Publication

The following list of publications may not be up-to-date. Please refer to the Google Scholar pages of our team members for the most recent information.

Preprints

The Many Ways of Being Transparent in Human-Computer Interaction Research

Yvonne Jansen, Jan Benjamin Vornhagen, Olga Iarygina, Kavous Salehzadeh Niksirat, Lonni Besançon, Pierre Dragicevic, Julien Gori, and Chat Wacharamanotham

OSF, Jul-2024.

@misc{jansen_many_2024,
  title = {The {{Many Ways}} of {{Being Transparent}} in {{Human-Computer Interaction Research}}},
  author = {Jansen, Yvonne and Vornhagen, Jan Benjamin and Iarygina, Olga and Niksirat, Kavous Salehzadeh and Besan{\c c}on, Lonni and Dragicevic, Pierre and Gori, Julien and Wacharamanotham, Chat},
  year = {2024},
  month = jul,
  publisher = {OSF},
  doi = {10.31219/osf.io/2wze6},
  url = {https://osf.io/2wze6},
  urldate = {2024-09-09},
  archiveprefix = {OSF},
  langid = {american},
  keywords = {preprint},
  file = {/Users/kavous/Zotero/storage/WL4Q2AXE/Jansen et al. - 2024 - The Many Ways of Being Transparent in Human-Comput.pdf}
}

Preliminary Analysis of Potential Harms in the Luca Tracing System

Theresa Stadler, Wouter Lueks, Katharina Kohls, and Carmela Troncoso

CoRR, vol. abs/2103.11958, 2021.

@article{StadlerLKT21,
  author = {Stadler, Theresa and Lueks, Wouter and Kohls, Katharina and Troncoso, Carmela},
  title = {Preliminary Analysis of Potential Harms in the Luca Tracing System},
  journal = {CoRR},
  volume = {abs/2103.11958},
  year = {2021},
  url = {https://arxiv.org/abs/2103.11958},
  eprinttype = {arXiv},
  eprint = {2103.11958},
  keywords = {preprint}
}

Privacy Engineering Meets Software Engineering. On the Challenges of Engineering Privacy ByDesign

Blagovesta Kostova, Seda F. Gürses, and Carmela Troncoso

CoRR, vol. abs/2007.08613, 2020.

@article{abs-2007-08613,
  author = {Kostova, Blagovesta and G{\"{u}}rses, Seda F. and Troncoso, Carmela},
  title = {Privacy Engineering Meets Software Engineering. On the Challenges of Engineering Privacy ByDesign},
  journal = {CoRR},
  volume = {abs/2007.08613},
  year = {2020},
  url = {https://arxiv.org/abs/2007.08613},
  eprinttype = {arXiv},
  eprint = {2007.08613},
  timestamp = {Tue, 28 Jul 2020 14:46:12 +0200},
  keywords = {preprint}
}

The Bayes Security Measure

Konstantinos Chatzikokolakis, Giovanni Cherubin, Catuscia Palamidessi, and Carmela Troncoso

CoRR, vol. abs/2011.03396, 2020.

@article{abs-2011-03396,
  author = {Chatzikokolakis, Konstantinos and Cherubin, Giovanni and Palamidessi, Catuscia and Troncoso, Carmela},
  title = {The Bayes Security Measure},
  journal = {CoRR},
  volume = {abs/2011.03396},
  year = {2020},
  url = {https://arxiv.org/abs/2011.03396},
  eprinttype = {arXiv},
  eprint = {2011.03396},
  timestamp = {Thu, 12 Nov 2020 15:14:56 +0100},
  keywords = {preprint}
}

Evading classifiers in discrete domains with provable optimality guarantees

Bogdan Kulynych, Jamie Hayes, Nikita Samarin, and Carmela Troncoso

CoRR, vol. abs/1810.10939, 2018.

@article{abs-1810-10939,
  author = {Kulynych, Bogdan and Hayes, Jamie and Samarin, Nikita and Troncoso, Carmela},
  title = {Evading classifiers in discrete domains with provable optimality guarantees},
  journal = {CoRR},
  volume = {abs/1810.10939},
  year = {2018},
  url = {http://arxiv.org/abs/1810.10939},
  eprinttype = {arXiv},
  eprint = {1810.10939},
  timestamp = {Wed, 31 Oct 2018 14:24:29 +0100},
  keywords = {preprint}
}

Conference and journal articles

2025

Reimagining Wearable-Based Digital Contact Tracing: Insights from Kenya and Côte d’Ivoire

Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems, New York, NY, USA, 2025.

@inproceedings{Salehzadeh2025Reimagining,
  author = {},
  title = {Reimagining Wearable-Based Digital Contact Tracing: Insights from Kenya and Côte d'Ivoire},
  year = {2025},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  url = {https://dl.acm.org/doi/10.1145/3706598.3713817},
  booktitle = {Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems},
  location = {Yokohama, Japan},
  series = {CHI '25}
}

Double-Edged Shield: On the Fingerprintability of Customized Ad Blockers

Saiid El Hajj Chehade, Ben Stock, and Carmela Troncoso

USENIX Security Symposium (USENIX), 2025.

BibTeX

@inproceedings{flfp2025saiid,
  title = {Double-Edged Shield: On the Fingerprintability of Customized Ad Blockers},
  author = {El Hajj Chehade, Saiid and Stock, Ben and Troncoso, Carmela},
  booktitle = {USENIX Security Symposium (USENIX)},
  year = {2025},
  shorttitle = {FLFP},
  shortdescription = {Ad-blocker Filter-list Fingerprinting},
  keywords = {privacy;web;ad blocking;filter lists;browser fingerprinting}
}

403 Forbidden? Ethically Evaluating Broken Access Control in the Wild

Saiid El Hajj Chehade, Florian Hantke, and Ben Stock

2025 IEEE Symposium on Security and Privacy (SP), 2025.

BibTeX

@inproceedings{vsf2025saiid,
  title = {{403 Forbidden? Ethically Evaluating Broken Access Control in the Wild}},
  author = {El Hajj Chehade, Saiid and Hantke, Florian and Stock, Ben},
  booktitle = {2025 IEEE Symposium on Security and Privacy (SP)},
  year = {2025},
  shorttitle = {403 Forbidden},
  shortdescription = {Ethical Access Control Testing in the Wild},
  keywords = {access control; web security; ethical server-side scanning; responsible disclosure}
}

2024

Holding Secrets Accountable: Auditing Privacy-Preserving Machine Learning

Hidde Lycklama, Alexander Viand, Nicolas Küchler, Christian Knabenhans, and Anwar Hithnawi

33rd USENIX Security Symposium, USENIX Security 2024, Philadelphia, PA, USA, August 14-16, 2024, 2024.

@inproceedings{arc,
  author = {Lycklama, Hidde and Viand, Alexander and K{\"{u}}chler, Nicolas and Knabenhans, Christian and Hithnawi, Anwar},
  editor = {Balzarotti, Davide and Xu, Wenyuan},
  title = {Holding Secrets Accountable: Auditing Privacy-Preserving Machine Learning},
  booktitle = {33rd {USENIX} Security Symposium, {USENIX} Security 2024, Philadelphia,
                    PA, USA, August 14-16, 2024},
  publisher = {{USENIX} Association},
  year = {2024},
  url = {https://www.usenix.org/conference/usenixsecurity24/presentation/lycklama},
  timestamp = {Mon, 22 Jul 2024 17:10:49 +0200},
  biburl = {https://dblp.org/rec/conf/uss/LycklamaVKKH24.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

Designing a Data-Driven Survey System: Leveraging Participants’ Online Data to Personalize Surveys

Lev Velykoivanenko, Kavous Salehzadeh Niksirat, Stefan Teofanovic, Bertil Chapuis, Michelle L. Mazurek, and Kévin Huguenin

Proceedings of the CHI Conference on Human Factors in Computing Systems, New York, NY, USA, 2024, pp. 1–22.

@inproceedings{velykoivanenko_designing_2024,
  title = {Designing a {{Data-Driven Survey System}}: {{Leveraging Participants}}' {{Online Data}} to {{Personalize Surveys}}},
  shorttitle = {Designing a {{Data-Driven Survey System}}},
  booktitle = {Proceedings of the {{CHI Conference}} on {{Human Factors}} in {{Computing Systems}}},
  author = {Velykoivanenko, Lev and Salehzadeh Niksirat, Kavous and Teofanovic, Stefan and Chapuis, Bertil and Mazurek, Michelle L. and Huguenin, K{\'e}vin},
  year = {2024},
  month = may,
  series = {{{CHI}} '24},
  pages = {1--22},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  doi = {10.1145/3613904.3642572},
  url = {https://dl.acm.org/doi/10.1145/3613904.3642572},
  urldate = {2024-09-09},
  isbn = {9798400703300}
}

Know Their Customers: An Empirical Study of Online Account Enumeration Attacks

Maël Maceiras, Kavous Salehzadeh Niksirat, Gaël Bernard, Benoit Garbinato, Mauro Cherubini, Mathias Humbert, and Kévin Huguenin

ACM Trans. Web, vol. 18, no. 3, pp. 37:1–37:36, Jun. 2024.

