Skip to main content

Publications

Full list of my academic papers.
BibTeX
BibTeX
@inproceedings{Bursztein2007A,
  title = {A logical framework for evaluating network resilience against faults and attacks},
  author = {Elie Bursztein and Jean Goubault-Larrecq},
  booktitle = {12th Asian Computing Science Conference},
  year = {2007},
  organization = {Springer}
}

@inproceedings{Thomas2015Ad,
  title = {Ad injection at scale: assessing deceptive advertisement modifications},
  author = {Kurt Thomas and Elie Bursztein and Chris Grier and Grant Ho and Nav Jagpal and Alexandros Kapravelos and Damon McCoy and Antonio Nappa and Vern Paxson and Paul Pearce and Niels Provos and Moheeb Abu Rajab},
  booktitle = {Security and Privacy},
  year = {2015},
  organization = {IEEE}
}

@inproceedings{Aggarwal2010An,
  title = {An analysis of private browsing modes in modern browsers},
  author = {Gaurav Aggarwal and Elie Bursztein and Collin Jackson and Dan Boneh},
  booktitle = {Usenix Security},
  year = {2010},
  organization = {Usenix}
}

@inproceedings{Rydstedt2010Busting,
  title = {Busting frame busting a study of clickjacking vulnerabilities on popular sites},
  author = {Gustav Rydstedt and Elie Bursztein and Dan Boneh and Collin Jackson},
  booktitle = {Web 2.0 Security and Privacy},
  year = {2010},
  organization = {IEEE}
}

@inproceedings{Peddinti2014Cloak,
  title = {Cloak and swagger: understanding data sensitivity through the lens of user anonymity},
  author = {Sai Teja Peddinti and Aleksandra Korolova and Elie Bursztein and Geetanjali Sampemane},
  booktitle = {Security And Privacy},
  year = {2014},
  organization = {IEEE}
}

@inproceedings{Invernizzi2016Cloak,
  title = {Cloak of visibility: detecting when machines browse a different web},
  author = {Luca Invernizzi and Kurt Thomas and Alexandros Kapravelos and Oxana Comanescu and Jean-Michel Picod and Elie Bursztein},
  booktitle = {Security and Privacy},
  year = {2016},
  organization = {IEEE}
}

@inproceedings{Petrov2020CoinPolice,
  title = {CoinPolice: Detecting Hidden Cryptojacking Attacks with Neural Networks},
  author = {Ivan Petrov and Luca Invernizzi and Elie Bursztein},
  booktitle = {arXiv preprint},
  year = {2020},
  organization = {arXiv}
}

@inproceedings{Thomas2017Data,
  title = {Data Breaches, Phishing, or Malware? Understanding the Risks of Stolen Credentials},
  author = {Kurt Thomas and Frank Li and Ali Zand and Jacob Barrett and Juri Ranieri and Luca Invernizzi and Yarik Markov and Oxana Comanescu and Vijay Eranti and Angelika Moscicki and Daniel Margolis and Vern Paxson and Elie Bursztein},
  booktitle = {Computer and Communications Security},
  year = {2017},
  organization = {ACM}
}

@inproceedings{Karunakaran2018Data,
  title = {Data Breaches: User Comprehension, Expectations, and Concerns with Handling Exposed Data},
  author = {Sowmya Karunakaran and Kurt Thomas and Elie Bursztein and Oxana Comanescu},
  booktitle = {Symposium on Usable Security and Privacy},
  year = {2018},
  organization = {Usenix}
}

@inproceedings{Bursztein2009Decaptcha,
  title = {Decaptcha breaking 75% of ebay audio captchas},
  author = {Elie Bursztein and Steven Bethard},
  booktitle = {3rd USENIX Workshop On Offensive Technologies},
  year = {2009},
  organization = {Usenix}
}

@inproceedings{Kumar2021Designing,
  title = {Designing Toxic Content Classification for a Diversity of Perspectives},
  author = {Deepak Kumar and Patrick Gage Kelley and Sunny Consolvo and Joshua Mason and Elie Bursztein and Zakir Durumeric and Kurt Thomas and Michael Bailey},
  booktitle = {SOUPS},
  year = {2021},
  organization = {Usenix}
}

@inproceedings{Thomas2014Dialing,
  title = {Dialing back abuse on phone verified accounts},
  author = {Kurt Thomas and Dmytro Latskiv and Elie Bursztein and Tadek Pietraszek and Chris Grier and Damon McCoy},
  booktitle = {Conference on Computer and Communications Security},
  year = {2014},
  organization = {AMC}
}

