Distributed System Security Symposium, NDSS 2017, San Diego, California, USA, February 26 - March 1, 2017, 2017.

@inproceedings{MaticTC17,
  author = {Matic, Srdjan and Troncoso, Carmela and Caballero, Juan},
  title = {Dissecting Tor Bridges: {A} Security Evaluation of their Private and Public Infrastructures},
  booktitle = {24th Annual Network and Distributed System Security Symposium, {NDSS} 2017, San Diego, California, USA, February 26 - March 1, 2017},
  publisher = {The Internet Society},
  year = {2017},
  url = {https://www.ndss-symposium.org/ndss2017/ndss-2017-programme/dissecting-tor-bridges-security-evaluation-their-private-and-public-infrastructures/},
  timestamp = {Mon, 01 Feb 2021 08:42:26 +0100}
}