@article{maceiras_know_2024,
  title = {Know Their {{Customers}}: {{An Empirical Study}} of {{Online Account Enumeration Attacks}}},
  shorttitle = {Know Their {{Customers}}},
  author = {Maceiras, Ma{\"e}l and Salehzadeh Niksirat, Kavous and Bernard, Ga{\"e}l and Garbinato, Benoit and Cherubini, Mauro and Humbert, Mathias and Huguenin, K{\'e}vin},
  year = {2024},
  month = jun,
  journal = {ACM Trans. Web},
  volume = {18},
  number = {3},
  pages = {37:1--37:36},
  issn = {1559-1131},
  doi = {10.1145/3664201},
  url = {https://dl.acm.org/doi/10.1145/3664201},
  urldate = {2024-09-09}
}

Our Data, Our Solutions: A Participatory Approach for Enhancing Privacy in Wearable Activity Tracker Third-Party Apps

Noé Zufferey, Kavous Salehzadeh Niksirat, Mathias Humbert, and Kévin Huguenin

Proceedings on Privacy Enhancing Technologies, 2024.

@article{zufferey_our_2024,
  title = {Our {{Data}}, {{Our Solutions}}: {{A Participatory Approach}} for {{Enhancing Privacy}} in {{Wearable Activity Tracker Third-Party Apps}}},
  shorttitle = {Our {{Data}}, {{Our Solutions}}},
  author = {Zufferey, No{\'e} and Niksirat, Kavous Salehzadeh and Humbert, Mathias and Huguenin, K{\'e}vin},
  year = {2024},
  journal = {Proceedings on Privacy Enhancing Technologies},
  issn = {2299-0984},
  url = {https://petsymposium.org/popets/2024/popets-2024-0139.php},
  urldate = {2024-09-09}
}

Security and Privacy with Second-Hand Storage Devices: A User-Centric Perspective from Switzerland

Kavous Salehzadeh Niksirat, Diana Korka, Quentin Jacquemin, Céline Vanini, Mathias Humbert, Mauro Cherubini, Sylvain Métille, and Kévin Huguenin

Proceedings on Privacy Enhancing Technologies, 2024.

@article{niksirat_security_2024,
  title = {Security and {{Privacy}} with {{Second-Hand Storage Devices}}: {{A User-Centric Perspective}} from {{Switzerland}}},
  shorttitle = {Security and {{Privacy}} with {{Second-Hand Storage Devices}}},
  author = {Niksirat, Kavous Salehzadeh and Korka, Diana and Jacquemin, Quentin and Vanini, C{\'e}line and Humbert, Mathias and Cherubini, Mauro and M{\'e}tille, Sylvain and Huguenin, K{\'e}vin},
  year = {2024},
  journal = {Proceedings on Privacy Enhancing Technologies},
  issn = {2299-0984},
  url = {https://petsymposium.org/popets/2024/popets-2024-0057.php},
  urldate = {2024-09-09}
}

Shadow Health-Related Data: Definition, Categorization, and User Perspectives

Yamane El Zein, Kavous Salehzadeh Niksirat, Noé Zufferey, Mathias Humbert, and Kévin Huguenin

Proceedings of the European Symposium on Usable Security (EuroUSEC), Karlstad, Sweden, 2024.

@inproceedings{el_zein_shadow_2024,
  title = {Shadow {{Health-Related Data}}: {{Definition}}, {{Categorization}}, and {{User Perspectives}}},
  shorttitle = {Shadow {{Health-Related Data}}},
  booktitle = {Proceedings of the {{European Symposium}} on {{Usable Security}} ({{EuroUSEC}})},
  author = {El Zein, Yamane and Salehzadeh Niksirat, Kavous and Zufferey, No{\'e} and Humbert, Mathias and Huguenin, K{\'e}vin},
  year = {2024},
  month = sep,
  address = {Karlstad, Sweden},
  doi = {10.1145/3688459.3688462},
  url = {https://hal.science/hal-04668582},
  urldate = {2024-09-09},
  keywords = {health-related data,privacy,user study}
}

Wearable Activity Trackers: A Survey on Utility, Privacy, and Security

Kavous Salehzadeh Niksirat, Lev Velykoivanenko, Noé Zufferey, Mauro Cherubini, Kévin Huguenin, and Mathias Humbert

ACM Comput. Surv., vol. 56, no. 7, pp. 183:1–183:40, Apr. 2024.

@article{salehzadeh_niksirat_wearable_2024,
  title = {Wearable {{Activity Trackers}}: {{A Survey}} on {{Utility}}, {{Privacy}}, and {{Security}}},
  shorttitle = {Wearable {{Activity Trackers}}},
  author = {Salehzadeh Niksirat, Kavous and Velykoivanenko, Lev and Zufferey, No{\'e} and Cherubini, Mauro and Huguenin, K{\'e}vin and Humbert, Mathias},
  year = {2024},
  month = apr,
  journal = {ACM Comput. Surv.},
  volume = {56},
  number = {7},
  pages = {183:1--183:40},
  issn = {0360-0300},
  doi = {10.1145/3645091},
  url = {https://dl.acm.org/doi/10.1145/3645091},
  urldate = {2024-09-09}
}

vFHE: Verifiable Fully Homomorphic Encryption

Christian Knabenhans, Alexander Viand, Antonio Merino-Gallardo, and Anwar Hithnawi

Proceedings of the 12th Workshop on Encrypted Computing & Applied Homomorphic Cryptography, Salt Lake City, U.S.A., 14 October 2024, 2024.

@inproceedings{vfhe,
  author = {Knabenhans, Christian and Viand, Alexander and Merino-Gallardo, Antonio and Hithnawi, Anwar},
  editor = {Bergamaschi, Flavio and Costache, Anamaria and Rohloff, Kurt},
  title = {{vFHE}: Verifiable Fully Homomorphic Encryption},
  booktitle = {Proceedings of the 12th Workshop on Encrypted Computing {\&} Applied
                    Homomorphic Cryptography, Salt Lake City, U.S.A., 14 October 2024},
  publisher = {{ACM}},
  year = {2024},
  url = {https://doi.org/110.1145/3689945.3694806},
  doi = {10.1145/3689945.3694806}
}

Universal Neural-Cracking-Machines: Self-Configurable Password Models from Auxiliary Data

D. Pasquini, G. Ateniese, and C. Troncoso

2024 IEEE Symposium on Security and Privacy (SP), Los Alamitos, CA, USA, 2024, pp. 32–32.

@inproceedings{pasquini_carmela_neural,
  author = {Pasquini, D. and Ateniese, G. and Troncoso, C.},
  booktitle = {2024 IEEE Symposium on Security and Privacy (SP)},
  title = {Universal Neural-Cracking-Machines: Self-Configurable Password Models from Auxiliary Data},
  year = {2024},
  issn = {2375-1207},
  pages = {32-32},
  keywords = {password guessing;deep learning;differential privacy},
  doi = {10.1109/SP54263.2024.00032},
  url = {https://doi.ieeecomputersociety.org/10.1109/SP54263.2024.00032},
  publisher = {IEEE Computer Society},
  address = {Los Alamitos, CA, USA},
  month = may
}

Breach Extraction Attacks: Exposing and Addressing the Leakage in Second Generation Compromised Credential Checking Services

D. Pasquini, D. Francati, G. Ateniese, and E. M. Kornaropoulos

2024 IEEE Symposium on Security and Privacy (SP), Los Alamitos, CA, USA, 2024, pp. 114–114.

@inproceedings{pasquini_kornaropoulos_breach,
  author = {Pasquini, D. and Francati, D. and Ateniese, G. and Kornaropoulos, E. M.},
  booktitle = {2024 IEEE Symposium on Security and Privacy (SP)},
  title = {Breach Extraction Attacks: Exposing and Addressing the Leakage in Second Generation Compromised Credential Checking Services},
  year = {2024},
  issn = {2375-1207},
  pages = {114-114},
  doi = {10.1109/SP54263.2024.00114},
  url = {https://doi.ieeecomputersociety.org/10.1109/SP54263.2024.00114},
  publisher = {IEEE Computer Society},
  address = {Los Alamitos, CA, USA},
  month = may
}

SINBAD: Saliency-informed detection of breakage caused by ad blocking

Saiid El Hajj Chehade, Sandra Siby, and Carmela Troncoso

2024 IEEE Symposium on Security and Privacy (SP), Los Alamitos, CA, USA, 2024, pp. 211–211.

@inproceedings{saiid_sandra_sinbad,
  author = {El Hajj Chehade, Saiid and Siby, Sandra and Troncoso, Carmela},
  booktitle = {2024 IEEE Symposium on Security and Privacy (SP)},
  title = {SINBAD: Saliency-informed detection of breakage caused by ad blocking},
  year = {2024},
  issn = {2375-1207},
  pages = {211-211},
  keywords = {privacy;web;ad blocking;web breakage;machine learning},
  doi = {10.1109/SP54263.2024.00199},
  url = {https://doi.ieeecomputersociety.org/10.1109/SP54263.2024.00199},
  publisher = {IEEE Computer Society},
  address = {Los Alamitos, CA, USA},
  month = may
}

The Fundamental Limits of Least-Privilege Learning

Theresa Stadler, Bogdan Kulynych, Nicoals Papernot, Michael Gastpar, and Carmela Troncoso

Proceedings of the 41th International Conference on Machine Learning (ICML 24). 2024.