@inproceedings{Moghimi2025DROIDCCT,
  title = {DROIDCCT: Cryptographic Compliance Test via Trillion-Scale Measurement},
  author = {Daniel Moghimi and Alexandru-Cosmin Mihai and Borbala Benko and Catherine Vlasov and Elie Bursztein and Kurt Thomas and László Siroki and Pedro Barbosa and Rémi Audebert},
  booktitle = {Annual Computer Security Applications Conference},
  year = {2025},
  organization = {IEEE}
}

@inproceedings{Bursztein2014Easy,
  title = {Easy does it: more usable captchas},
  author = {Elie Bursztein and Angelika Moscicki and Celine Fabry and Steven Bethard and John C. Mitchell and Dan Jurafsky},
  booktitle = {Conference on Human Factors in Computing Systems},
  year = {2014},
  organization = {ACM}
}

@inproceedings{Nasr2025Evaluating,
  title = {Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks},
  author = {Milad Nasr and Yanick Fratantonio and Luca Invernizzi and Ange Albertini and Loua Farah and Alex Petit-Bianco and Andreas Terzis and Kurt Thomas and Elie Bursztein and Nicholas Carlini},
  booktitle = {ACM SIGSAC Conference on Computer and Communications Security},
  year = {2025},
  organization = {ACM}
}

@inproceedings{Wang2026ExploitGym,
  title = {ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?},
  author = {Zhun Wang and Nico Schiller and Hongwei Li and Srijiith Sesha Narayana and Milad Nasr and Nicholas Carlini and Xiangyu Qi and Eric Wallace and Elie Bursztein and Luca Invernizzi and Kurt Thomas and Yan Shoshitaishvili and Wenbo Guo and Jingxuan He and Thorsten Holz and Dawn Song},
  booktitle = {Conference on Neural Information Processing Systems},
  year = {2026},
  organization = {NeurIPS}
}

@inproceedings{Bursztein2008Extending,
  title = {Extending anticipation games with location penalty and timeline},
  author = {Elie Bursztein},
  booktitle = {Revised Selected Papers of the 5th International Workshop on Formal Aspects in Security and Trust},
  year = {2008},
  organization = {IEEE}
}

@inproceedings{Kantchelian2026Facade,
  title = {Facade: High-Precision Insider Threat Detection Using Deep Contextual Anomaly Detection},
  author = {Alex Kantchelian and Casper Neo and Ryan Stevens and Hyungwon Kim and Zhaohao Fu and Sadegh Momeni and Birkett Huber and Cem Topcuoglu and Senaka Buthpitiya and Elie Bursztein and Yanis Pavlidis and Martin Cochran and Massimiliano Poletto},
  booktitle = {USENIX Security Symposium},
  year = {2026},
  organization = {USENIX Association}
}

@inproceedings{Rydstedt2010Framing,
  title = {Framing attacks on smartphones and dumb routers: social sites tap-jacking and geo-localization attacks},
  author = {Gustav Rydstedt and Baptiste Gourdin and Elie Bursztein and Dan Boneh},
  booktitle = {Workshop On Offensive Technologies},
  year = {2010},
  organization = {Usenix}
}

@inproceedings{Thomas2015Framing,
  title = {Framing dependencies introduced by underground commoditization},
  author = {Kurt Thomas and Danny Huang and David Wang and Elie Bursztein and Chris Grier and Thomas J. Holt and Christopher Kruegel and Damon McCoy and Stefan Savage and Giovanni Vigna},
  booktitle = {Workshop on Economics of Information Security},
  year = {2015},
  organization = {WEIS}
}

