Elie Bursztein
Elie Bursztein leads Google's anti-abuse research team, which invents transformative solutions that help protect users against online threats.
Featured
Blog post
Publication
Talk
Publication
Talk
Recent
cryptography
Hacker's guide to deep-learning side-channel attacks: code walkthrough
Blog post Jun 2021
Learn how to perform a deep-learning side-channels attack using TensorFlow to recover AES cryptographic keys from a hardware device power traces, step by step.
cryptography
Hacker's guide to deep-learning side-channel attacks: the theory
Blog post May 2021
Learn the concepts behind deep-learning side-channels attack, a powerful cryptanalysis technique, by using it to recover AES cryptographic keys from a hardware device.
cryptography
A Hacker’s guide to reducing side-channel attack surfaces using deep-learning
Talk Defcon & BH 2020
This talk showcases SCALD, our tool that leverages deep-learning explainability and dynamic execution to automatically find which parts of a crypto-hardware implementation is responsible for leaking the information exploited by side-channel attacks
security
Malicious Documents Emerging Trends: A Gmail Perspective
Talk RSA 2020
This talk provides a comprehensive analysis of the malicious documents that target users and corporate inboxes, an in-depth analysis of the latest evasion tactics used by attackers and what Google is doing about it.
web
Insights about the first five years of Right to Be Forgotten requests at Google
Blog post Dec 2019
This blog post distills the key findings of our longitudinal analysis of how Europe’s right to be forgotten (RTBF) is being applied in practice.
web
Five years of the Right to Be Forgotten
Publication CCS 2019
We conducted a retrospective measurement study of 3.2 million URLs that were requested for delisting from Google Search over five years.
security
Protecting accounts from credential stuffing with password breach alerting
Publication Usenix Security 2019
In this paper, we propose a privacy-preserving protocol whereby a client can query a centralized breach repository to determine whether a specific username and password combination is publicly exposed, but without revealing the information queried.
cryptography
A Hacker Guide To Deep Learning Based Side Channel Attacks
Talk Defcon 2019
This talk provides a step-by-step introduction on how to use deep learning to perform AES side-channel attacks.
anti-abuse
Deconstructing the Phishing Campaigns that Target Gmail Users
Talk Black Hat USA 2019
In this talk we look into Gmail telemetry to illuminate the differences between phishing groups in terms of tactics and targets.
ai
Rethinking the detection of child sexual abuse imagery on the Internet
Publication WWW 2019
In order to scale CSAI protections moving forward, we discuss techniques for automating detection and response by using recent advancements in machine learning.