BibTeX

@misc{stadler2024fundamental,
  title = {The Fundamental Limits of Least-Privilege Learning},
  author = {Stadler, Theresa and Kulynych, Bogdan and Papernot, Nicoals and Gastpar, Michael and Troncoso, Carmela},
  year = {2024},
  booktitle = {Proceedings of the 41th International Conference on Machine Learning (ICML 24)}
}

VERITAS: Plaintext Encoders for Practical Verifiable Homomorphic Encryption

Sylvain Chatel, Christian Knabenhans, Apostolos Pyrgelis, Carmela Troncoso, and Jean-Pierre Hubaux

Proceedings of the 2024 ACM SIGSAC Conference on Computer and Communications Security, 2024.

@inproceedings{sylvain_christian_veritas,
  title = {VERITAS: Plaintext Encoders for Practical Verifiable Homomorphic Encryption},
  author = {Chatel, Sylvain and Knabenhans, Christian and Pyrgelis, Apostolos and Troncoso, Carmela and Hubaux, Jean{-}Pierre},
  year = {2024},
  booktitle = {Proceedings of the 2024 ACM SIGSAC Conference on Computer and Communications Security},
  doi = {10.1145/3658644.3670282},
  url = {https://doi.org/10.1145/3658644.3670282},
  series = {CCS '24},
  biburl = {https://dblp.org/rec/journals/corr/abs-2207-14071.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

2023

Bayes Security: A Not So Average Metric

Konstantinos Chatzikokolakis, Giovanni Cherubin, Catuscia Palamidessi, and Carmela Troncoso

36th IEEE Computer Security Foundations Symposium, CSF 2023, Dubrovnik, Croatia, July 10-14, 2023, 2023, pp. 388–406.

@inproceedings{DBLP:conf/csfw/ChatzikokolakisCPT23,
  author = {Chatzikokolakis, Konstantinos and Cherubin, Giovanni and Palamidessi, Catuscia and Troncoso, Carmela},
  title = {Bayes Security: {A} Not So Average Metric},
  booktitle = {36th {IEEE} Computer Security Foundations Symposium, {CSF} 2023, Dubrovnik,
                    Croatia, July 10-14, 2023},
  pages = {388--406},
  publisher = {{IEEE}},
  year = {2023},
  url = {https://doi.org/10.1109/CSF57540.2023.00011},
  doi = {10.1109/CSF57540.2023.00011},
  timestamp = {Tue, 05 Sep 2023 20:33:27 +0200},
  biburl = {https://dblp.org/rec/conf/csfw/ChatzikokolakisCPT23.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

Not Yet Another Digital ID: Privacy-Preserving Humanitarian Aid Distribution

Boya Wang, Wouter Lueks, Justinas Sukaitis, Vincent Graf Narbel, and Carmela Troncoso

44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 2023, pp. 645–663.

award Distinguished Paper Award

@inproceedings{DBLP:conf/sp/WangLSNT23,
  author = {Wang, Boya and Lueks, Wouter and Sukaitis, Justinas and Narbel, Vincent Graf and Troncoso, Carmela},
  title = {Not Yet Another Digital {ID:} Privacy-Preserving Humanitarian Aid
                    Distribution},
  booktitle = {44th {IEEE} Symposium on Security and Privacy, {SP} 2023, San Francisco,
                    CA, USA, May 21-25, 2023},
  pages = {645--663},
  publisher = {{IEEE}},
  year = {2023},
  url = {https://doi.org/10.1109/SP46215.2023.10179306},
  doi = {10.1109/SP46215.2023.10179306},
  timestamp = {Thu, 27 Jul 2023 08:17:10 +0200},
  biburl = {https://dblp.org/rec/conf/sp/WangLSNT23.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org},
  award = {Distinguished Paper Award}
}

On the (In)security of Peer-to-Peer Decentralized Machine Learning

Dario Pasquini, Mathilde Raynal, and Carmela Troncoso

44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 2023, pp. 418–436.

@inproceedings{DBLP:conf/sp/PasquiniRT23,
  author = {Pasquini, Dario and Raynal, Mathilde and Troncoso, Carmela},
  title = {On the (In)security of Peer-to-Peer Decentralized Machine Learning},
  booktitle = {44th {IEEE} Symposium on Security and Privacy, {SP} 2023, San Francisco,
                    CA, USA, May 21-25, 2023},
  pages = {418--436},
  publisher = {{IEEE}},
  year = {2023},
  url = {https://doi.org/10.1109/SP46215.2023.10179291},
  doi = {10.1109/SP46215.2023.10179291},
  timestamp = {Thu, 27 Jul 2023 08:17:10 +0200},
  biburl = {https://dblp.org/rec/conf/sp/PasquiniRT23.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

Evaluating practical QUIC website fingerprinting defenses for the masses

Sandra Siby, Ludovic Barman, Christopher A. Wood, Marwan Fayed, Nick Sullivan, and Carmela Troncoso

Proc. Priv. Enhancing Technol., vol. 2023, no. 4, pp. 79–95, 2023.

@article{DBLP:journals/popets/SibyBWFST23,
  author = {Siby, Sandra and Barman, Ludovic and Wood, Christopher A. and Fayed, Marwan and Sullivan, Nick and Troncoso, Carmela},
  title = {Evaluating practical {QUIC} website fingerprinting defenses for the
                    masses},
  journal = {Proc. Priv. Enhancing Technol.},
  volume = {2023},
  number = {4},
  pages = {79--95},
  year = {2023},
  url = {https://doi.org/10.56553/popets-2023-0099},
  doi = {10.56553/POPETS-2023-0099},
  timestamp = {Thu, 17 Aug 2023 15:37:20 +0200},
  biburl = {https://dblp.org/rec/journals/popets/SibyBWFST23.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

Arbitrary Decisions are a Hidden Cost of Differentially Private Training

Bogdan Kulynych, Hsiang Hsu, Carmela Troncoso, and Flávio P. Calmon

Proceedings of the 2023 ACM Conference on Fairness, Accountability, and Transparency, FAccT 2023, Chicago, IL, USA, June 12-15, 2023, 2023, pp. 1609–1623.

@inproceedings{DBLP:conf/fat/KulynychHTC23,
  author = {Kulynych, Bogdan and Hsu, Hsiang and Troncoso, Carmela and Calmon, Fl{\'{a}}vio P.},
  title = {Arbitrary Decisions are a Hidden Cost of Differentially Private Training},
  booktitle = {Proceedings of the 2023 {ACM} Conference on Fairness, Accountability,
                    and Transparency, FAccT 2023, Chicago, IL, USA, June 12-15, 2023},
  pages = {1609--1623},
  publisher = {{ACM}},
  year = {2023},
  url = {https://doi.org/10.1145/3593013.3594103},
  doi = {10.1145/3593013.3594103},
  timestamp = {Thu, 15 Jun 2023 21:57:00 +0200},
  biburl = {https://dblp.org/rec/conf/fat/KulynychHTC23.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

Adversarial Robustness for Tabular Data through Cost and Utility Awareness

Klim Kireev, Bogdan Kulynych, and Carmela Troncoso

30th Annual Network and Distributed System Security Symposium, NDSS 2023, San Diego, California, USA, February 27 - March 3, 2023, 2023.