@inproceedings{Georgiev2024Gemini,
  title = {Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context},
  author = {Petko Georgiev and Ving Ian Lei and Ryan Burnell and Libin Bai and Anmol Gulati and Garrett Tanzer and Damien Vincent and Zhufeng Pan and Shibo Wang and Soroosh Mariooryad and Yifan Ding and Xinyang Geng and Fred Alcober and Roy Frostig and Mark Omernick and Lexi Walker and Cosmin Paduraru and Christina Sorokin and Andrea Tacchetti and Colin Gaffney and Samira Daruki and Olcan Sercinoglu and Zach Gleicher and Juliette Love and Paul Voigtlaender and Rohan Jain and Gabriela Surita and Kareem Mohamed and Rory Blevins and Junwhan Ahn and Tao Zhu and Kornraphop Kawintiranon and Orhan Firat and Yiming Gu and Yujing Zhang and Matthew Rahtz and Manaal Faruqui and Natalie Clay and Justin Gilmer and JD Co-Reyes and Ivo Penchev and Rui Zhu and Nobuyuki Morioka and Kevin Hui and Krishna Haridasan and Victor Campos and Mahdis Mahdieh and Mandy Guo and Samer Hassan and Kevin Kilgour and Arpi Vezer and Heng-Tze Cheng and Raoul de Liedekerke and Siddharth Goyal and Paul Barham and DJ Strouse and Seb Noury and Jonas Adler and Mukund Sundararajan and Sharad Vikram and Dmitry Lepikhin and Michela Paganini and Xavier Garcia and Fan Yang and Dasha Valter and Maja Trebacz and Kiran Vodrahalli and Chulayuth Asawaroengchai and Roman Ring and Norbert Kalb and Livio Baldini Soares and Siddhartha Brahma and David Steiner and Tianhe Yu and Fabian Mentzer and Antoine He and Lucas Gonzalez and Bibo Xu and Raphael Lopez Kaufman and Laurent El Shafey and Junhyuk Oh and Tom Hennigan and George van den Driessche and Seth Odoom and Mario Lucic and Becca Roelofs and Sid Lall and Amit Marathe and Betty Chan and Santiago Ontanon and Luheng He and Denis Teplyashin and Jonathan Lai and Phil Crone and Bogdan Damoc and Lewis Ho and Sebastian Riedel and Karel Lenc and Chih-Kuan Yeh and Aakanksha Chowdhery and Yang Xu and Mehran Kazemi and Ehsan Amid and Anastasia Petrushkina and Kevin Swersky and Ali Khodaei and Gowoon Chen and Chris Larkin and Mario Pinto and Geng Yan and Adria Puigdomenech Badia and Piyush Patil and Steven Hansen and Dave Orr and Sebastien M. R. Arnold and Jordan Grimstad and Andrew Dai and Sholto Douglas and Rishika Sinha and Vikas Yadav and Xi Chen and Elena Gribovskaya and Jacob Austin and Jeffrey Zhao and Kaushal Patel and Paul Komarek and Sophia Austin and Sebastian Borgeaud and Linda Friso and Abhimanyu Goyal and Ben Caine and Kris Cao and Da-Woon Chung and Matthew Lamm and Gabe Barth-Maron and Thais Kagohara and Kate Olszewska and Mia Chen and Kaushik Shivakumar and Rishabh Agarwal and Harshal Godhia and Ravi Rajwar and Javier Snaider and Xerxes Dotiwalla and Yuan Liu and Aditya Barua and Victor Ungureanu and Yuan Zhang and Bat-Orgil Batsaikhan and Mateo Wirth and James Qin and Ivo Danihelka and Tulsee Doshi and Martin Chadwick and Jilin Chen and Sanil Jain and Quoc Le and Arjun Kar and Madhu Gurumurthy and Cheng Li and Ruoxin Sang and Fangyu Liu and Lampros Lamprou and Rich Munoz and Nathan Lintz and Harsh Mehta and Heidi Howard and Malcolm Reynolds and Lora Aroyo and Quan Wang and Lorenzo Blanco and Albin Cassirer and Jordan Griffith and Dipanjan Das and Stephan Lee and Jakub Sygnowski and Zach Fisher and James Besley and Richard Powell and Zafarali Ahmed and Dominik Paulus and David Reitter and Zalan Borsos and Rishabh Joshi and Aedan Pope and Steven Hand and Vittorio Selo and Vihan Jain and Nikhil Sethi and Megha Goel and Takaki Makino and Rhys May and Zhen Yang and Johan Schalkwyk and Christina Butterfield and Anja Hauth and Alex Goldin and Will Hawkins and Evan Senter and Sergey Brin and Oliver Woodman and Marvin Ritter and Eric Noland and Minh Giang and Vijay