Ilia Shumailov

Postdoctoral Fellow

Email Website Twitter Google Scholar

Papers

1. Bad Character Injection: Imperceptible Attacks on NLP Models
   Nicholas Boucher, Ilia Shumailov, Ross Anderson, Nicolas Papernot
   In Proceedings of the 43rd IEEE Symposium on Security and Privacy, San Francisco, CA

   Paper BibTeX

   @inproceedings{nicholas2022bad,
     author = {Boucher, Nicholas and Shumailov, Ilia and Anderson, Ross and Papernot, Nicolas},
     booktitle = {Proceedings of the 43rd IEEE Symposium on Security and Privacy, San Francisco, CA},
     title = {Bad Character Injection: Imperceptible Attacks on NLP Models},
     year = {2022}
   }
   

2. Towards More Robust Keyword Spotting for Voice Assistants
   Shimaa Ahmed, Ilia Shumailov, Nicolas Papernot, Kassem Fawaz
   In Proceedings of the 31st USENIX Security Symposium

   Paper BibTeX

   @inproceedings{shimaa2022towards,
     author = {Ahmed, Shimaa and Shumailov, Ilia and Papernot, Nicolas and Fawaz, Kassem},
     booktitle = {Proceedings of the 31st USENIX Security Symposium},
     title = {Towards More Robust Keyword Spotting for Voice Assistants},
     year = {2022}
   }
   

3. On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning
   Anvith Thudi, Hengrui Jia, Ilia Shumailov, Nicolas Papernot
   

   Paper BibTeX

   @article{anvith2021on,
     author = {Thudi, Anvith and Jia, Hengrui and Shumailov, Ilia and Papernot, Nicolas},
     title = {On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning},
     year = {2021}
   }
   

4. Markpainting: Adversarial Machine Learning meets Inpainting
   David Khachaturov, Ilia Shumailov, Yiren Zhao, Nicolas Papernot, Ross Anderson
   In Proceedings of the 38th International Conference on Machine Learning

   Paper BibTeX

   @inproceedings{david2021markpainting,
     author = {Khachaturov, David and Shumailov, Ilia and Zhao, Yiren and Papernot, Nicolas and Anderson, Ross},
     booktitle = {Proceedings of the 38th International Conference on Machine Learning},
     title = {Markpainting: Adversarial Machine Learning meets Inpainting},
     year = {2021}
   }
   

5. When the Curious Abandon Honesty: Federated Learning Is Not Private
   Franziska Boenisch, Adam Dziedzic, Roei Schuster, Ali Shahin Shamsabadi, Ilia Shumailov, Nicolas Papernot
   

   Paper BibTeX

   @article{franziska2021when,
     author = {Boenisch, Franziska and Dziedzic, Adam and Schuster, Roei and Shamsabadi, Ali Shahin and Shumailov, Ilia and Papernot, Nicolas},
     title = {When the Curious Abandon Honesty: Federated Learning Is Not Private},
     year = {2021}
   }
   

6. Manipulating SGD with Data Ordering Attacks
   Ilia Shumailov, Zakhar Shumaylov, Dmitry Kazhdan, Yiren Zhao, Nicolas Papernot, Murat A. Erdogdu, Ross Anderson
   In Proceedings of the 35th Conference on Neural Information Processing Systems

   Paper BibTeX

   @inproceedings{ilia2021manipulating,
     author = {Shumailov, Ilia and Shumaylov, Zakhar and Kazhdan, Dmitry and Zhao, Yiren and Papernot, Nicolas and Erdogdu, Murat A. and Anderson, Ross},
     booktitle = {Proceedings of the 35th Conference on Neural Information Processing Systems},
     title = {Manipulating SGD with Data Ordering Attacks},
     year = {2021}
   }
   

7. Sponge Examples: Energy-Latency Attacks on Neural Networks
   Ilia Shumailov, Yiren Zhao, Daniel Bates, Nicolas Papernot, Robert Mullins, Ross Anderson
   In Proceedings of the 6th IEEE European Symposium on Security and Privacy, Vienna, Austria

   Paper BibTeX

   @inproceedings{ilia2021sponge,
     author = {Shumailov, Ilia and Zhao, Yiren and Bates, Daniel and Papernot, Nicolas and Mullins, Robert and Anderson, Ross},
     booktitle = {Proceedings of the 6th IEEE European Symposium on Security and Privacy, Vienna, Austria},
     title = {Sponge Examples: Energy-Latency Attacks on Neural Networks},
     year = {2021}
   }
   

8. Not my deepfake: towards plausible deniability for machine-generated media
   Baiwu Zhang, Jin Zhou, Ilia Shumailov, Nicolas Papernot
   

   BibTeX

   @article{baiwu2020not,
     author = {Zhang, Baiwu and Zhou, Jin and Shumailov, Ilia and Papernot, Nicolas},
     title = {Not my deepfake: towards plausible deniability for machine-generated media},
     year = {2020}
   }