@inproceedings{DBLP:conf/ndss/KireevKT23,
  author = {Kireev, Klim and Kulynych, Bogdan and Troncoso, Carmela},
  title = {Adversarial Robustness for Tabular Data through Cost and Utility Awareness},
  booktitle = {30th Annual Network and Distributed System Security Symposium, {NDSS}
                    2023, San Diego, California, USA, February 27 - March 3, 2023},
  publisher = {The Internet Society},
  year = {2023},
  url = {https://www.ndss-symposium.org/ndss-paper/adversarial-robustness-for-tabular-data-through-cost-and-utility-awareness/},
  timestamp = {Thu, 15 Jun 2023 16:53:21 +0200},
  biburl = {https://dblp.org/rec/conf/ndss/KireevKT23.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

Private Collection Matching Protocols

Kasra Edalatnejad, Mathilde Raynal, Wouter Lueks, and Carmela Troncoso

Proc. Priv. Enhancing Technol., vol. 2023, no. 3, pp. 446–468, 2023.

@article{DBLP:journals/popets/EdalatnejadRLT23,
  author = {Edalatnejad, Kasra and Raynal, Mathilde and Lueks, Wouter and Troncoso, Carmela},
  title = {Private Collection Matching Protocols},
  journal = {Proc. Priv. Enhancing Technol.},
  volume = {2023},
  number = {3},
  pages = {446--468},
  year = {2023},
  url = {https://doi.org/10.56553/popets-2023-0091},
  doi = {10.56553/POPETS-2023-0091},
  timestamp = {Sat, 24 Jun 2023 18:23:33 +0200},
  biburl = {https://dblp.org/rec/journals/popets/EdalatnejadRLT23.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

Your Email Address Holds the Key: Understanding the Connection Between Email and Password Security with Deep Learning

Etienne Salimbeni, Nina Mainusch, and Dario Pasquini

2023 IEEE Security and Privacy Workshops (SPW), 2023, pp. 94–104.

@inproceedings{10188635,
  author = {Salimbeni, Etienne and Mainusch, Nina and Pasquini, Dario},
  booktitle = {2023 IEEE Security and Privacy Workshops (SPW)},
  title = {Your Email Address Holds the Key: Understanding the Connection Between Email and Password Security with Deep Learning},
  year = {2023},
  pages = {94-104},
  keywords = {Deep learning;Hash functions;Analytical models;Computational modeling;Sociology;Passwords;Data models;password-security;deep-learning;conditional-strength-estimation},
  doi = {10.1109/SPW59333.2023.00015}
}

CookieGraph: Understanding and Detecting First-Party Tracking Cookies

Shaoor Munir, Sandra Siby, Umar Iqbal, Steven Englehardt, Zubair Shafiq, and Carmela Troncoso

Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, New York, NY, USA, 2023, pp. 3490–3504.

@inproceedings{10.1145/3576915.3616586,
  author = {Munir, Shaoor and Siby, Sandra and Iqbal, Umar and Englehardt, Steven and Shafiq, Zubair and Troncoso, Carmela},
  title = {CookieGraph: Understanding and Detecting First-Party Tracking Cookies},
  year = {2023},
  isbn = {9798400700507},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  url = {https://doi.org/10.1145/3576915.3616586},
  doi = {10.1145/3576915.3616586},
  booktitle = {Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security},
  pages = {3490–3504},
  numpages = {15},
  keywords = {cookies, machine learning, privacy, tracking, web security},
  location = {, Copenhagen, Denmark, },
  series = {CCS '23}
}

Evaluating Practical QUIC Website Fingerprinting Defenses for the Masses

Sandra Siby, Ludovic Barman, Christopher Wood, Marwan Fayed, Nick Sullivan, and Carmela Troncoso

Proceedings on Privacy Enhancing Technologies, 2023.

@article{siby2023EvaluatingPracticalQUIC,
  title = {Evaluating Practical {{QUIC}} Website Fingerprinting Defenses for the Masses},
  author = {Siby, Sandra and Barman, Ludovic and Wood, Christopher and Fayed, Marwan and Sullivan, Nick and Troncoso, Carmela},
  date = {2023},
  journaltitle = {Proceedings on Privacy Enhancing Technologies},
  issn = {2299-0984},
  url = {https://petsymposium.org/popets/2023/popets-2023-0099.php},
  urldate = {2024-02-29}
}

2022

Deploying decentralized, privacy-preserving proximity tracing

Carmela Troncoso, Dan Bogdanov, Edouard Bugnion, Sylvain Chatel, Cas Cremers, Seda F. Gürses, Jean-Pierre Hubaux, Dennis Jackson, James R. Larus, Wouter Lueks, Rui Oliveira, Mathias Payer, Bart Preneel, Apostolos Pyrgelis, Marcel Salathé, Theresa Stadler, and Michael Veale

Commun. ACM, vol. 65, no. 9, pp. 48–57, 2022.

@article{DBLP:journals/cacm/TroncosoBBCCGHJ22,
  author = {Troncoso, Carmela and Bogdanov, Dan and Bugnion, Edouard and Chatel, Sylvain and Cremers, Cas and G{\"{u}}rses, Seda F. and Hubaux, Jean{-}Pierre and Jackson, Dennis and Larus, James R. and Lueks, Wouter and Oliveira, Rui and Payer, Mathias and Preneel, Bart and Pyrgelis, Apostolos and Salath{\'{e}}, Marcel and Stadler, Theresa and Veale, Michael},
  title = {Deploying decentralized, privacy-preserving proximity tracing},
  journal = {Commun. {ACM}},
  volume = {65},
  number = {9},
  pages = {48--57},
  year = {2022},
  url = {https://doi.org/10.1145/3524107},
  doi = {10.1145/3524107},
  timestamp = {Sun, 02 Oct 2022 15:29:10 +0200},
  biburl = {https://dblp.org/rec/journals/cacm/TroncosoBBCCGHJ22.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}

Disparate Vulnerability to Membership Inference Attacks

Bogdan Kulynych, Mohammad Yaghini, Giovanni Cherubin, Michael Veale, and Carmela Troncoso

Proc. Priv. Enhancing Technol., vol. 2022, no. 1, pp. 460–480, 2022.

@article{KulynychYCVT22,
  author = {Kulynych, Bogdan and Yaghini, Mohammad and Cherubin, Giovanni and Veale, Michael and Troncoso, Carmela},
  title = {Disparate Vulnerability to Membership Inference Attacks},
  journal = {Proc. Priv. Enhancing Technol.},
  volume = {2022},
  number = {1},
  pages = {460--480},
  year = {2022},
  url = {https://doi.org/10.2478/popets-2022-0023},
  doi = {10.2478/popets-2022-0023},
  timestamp = {Mon, 06 Dec 2021 16:57:43 +0100}
}

Eluding Secure Aggregation in Federated Learning via Model Inconsistency

Dario Pasquini, Danilo Francati, and Giuseppe Ateniese

Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, New York, NY, USA, 2022, pp. 2429–2443.

@inproceedings{3560557,
  author = {Pasquini, Dario and Francati, Danilo and Ateniese, Giuseppe},
  title = {Eluding Secure Aggregation in Federated Learning via Model Inconsistency},
  year = {2022},
  isbn = {9781450394505},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  doi = {10.1145/3548606.3560557},
  booktitle = {Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security},
  pages = {2429–2443},
  numpages = {15},
  keywords = {federated learning, model inconsistency, secure aggregation},
  location = {Los Angeles, CA, USA},
  series = {CCS '22},
  url = {https://arxiv.org/abs/2111.07380}
}

HyperLogLog: Exponentially Bad in Adversarial Settings

Kenneth G. Paterson and Mathilde Raynal

2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P), 2022, pp. 154–170.

@inproceedings{9797350,
  author = {Paterson, Kenneth G. and Raynal, Mathilde},
  booktitle = {2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P)},
  title = {HyperLogLog: Exponentially Bad in Adversarial Settings},
  year = {2022},
  pages = {154-170},
  doi = {10.1109/EuroSP53844.2022.00018}
}

What You See is What You Get: Principled Deep Learning via Distributional Generalization

Bogdan Kulynych, Yao-Yuan Yang, Yaodong Yu, Jaroslaw Blasiok, and Preetum Nakkiran

NeurIPS, 2022.