Bolina and Lisa Lee and Tim Blyth and Ian Mackinnon and Machel Reid and Obaid Sarvana and David Silver and Alexander Chen and Lily Wang and Loren Maggiore and Oscar Chang and Nithya Attaluri and Gregory Thornton and Chung-Cheng Chiu and Oskar Bunyan and Nir Levine and Timothy Chung and Evgenii Eltyshev and Xiance Si and Timothy Lillicrap and Demetra Brady and Vaibhav Aggarwal and Boxi Wu and Yuanzhong Xu and Ross McIlroy and Kartikeya Badola and Paramjit Sandhu and Erica Moreira and Wojciech Stokowiec and Ross Hemsley and Dong Li and Alex Tudor and Pranav Shyam and Elahe Rahimtoroghi and Salem Haykal and Pablo Sprechmann and Xiang Zhou and Diana Mincu and Yujia Li and Ravi Addanki and Kalpesh Krishna and Xiao Wu and Alexandre Frechette and Matan Eyal and Allan Dafoe and Dave Lacey and Jay Whang and Thi Avrahami and Ye Zhang and Emanuel Taropa and Hanzhao Lin and Daniel Toyama and Eliza Rutherford and Motoki Sano and HyunJeong Choe and Alex Tomala and Chalence Safranek-Shrader and Nora Kassner and Mantas Pajarskas and Matt Harvey and Sean Sechrist and Meire Fortunato and Christina Lyu and Gamaleldin Elsayed and Chenkai Kuang and James Lottes and Eric Chu and Chao Jia and Chih-Wei Chen and Peter Humphreys and Kate Baumli and Connie Tao and Rajkumar Samuel and Cicero Nogueira dos Santos and Anders Andreassen and Nemanja Rakićević and Dominik Grewe and Aviral Kumar and Stephanie Winkler and Jonathan Caton and Andrew Brock and Sid Dalmia and Hannah Sheahan and Iain Barr and Yingjie Miao and Paul Natsev and Jacob Devlin and Feryal Behbahani and Flavien Prost and Yanhua Sun and Artiom Myaskovsky and Thanumalayan Sankaranarayana Pillai and Dan Hurt and Angeliki Lazaridou and Xi Xiong and Ce Zheng and Fabio Pardo and Xiaowei Li and Dan Horgan and Joe Stanton and Moran Ambar and Fei Xia and Alejandro Lince and Mingqiu Wang and Basil Mustafa and Albert Webson and Hyo Lee and Rohan Anil and Martin Wicke and Timothy Dozat and Abhishek Sinha and Enrique Piqueras and Elahe Dabir and Shyam Upadhyay and Anudhyan Boral and Lisa Anne Hendricks and Corey Fry and Josip Djolonga and Yi Su and Jake Walker and Jane Labanowski and Ronny Huang and Vedant Misra and Jeremy Chen and RJ Skerry-Ryan and Avi Singh and Shruti Rijhwani and Dian Yu and Alex Castro-Ros and Beer Changpinyo and Romina Datta and Sumit Bagri and Arnar Mar Hrafnkelsson and Marcello Maggioni and Daniel Zheng and Yury Sulsky and Shaobo Hou and Tom Le Paine and Antoine Yang and Jason Riesa and Dominika Rogozinska and Dror Marcus and Dalia El Badawy and Qiao Zhang and Luyu Wang and Helen Miller and Jeremy Greer and Lars Lowe Sjos and Azade Nova and Heiga Zen and Rahma Chaabouni and Mihaela Rosca and Jiepu Jiang and Charlie Chen and Ruibo Liu and Tara Sainath and Maxim Krikun and Alex Polozov and Jean-Baptiste Lespiau and Josh Newlan and Zeyncep Cankara and Soo Kwak and Yunhan Xu and Phil Chen and Andy Coenen and Clemens Meyer and Katerina Tsihlas and Ada Ma and Juraj Gottweis and Jinwei Xing and Chenjie Gu and Jin Miao and Christian Frank and Zeynep Cankara and Sanjay Ganapathy and Ishita Dasgupta and Steph Hughes-Fitt and Heng Chen and David Reid and Keran Rong and Hongmin Fan and Joost van Amersfoort and Vincent Zhuang and Aaron Cohen and Shixiang Shane Gu and Anhad Mohananey and Anastasija Ilic and Taylor Tobin and John Wieting and Anna Bortsova and Phoebe Thacker and Emma Wang and Emily Caveness and Justin Chiu and Eren Sezener and Alex Kaskasoli and Steven Baker and Katie Millican and Mohamed Elhawaty and Kostas Aisopos and Carl Lebsack and Nathan Byrd and Hanjun Dai and Wenhao Jia and Matthew Wiethoff and Elnaz Davoodi and Albert Weston and Lakshman Yagati and Arun Ahuja and Isabel Gao and Golan Pundak and Susan Zhang and Michael