@article{kulynych2022what,
  author = {Kulynych, Bogdan and Yang, Yao{-}Yuan and Yu, Yaodong and Blasiok, Jaroslaw and Nakkiran, Preetum},
  title = {What You See is What You Get: Principled Deep Learning via Distributional
                    Generalization},
  booktitle = {NeurIPS},
  year = {2022},
  url = {http://papers.nips.cc/paper\_files/paper/2022/hash/0f4bbaaaf1e167f79134dd4cf11e3ed4-Abstract-Conference.html}
}

Online Website Fingerprinting: Evaluating Website Fingerprinting Attacks on Tor in the Real World

Giovanni Cherubin, Rob Jansen, and Carmela Troncoso

31st USENIX Security Symposium (USENIX Security 22), Boston, MA, 2022, pp. 753–770.

award Distinguished Paper Award and Second Prize (tie) of the 2022 Internet Defense Prize

@inproceedings{277132,
  author = {Cherubin, Giovanni and Jansen, Rob and Troncoso, Carmela},
  title = {Online Website Fingerprinting: Evaluating Website Fingerprinting Attacks on Tor in the Real World},
  booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
  year = {2022},
  isbn = {978-1-939133-31-1},
  address = {Boston, MA},
  pages = {753--770},
  url = {https://www.usenix.org/conference/usenixsecurity22/presentation/cherubin},
  publisher = {USENIX Association},
  award = {Distinguished Paper Award and Second Prize (tie) of the 2022 Internet Defense Prize},
  month = aug
}

WebGraph: Capturing Advertising and Tracking Information Flows for Robust Blocking

Sandra Siby, Umar Iqbal, Steven Englehardt, Zubair Shafiq, and Carmela Troncoso

31st USENIX Security Symposium (USENIX Security 22), Boston, MA, 2022.

@inproceedings{277176,
  author = {Siby, Sandra and Iqbal, Umar and Englehardt, Steven and Shafiq, Zubair and Troncoso, Carmela},
  title = {WebGraph: Capturing Advertising and Tracking Information Flows for Robust Blocking},
  booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
  publisher = {USENIX Association},
  address = {Boston, MA},
  url = {https://www.usenix.org/conference/usenixsecurity22/presentation/siby},
  year = {2022},
  month = aug
}

Synthetic Data – Anonymisation Groundhog Day

Theresa Stadler, Bristena Oprisanu, and Carmela Troncoso

31st USENIX Security Symposium (USENIX Security 22), Boston, MA, 2022.

@inproceedings{277172,
  author = {Stadler, Theresa and Oprisanu, Bristena and Troncoso, Carmela},
  title = {Synthetic Data {\textendash} Anonymisation Groundhog Day},
  booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
  publisher = {USENIX Association},
  address = {Boston, MA},
  url = {https://www.usenix.org/conference/usenixsecurity22/presentation/stadler},
  year = {2022},
  month = aug
}

2021

Toward a Common Performance and Effectiveness Terminology for Digital Proximity Tracing Applications

Wouter Lueks, Justus Benzler, Dan Bogdanov, Göran Kirchner, Raquel Lucas, Rui Oliveira, Bart Preneel, Marcel Salathé, Carmela Troncoso, and Viktor von Wyl

Frontiers Digit. Health, vol. 3, p. 677929, 2021.

@article{LueksBBKL0PSTW21,
  author = {Lueks, Wouter and Benzler, Justus and Bogdanov, Dan and Kirchner, G{\"{o}}ran and Lucas, Raquel and Oliveira, Rui and Preneel, Bart and Salath{\'{e}}, Marcel and Troncoso, Carmela and von Wyl, Viktor},
  title = {Toward a Common Performance and Effectiveness Terminology for Digital Proximity Tracing Applications},
  journal = {Frontiers Digit. Health},
  volume = {3},
  pages = {677929},
  year = {2021},
  url = {https://doi.org/10.3389/fdgth.2021.677929},
  doi = {10.3389/fdgth.2021.677929},
  timestamp = {Tue, 07 Sep 2021 18:07:14 +0200}
}

CrowdNotifier: Decentralized Privacy-Preserving Presence Tracing

Wouter Lueks, Seda F. Gürses, Michael Veale, Edouard Bugnion, Marcel Salathé, Kenneth G. Paterson, and Carmela Troncoso

Proc. Priv. Enhancing Technol., vol. 2021, no. 4, pp. 350–368, 2021.

@article{LueksGVBSPT21,
  author = {Lueks, Wouter and G{\"{u}}rses, Seda F. and Veale, Michael and Bugnion, Edouard and Salath{\'{e}}, Marcel and Paterson, Kenneth G. and Troncoso, Carmela},
  title = {CrowdNotifier: Decentralized Privacy-Preserving Presence Tracing},
  journal = {Proc. Priv. Enhancing Technol.},
  volume = {2021},
  number = {4},
  pages = {350--368},
  code = {https://github.com/CrowdNotifier/documents},
  year = {2021},
  url = {https://doi.org/10.2478/popets-2021-0074},
  doi = {10.2478/popets-2021-0074},
  timestamp = {Thu, 14 Oct 2021 09:26:27 +0200}
}

Unleashing the Tiger: Inference Attacks on Split Learning

Dario Pasquini, Giuseppe Ateniese, and Massimo Bernaschi

Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, New York, NY, USA, 2021, pp. 2113–2129.

@inproceedings{pasquini2021unleashing,
  author = {Pasquini, Dario and Ateniese, Giuseppe and Bernaschi, Massimo},
  title = {Unleashing the Tiger: Inference Attacks on Split Learning},
  year = {2021},
  isbn = {9781450384544},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  url = {https://doi.org/10.1145/3460120.3485259},
  doi = {10.1145/3460120.3485259},
  booktitle = {Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security},
  pages = {2113–2129},
  numpages = {17},
  keywords = {ML security, deep learning, collaborative learning},
  location = {Virtual Event, Republic of Korea},
  series = {CCS '21}
}

2020

Tandem: Securing Keys by Using a Central Server While Preserving Privacy

Wouter Lueks, Brinda Hampiholi, Greg Alpár, and Carmela Troncoso

Proc. Priv. Enhancing Technol., vol. 2020, no. 3, pp. 327–355, 2020.

@article{LueksHAT20,
  author = {Lueks, Wouter and Hampiholi, Brinda and Alp{\'{a}}r, Greg and Troncoso, Carmela},
  title = {Tandem: Securing Keys by Using a Central Server While Preserving Privacy},
  journal = {Proc. Priv. Enhancing Technol.},
  volume = {2020},
  number = {3},
  pages = {327--355},
  year = {2020},
  url = {https://doi.org/10.2478/popets-2020-0055},
  doi = {10.2478/popets-2020-0055},
  timestamp = {Wed, 30 Sep 2020 16:54:04 +0200}
}

Measuring Membership Privacy on Aggregate Location Time-Series

Apostolos Pyrgelis, Carmela Troncoso, and Emiliano De Cristofaro

Proc. ACM Meas. Anal. Comput. Syst., vol. 4, no. 2, pp. 36:1–36:28, 2020.

@article{PyrgelisTC20,
  author = {Pyrgelis, Apostolos and Troncoso, Carmela and Cristofaro, Emiliano De},
  title = {Measuring Membership Privacy on Aggregate Location Time-Series},
  journal = {Proc. {ACM} Meas. Anal. Comput. Syst.},
  volume = {4},
  number = {2},
  pages = {36:1--36:28},
  year = {2020},
  url = {https://doi.org/10.1145/3392154},
  doi = {10.1145/3392154},
  timestamp = {Wed, 15 Jul 2020 12:06:19 +0200}
}

GenoShare: Supporting Privacy-Informed Decisions for Sharing Individual-Level Genetic Data

Jean Louis Raisaro, Juan Ramón Troncoso-Pastoriza, Yamane El-Zein, Mathias Humbert, Carmela Troncoso, Jacques Fellay, and Jean-Pierre Hubaux

Digital Personalized Health and Medicine - Proceedings of MIE 2020, Medical Informatics Europe, Geneva, Switzerland, April 28 - May 1, 2020, 2020, vol. 270, pp. 238–241.

@inproceedings{RaisaroTEHTFH20,
  author = {Raisaro, Jean Louis and Troncoso{-}Pastoriza, Juan Ram{\'{o}}n and El{-}Zein, Yamane and Humbert, Mathias and Troncoso, Carmela and Fellay, Jacques and Hubaux, Jean{-}Pierre},
  editor = {Pape{-}Haugaard, Louise Bilenberg and Lovis, Christian and Madsen, Inge Cort and Weber, Patrick and Nielsen, Per Hostrup and Scott, Philip},
  title = {GenoShare: Supporting Privacy-Informed Decisions for Sharing Individual-Level Genetic Data},
  booktitle = {Digital Personalized Health and Medicine - Proceedings of {MIE} 2020, Medical Informatics Europe, Geneva, Switzerland, April 28 - May 1, 2020},
  series = {Studies in Health Technology and Informatics},
  volume = {270},
  pages = {238--241},
  publisher = {{IOS} Press},
  year = {2020},
  url = {https://doi.org/10.3233/SHTI200158},
  doi = {10.3233/SHTI200158},
  timestamp = {Wed, 03 Feb 2021 08:37:05 +0100}
}

POTs: protective optimization technologies

Bogdan Kulynych, Rebekah Overdorf, Carmela Troncoso, and Seda F. Gürses

FAT* ’20: Conference on Fairness, Accountability, and Transparency, Barcelona, Spain, January 27-30, 2020, 2020, pp. 177–188.

@inproceedings{KulynychOTG20,
  author = {Kulynych, Bogdan and Overdorf, Rebekah and Troncoso, Carmela and G{\"{u}}rses, Seda F.},
  editor = {Hildebrandt, Mireille and Castillo, Carlos and Celis, L. Elisa and Ruggieri, Salvatore and Taylor, Linnet and Zanfir{-}Fortuna, Gabriela},
  title = {POTs: protective optimization technologies},
  booktitle = {FAT* '20: Conference on Fairness, Accountability, and Transparency, Barcelona, Spain, January 27-30, 2020},
  pages = {177--188},
  publisher = {{ACM}},
  year = {2020},
  url = {https://doi.org/10.1145/3351095.3372853},
  doi = {10.1145/3351095.3372853},
  timestamp = {Thu, 26 Aug 2021 22:19:24 +0200}
}

Decentralized Privacy-Preserving Proximity Tracing

Carmela Troncoso, Mathias Payer, Jean-Pierre Hubaux, Marcel Salathé, James R. Larus, Wouter Lueks, Theresa Stadler, Apostolos Pyrgelis, Daniele Antonioli, Ludovic Barman, Sylvain Chatel, Kenneth G. Paterson, Srdjan Capkun, David A. Basin, Jan Beutel, Dennis Jackson, Marc Roeschlin, Patrick Leu, Bart Preneel, Nigel P. Smart, Aysajan Abidin, Seda Gurses, Michael Veale, Cas Cremers, Michael Backes, Nils Ole Tippenhauer, Reuben Binns, Ciro Cattuto, Alain Barrat, Dario Fiore, Manuel Barbosa, Rui Oliveira, and José Pereira

IEEE Data Eng. Bull., vol. 43, no. 2, pp. 36–66, 2020.

@article{TroncosoPHSLLSP20,
  author = {Troncoso, Carmela and Payer, Mathias and Hubaux, Jean{-}Pierre and Salath{\'{e}}, Marcel and Larus, James R. and Lueks, Wouter and Stadler, Theresa and Pyrgelis, Apostolos and Antonioli, Daniele and Barman, Ludovic and Chatel, Sylvain and Paterson, Kenneth G. and Capkun, Srdjan and Basin, David A. and Beutel, Jan and Jackson, Dennis and Roeschlin, Marc and Leu, Patrick and Preneel, Bart and Smart, Nigel P. and Abidin, Aysajan and Gurses, Seda and Veale, Michael and Cremers, Cas and Backes, Michael and Tippenhauer, Nils Ole and Binns, Reuben and Cattuto, Ciro and Barrat, Alain and Fiore, Dario and Barbosa, Manuel and Oliveira, Rui and Pereira, Jos{\'{e}}},
  title = {Decentralized Privacy-Preserving Proximity Tracing},
  journal = {{IEEE} Data Eng. Bull.},
  volume = {43},
  number = {2},
  pages = {36--66},
  year = {2020},
  url = {http://sites.computer.org/debull/A20june/p36.pdf},
  preprint = {https://arxiv.org/abs/2005.12273},
  documentation = {https://github.com/DP-3T/documents},
  timestamp = {Thu, 06 May 2021 17:57:16 +0200}
}

Angel or Devil? A Privacy Study of Mobile Parental Control Apps

Álvaro Feal, Paolo Calciati, Narseo Vallina-Rodriguez, Carmela Troncoso, and Alessandra Gorla

Proc. Priv. Enhancing Technol., vol. 2020, no. 2, pp. 314–335, 2020.

award Emilio Aced Award

@article{FealCVTG20,
  author = {{\'{A}}lvaro Feal and Calciati, Paolo and Vallina{-}Rodriguez, Narseo and Troncoso, Carmela and Gorla, Alessandra},
  title = {Angel or Devil? {A} Privacy Study of Mobile Parental Control Apps},
  journal = {Proc. Priv. Enhancing Technol.},
  volume = {2020},
  number = {2},
  pages = {314--335},
  year = {2020},
  url = {https://doi.org/10.2478/popets-2020-0029},
  doi = {10.2478/popets-2020-0029},
  award = {Emilio Aced Award},
  awardlink = {https://www.aepd.es/es/prensa-y-comunicacion/notas-de-prensa/aepd-publica-premios-pd-2020},
  timestamp = {Mon, 26 Oct 2020 08:50:10 +0100}
}

Encrypted DNS -\textgreater Privacy? A Traffic Analysis Perspective

Sandra Siby, Marc Juárez, Dı́az Claudia, Narseo Vallina-Rodriguez, and Carmela Troncoso

27th Annual Network and Distributed System Security Symposium, NDSS 2020, San Diego, California, USA, February 23-26, 2020, 2020.

@inproceedings{SibyJDVT20,
  author = {Siby, Sandra and Ju{\'{a}}rez, Marc and D{\'{\i}}az, Claudia and Vallina{-}Rodriguez, Narseo and Troncoso, Carmela},
  title = {Encrypted {DNS} -{\textgreater} Privacy? {A} Traffic Analysis Perspective},
  booktitle = {27th Annual Network and Distributed System Security Symposium, {NDSS} 2020, San Diego, California, USA, February 23-26, 2020},
  publisher = {The Internet Society},
  year = {2020},
  url = {https://www.ndss-symposium.org/ndss-paper/encrypted-dns-privacy-a-traffic-analysis-perspective/},
  timestamp = {Mon, 01 Feb 2021 08:42:10 +0100}
}

VoteAgain: A scalable coercion-resistant voting system

Wouter Lueks, Iñigo Querejeta-Azurmendi, and Carmela Troncoso

29th USENIX Security Symposium, USENIX Security 2020, August 12-14, 2020, 2020, pp. 1553–1570.

@inproceedings{LueksQT20,
  author = {Lueks, Wouter and Querejeta{-}Azurmendi, I{\~{n}}igo and Troncoso, Carmela},
  editor = {Capkun, Srdjan and Roesner, Franziska},
  title = {VoteAgain: {A} scalable coercion-resistant voting system},
  booktitle = {29th {USENIX} Security Symposium, {USENIX} Security 2020, August 12-14, 2020},
  pages = {1553--1570},
  publisher = {{USENIX} Association},
  year = {2020},
  url = {https://www.usenix.org/conference/usenixsecurity20/presentation/lueks},
  timestamp = {Fri, 29 Jan 2021 22:08:55 +0100}
}

DatashareNetwork: A Decentralized Privacy-Preserving Search Engine for Investigative Journalists

Kasra Edalatnejad, Wouter Lueks, Julien Pierre Martin, Soline Ledésert, Anne L’Hôte, Bruno Thomas, Laurent Girod, and Carmela Troncoso

USENIX Security Symposium, 2020.

BibTeX

runner-up 2021 Caspar Bowden Award for Outstanding Research in Privacy Enhancing Technologies
runner-up CNIL - Inria Data Protection Award

@inproceedings{EdalatnejadLMLL20,
  author = {Edalatnejad, Kasra and Lueks, Wouter and Martin, Julien Pierre and Led{\'{e}}sert, Soline and L'H{\^{o}}te, Anne and Thomas, Bruno and Girod, Laurent and Troncoso, Carmela},
  title = {DatashareNetwork: {A} Decentralized Privacy-Preserving Search Engine for Investigative Journalists},
  booktitle = {{USENIX} Security Symposium},
  year = {2020},
  runnerup = {2021 Caspar Bowden Award for Outstanding Research in Privacy Enhancing Technologies,CNIL - Inria Data Protection Award},
  runneruplink = {https://petsymposium.org/award/winners.php,https://www.cnil.fr/en/2021-inria-and-cnil-award-european-researchers-awarded-their-work-privacy-protection}
}

Early evidence of effectiveness of digital contact tracing for SARS-CoV-2 in Switzerland.

Marcel Salathé, Christian Althaus, Nanina Tamar Anderegg, Daniele Antonioli, Tala Ballouz, Edouard Bugnon, Srdjan Čapkun, Dennis Jackson, Sang-Il Kim, Jim Larus, Nicola Low, Wouter Lueks, Dominik Menges, Cédric Moullet, Mathias Payer, Julien Riou, Theresa Stadler, Carmela Troncoso, Effy Vayena, and Viktor von Wyl

Swiss medical weekly, vol. 150, p. w20457, 2020.

@article{salathe2020early,
  title = {Early evidence of effectiveness of digital contact tracing for SARS-CoV-2 in Switzerland.},
  author = {Salath{\'e}, Marcel and Althaus, Christian and Anderegg, Nanina Tamar and Antonioli, Daniele and Ballouz, Tala and Bugnon, Edouard and {\v{C}}apkun, Srdjan and Jackson, Dennis and Kim, Sang-Il and Larus, Jim and Low, Nicola and Lueks, Wouter and Menges, Dominik and Moullet, C{\'e}dric and Payer, Mathias and Riou, Julien and Stadler, Theresa and Troncoso, Carmela and Vayena, Effy and von Wyl, Viktor},
  journal = {Swiss medical weekly},
  volume = {150},
  pages = {w20457},
  year = {2020},
  doi = {10.4414/smw.2020.20457}
}

A research agenda for digital proximity tracing apps

Viktor von Wyl, Sebastian Bonhoeffer, Edouard Bugnion, Milo Alan Puhan, Marcel Salathé, Theresa Stadler, Carmela Troncoso, Effy Vayena, and Nicola Low

Swiss medical weekly, vol. 150, p. w20324, 2020.

@article{wyl2020early,
  title = {A research agenda for digital proximity tracing apps},
  author = {von Wyl, Viktor and Bonhoeffer, Sebastian and Bugnion, Edouard and Puhan, Milo Alan and Salathé, Marcel and Stadler, Theresa and Troncoso, Carmela and Vayena, Effy and Low, Nicola},
  journal = {Swiss medical weekly},
  volume = {150},
  pages = {w20324},
  year = {2020},
  doi = {10.4414/smw.2020.20324}
}

2019

Rethinking Location Privacy for Unknown Mobility Behaviors

Simon Oya, Carmela Troncoso, and Fernando Pérez-González

IEEE European Symposium on Security and Privacy, EuroS&P 2019, Stockholm, Sweden, June 17-19, 2019, 2019, pp. 416–431.

@inproceedings{OyaTP19,
  author = {Oya, Simon and Troncoso, Carmela and P{\'{e}}rez{-}Gonz{\'{a}}lez, Fernando},
  title = {Rethinking Location Privacy for Unknown Mobility Behaviors},
  booktitle = {{IEEE} European Symposium on Security and Privacy, EuroS{\&}P 2019, Stockholm, Sweden, June 17-19, 2019},
  pages = {416--431},
  publisher = {{IEEE}},
  year = {2019},
  url = {https://doi.org/10.1109/EuroSP.2019.00038},
  doi = {10.1109/EuroSP.2019.00038},
  timestamp = {Wed, 16 Oct 2019 14:14:55 +0200}
}

zksk: A Library for Composable Zero-Knowledge Proofs

Wouter Lueks, Bogdan Kulynych, Jules Fasquelle, Simon Le Bail-Collet, and Carmela Troncoso

Proceedings of the 18th ACM Workshop on Privacy in the Electronic Society, WPES@CCS 2019, London, UK, November 11, 2019, 2019, pp. 50–54.

@inproceedings{LueksKFBT19,
  author = {Lueks, Wouter and Kulynych, Bogdan and Fasquelle, Jules and Bail{-}Collet, Simon Le and Troncoso, Carmela},
  editor = {Cavallaro, Lorenzo and Kinder, Johannes and Domingo{-}Ferrer, Josep},
  title = {zksk: {A} Library for Composable Zero-Knowledge Proofs},
  booktitle = {Proceedings of the 18th {ACM} Workshop on Privacy in the Electronic Society, WPES@CCS 2019, London, UK, November 11, 2019},
  pages = {50--54},
  publisher = {{ACM}},
  year = {2019},
  url = {https://doi.org/10.1145/3338498.3358653},
  doi = {10.1145/3338498.3358653},
  timestamp = {Thu, 14 Nov 2019 11:57:18 +0100}
}

On (The Lack Of) Location Privacy in Crowdsourcing Applications

Spyros Boukoros, Mathias Humbert, Stefan Katzenbeisser, and Carmela Troncoso

28th USENIX Security Symposium, USENIX Security 2019, Santa Clara, CA, USA, August 14-16, 2019, 2019, pp. 1859–1876.

@inproceedings{BoukorosH0T19,
  author = {Boukoros, Spyros and Humbert, Mathias and Katzenbeisser, Stefan and Troncoso, Carmela},
  editor = {Heninger, Nadia and Traynor, Patrick},
  title = {On (The Lack Of) Location Privacy in Crowdsourcing Applications},
  booktitle = {28th {USENIX} Security Symposium, {USENIX} Security 2019, Santa Clara, CA, USA, August 14-16, 2019},
  pages = {1859--1876},
  publisher = {{USENIX} Association},
  year = {2019},
  url = {https://www.usenix.org/conference/usenixsecurity19/presentation/boukoros},
  timestamp = {Mon, 01 Feb 2021 08:43:13 +0100}
}

Lightnion: seamless anonymous communication from any web browser

Wouter Lueks, Matthieu Daumas, and Carmela Troncoso

Workshop on Measurements, Attacks and Defenses for the Web (MADWeb) 2019, 2019.

BibTeX
code

@inproceedings{LueksDT19,
  author = {Lueks, Wouter and Daumas, Matthieu and Troncoso, Carmela},
  title = {Lightnion: seamless anonymous communication from any web browser},
  code = {https://github.com/spring-epfl/lightnion/},
  booktitle = {Workshop on Measurements, Attacks and Defenses for the Web (MADWeb) 2019},
  year = {2019}
}

2018

Evading classifiers in discrete domains with provable optimality guarantees

Bogdan Kulynych, Jamie Hayes, Nikita Samarin, and Carmela Troncoso

CoRR, vol. abs/1810.10939, 2018.

@article{abs-1810-10939,
  author = {Kulynych, Bogdan and Hayes, Jamie and Samarin, Nikita and Troncoso, Carmela},
  title = {Evading classifiers in discrete domains with provable optimality guarantees},
  journal = {CoRR},
  volume = {abs/1810.10939},
  year = {2018},
  url = {http://arxiv.org/abs/1810.10939},
  eprinttype = {arXiv},
  eprint = {1810.10939},
  timestamp = {Wed, 31 Oct 2018 14:24:29 +0100},
  keywords = {preprint}
}

ClaimChain: Improving the Security and Privacy of In-band Key Distribution for Messaging

Bogdan Kulynych, Wouter Lueks, Marios Isaakidis, George Danezis, and Carmela Troncoso

Proceedings of the 2018 Workshop on Privacy in the Electronic Society, WPES@CCS 2018, Toronto, ON, Canada, October 15-19, 2018, 2018, pp. 86–103.

@inproceedings{KulynychLIDT18,
  author = {Kulynych, Bogdan and Lueks, Wouter and Isaakidis, Marios and Danezis, George and Troncoso, Carmela},
  editor = {Lie, David and Mannan, Mohammad and Johnson, Aaron},
  title = {ClaimChain: Improving the Security and Privacy of In-band Key Distribution for Messaging},
  booktitle = {Proceedings of the 2018 Workshop on Privacy in the Electronic Society, WPES@CCS 2018, Toronto, ON, Canada, October 15-19, 2018},
  pages = {86--103},
  publisher = {{ACM}},
  year = {2018},
  url = {https://doi.org/10.1145/3267323.3268947},
  doi = {10.1145/3267323.3268947},
  timestamp = {Wed, 28 Jul 2021 08:57:48 +0200}
}

Knock Knock, Who’s There? Membership Inference on Aggregate Location Data

Apostolos Pyrgelis, Carmela Troncoso, and Emiliano De Cristofaro

25th Annual Network and Distributed System Security Symposium, NDSS 2018, San Diego, California, USA, February 18-21, 2018, 2018.

runner-up 2019 CNIL Privacy Protection Award
award Distinguished Paper Award at NDSS18

@inproceedings{PyrgelisTC18,
  author = {Pyrgelis, Apostolos and Troncoso, Carmela and Cristofaro, Emiliano De},
  title = {Knock Knock, Who's There? Membership Inference on Aggregate Location Data},
  booktitle = {25th Annual Network and Distributed System Security Symposium, {NDSS} 2018, San Diego, California, USA, February 18-21, 2018},
  publisher = {The Internet Society},
  year = {2018},
  url = {http://wp.internetsociety.org/ndss/wp-content/uploads/sites/25/2018/02/ndss2018\_05B-5\_Pyrgelis\_paper.pdf},
  award = {Distinguished Paper Award at NDSS18},
  awardlink = {https://www.ndss-symposium.org/ndss2018/},
  runnerup = {2019 CNIL Privacy Protection Award},
  runneruplink = {https://www.cnil.fr/en/inria-and-cnil-award-2019-privacy-protection-prize-european-research-team},
  timestamp = {Thu, 17 Jun 2021 16:04:48 +0200}
}

TARANET: Traffic-Analysis Resistant Anonymity at the Network Layer

Chen Chen, Daniele Enrico Asoni, Adrian Perrig, David Barrera, George Danezis, and Carmela Troncoso

2018 IEEE European Symposium on Security and Privacy, EuroS&P 2018, London, United Kingdom, April 24-26, 2018, 2018, pp. 137–152.

@inproceedings{0013APBDT18,
  author = {Chen, Chen and Asoni, Daniele Enrico and Perrig, Adrian and Barrera, David and Danezis, George and Troncoso, Carmela},
  title = {{TARANET:} Traffic-Analysis Resistant Anonymity at the Network Layer},
  booktitle = {2018 {IEEE} European Symposium on Security and Privacy, EuroS{\&}P 2018, London, United Kingdom, April 24-26, 2018},
  pages = {137--152},
  publisher = {{IEEE}},
  year = {2018},
  url = {https://doi.org/10.1109/EuroSP.2018.00018},
  doi = {10.1109/EuroSP.2018.00018},
  timestamp = {Mon, 18 May 2020 09:33:14 +0200}
}

Questioning the assumptions behind fairness solutions

Rebekah Overdorf, Bogdan Kulynych, Ero Balsa, Carmela Troncoso, and Seda F. Gürses

CoRR, vol. abs/1811.11293, 2018.

@article{abs-1811-11293,
  author = {Overdorf, Rebekah and Kulynych, Bogdan and Balsa, Ero and Troncoso, Carmela and G{\"{u}}rses, Seda F.},
  title = {Questioning the assumptions behind fairness solutions},
  journal = {CoRR},
  volume = {abs/1811.11293},
  year = {2018},
  url = {http://arxiv.org/abs/1811.11293},
  eprinttype = {arXiv},
  eprint = {1811.11293},
  timestamp = {Fri, 30 Nov 2018 12:44:28 +0100}
}

DNS privacy not so private: the traffic analysis perspective

Sandra Siby, Marc Juarez, Narseo Vallina-Rodriguez, and Carmela Troncoso

The 11th Workshop on Hot Topics in Privacy Enhancing Technologies (HotPETs 2018), 2018.

BibTeX

@inproceedings{siby2018dns,
  title = {DNS privacy not so private: the traffic analysis perspective},
  author = {Siby, Sandra and Juarez, Marc and Vallina-Rodriguez, Narseo and Troncoso, Carmela},
  booktitle = {The 11th Workshop on Hot Topics in Privacy Enhancing Technologies (HotPETs 2018)},
  year = {2018}
}

2017

Small Data

Oliver Kennedy, D. Richard Hipp, Stratos Idreos, Amélie Marian, Arnab Nandi, Carmela Troncoso, and Eugene Wu

33rd IEEE International Conference on Data Engineering, ICDE 2017, San Diego, CA, USA, April 19-22, 2017, 2017, pp. 1475–1476.

@inproceedings{KennedyHIMNT017,
  author = {Kennedy, Oliver and Hipp, D. Richard and Idreos, Stratos and Marian, Am{\'{e}}lie and Nandi, Arnab and Troncoso, Carmela and Wu, Eugene},
  title = {Small Data},
  booktitle = {33rd {IEEE} International Conference on Data Engineering, {ICDE} 2017, San Diego, CA, USA, April 19-22, 2017},
  pages = {1475--1476},
  publisher = {{IEEE} Computer Society},
  year = {2017},
  url = {https://doi.org/10.1109/ICDE.2017.216},
  doi = {10.1109/ICDE.2017.216},
  timestamp = {Wed, 16 Oct 2019 14:14:56 +0200}
}

Filter design for delay-based anonymous communications

Simon Oya, Fernando Pérez-González, and Carmela Troncoso

2017 IEEE International Conference on Acoustics, Speech and Signal Processing, ICASSP 2017, New Orleans, LA, USA, March 5-9, 2017, 2017, pp. 2107–2111.

@inproceedings{OyaPT17,
  author = {Oya, Simon and P{\'{e}}rez{-}Gonz{\'{a}}lez, Fernando and Troncoso, Carmela},
  title = {Filter design for delay-based anonymous communications},
  booktitle = {2017 {IEEE} International Conference on Acoustics, Speech and Signal Processing, {ICASSP} 2017, New Orleans, LA, USA, March 5-9, 2017},
  pages = {2107--2111},
  publisher = {{IEEE}},
  year = {2017},
  url = {https://doi.org/10.1109/ICASSP.2017.7952528},
  doi = {10.1109/ICASSP.2017.7952528},
  timestamp = {Wed, 16 Oct 2019 14:14:52 +0200}
}

Back to the Drawing Board: Revisiting the Design of Optimal Location Privacy-preserving Mechanisms

Simon Oya, Carmela Troncoso, and Fernando Pérez-González

Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, CCS 2017, Dallas, TX, USA, October 30 - November 03, 2017, 2017, pp. 1959–1972.

@inproceedings{OyaTP17,
  author = {Oya, Simon and Troncoso, Carmela and P{\'{e}}rez{-}Gonz{\'{a}}lez, Fernando},
  editor = {Thuraisingham, Bhavani M. and Evans, David and Malkin, Tal and Xu, Dongyan},
  title = {Back to the Drawing Board: Revisiting the Design of Optimal Location Privacy-preserving Mechanisms},
  booktitle = {Proceedings of the 2017 {ACM} {SIGSAC} Conference on Computer and Communications Security, {CCS} 2017, Dallas, TX, USA, October 30 - November 03, 2017},
  pages = {1959--1972},
  publisher = {{ACM}},
  year = {2017},
  url = {https://doi.org/10.1145/3133956.3134004},
  doi = {10.1145/3133956.3134004},
  timestamp = {Tue, 10 Nov 2020 19:59:50 +0100}
}

What Does The Crowd Say About You? Evaluating Aggregation-based Location Privacy

Apostolos Pyrgelis, Carmela Troncoso, and Emiliano De Cristofaro

Proc. Priv. Enhancing Technol., vol. 2017, no. 4, pp. 156–176, 2017.

@article{PyrgelisTC17,
  author = {Pyrgelis, Apostolos and Troncoso, Carmela and Cristofaro, Emiliano De},
  title = {What Does The Crowd Say About You? Evaluating Aggregation-based Location Privacy},
  journal = {Proc. Priv. Enhancing Technol.},
  volume = {2017},
  number = {4},
  pages = {156--176},
  year = {2017},
  url = {https://doi.org/10.1515/popets-2017-0043},
  doi = {10.1515/popets-2017-0043},
  timestamp = {Tue, 01 Sep 2020 13:13:13 +0200}
}

Systematizing Decentralization and Privacy: Lessons from 15 years of research and deployments

Carmela Troncoso, George Danezis, Marios Isaakidis, and Harry Halpin

CoRR, vol. abs/1704.08065, 2017.

@article{TroncosoDIH17,
  author = {Troncoso, Carmela and Danezis, George and Isaakidis, Marios and Halpin, Harry},
  title = {Systematizing Decentralization and Privacy: Lessons from 15 years of research and deployments},
  journal = {CoRR},
  volume = {abs/1704.08065},
  year = {2017},
  url = {http://arxiv.org/abs/1704.08065},
  eprinttype = {arXiv},
  eprint = {1704.08065},
  timestamp = {Mon, 13 Aug 2018 16:48:31 +0200}
}

Dissecting Tor Bridges: A Security Evaluation of their Private and Public Infrastructures

Srdjan Matic, Carmela Troncoso, and Juan Caballero

24th Annual Network and Distributed System Security Symposium, NDSS 2017, San Diego, California, USA, February 26 - March 1, 2017, 2017.

@inproceedings{MaticTC17,
  author = {Matic, Srdjan and Troncoso, Carmela and Caballero, Juan},
  title = {Dissecting Tor Bridges: {A} Security Evaluation of their Private and Public Infrastructures},
  booktitle = {24th Annual Network and Distributed System Security Symposium, {NDSS} 2017, San Diego, California, USA, February 26 - March 1, 2017},
  publisher = {The Internet Society},
  year = {2017},
  url = {https://www.ndss-symposium.org/ndss2017/ndss-2017-programme/dissecting-tor-bridges-security-evaluation-their-private-and-public-infrastructures/},
  timestamp = {Mon, 01 Feb 2021 08:42:26 +0100}
}