Azzam and Khe Chai Sim and Sergi Caelles and James Keeling and Abhanshu Sharma and Andy Swing and YaGuang Li and Chenxi Liu and Carrie Grimes Bostock and Yamini Bansal and Zachary Nado and Ankesh Anand and Josh Lipschultz and Abhijit Karmarkar and Lev Proleev and Abe Ittycheriah and Soheil Hassas Yeganeh and George Polovets and Aleksandra Faust and Jiao Sun and Alban Rrustemi and Pen Li and Rakesh Shivanna and Jeremiah Liu and Chris Welty and Federico Lebron and Anirudh Baddepudi and Sebastian Krause and Emilio Parisotto and Radu Soricut and Zheng Xu and Dawn Bloxwich and Melvin Johnson and Behnam Neyshabur and Justin Mao-Jones and Renshen Wang and Vinay Ramasesh and Zaheer Abbas and Arthur Guez and Constant Segal and Duc Dung Nguyen and James Svensson and Le Hou and Sarah York and Kieran Milan and Sophie Bridgers and Wiktor Gworek and Marco Tagliasacchi and James Lee-Thorp and Michael Chang and Alexey Guseynov and Ale Jakse Hartman and Michael Kwong and Ruizhe Zhao and Sheleem Kashem and Elizabeth Cole and Antoine Miech and Richard Tanburn and Mary Phuong and Filip Pavetic and Sebastien Cevey and Ramona Comanescu and Richard Ives and Sherry Yang and Cosmo Du and Bo Li and Zizhao Zhang and Mariko Iinuma and Clara Huiyi Hu and Aurko Roy and Shaan Bijwadia and Zhenkai Zhu and Danilo Martins and Rachel Saputro and Anita Gergely and Steven Zheng and Dawei Jia and Ioannis Antonoglou and Adam Sadovsky and Shane Gu and Yingying Bi and Alek Andreev and Sina Samangooei and Mina Khan and Tomas Kocisky and Angelos Filos and Chintu Kumar and Colton Bishop and Adams Yu and Sarah Hodkinson and Sid Mittal and Premal Shah and Alexandre Moufarek and Yong Cheng and Adam Bloniarz and Jaehoon Lee and Pedram Pejman and Paul Michel and Stephen Spencer and Vladimir Feinberg and Xuehan Xiong and Nikolay Savinov and Charlotte Smith and Siamak Shakeri and Dustin Tran and Mary Chesus and Bernd Bohnet and George Tucker and Tamara von Glehn and Carrie Muir and Yiran Mao and Hideto Kazawa and Ambrose Slone and Kedar Soparkar and Disha Shrivastava and James Cobon-Kerr and Michael Sharman and Jay Pavagadhi and Carlos Araya and Karolis Misiunas and Nimesh Ghelani and Michael Laskin and David Barker and Qiujia Li and Anton Briukhov and Neil Houlsby and Mia Glaese and Balaji Lakshminarayanan and Nathan Schucher and Yunhao Tang and Eli Collins and Hyeontaek Lim and Fangxiaoyu Feng and Adria Recasens and Guangda Lai and Alberto Magni and Nicola De Cao and Aditya Siddhant and Zoe Ashwood and Jordi Orbay and Mostafa Dehghani and Jenny Brennan and Yifan He and Kelvin Xu and Yang Gao and Carl Saroufim and James Molloy and Xinyi Wu and Seb Arnold and Solomon Chang and Julian Schrittwieser and Elena Buchatskaya and Soroush Radpour and Martin Polacek and Skye Giordano and Ankur Bapna and Simon Tokumine and Vincent Hellendoorn and Thibault Sottiaux and Sarah Cogan and Aliaksei Severyn and Mohammad Saleh and Shantanu Thakoor and Laurent Shefey and Siyuan Qiao and Meenu Gaba and Shuo-yiin Chang and Craig Swanson and Biao Zhang and Benjamin Lee and Paul Kishan Rubenstein and Gan Song and Tom Kwiatkowski and Anna Koop and Ajay Kannan and David Kao and Parker Schuh and Axel Stjerngren and Golnaz Ghiasi and Gena Gibson and Luke Vilnis and Ye Yuan and Felipe Tiengo Ferreira and Aishwarya Kamath and Ted Klimenko and Ken Franko and Kefan Xiao and Indro Bhattacharya and Miteyan Patel and Rui Wang and Alex Morris and Robin Strudel and Vivek Sharma and Peter Choy and Sayed Hadi Hashemi and Jessica Landon and Mara Finkelstein and Priya Jhakra and Justin Frye and Megan Barnes and Matthew Mauger and Dennis Daun and Khuslen Baatarsukh and Matthew Tung and Wael Farhan and Henryk Michalewski and Fabio Viola and Felix de Chaumont Quitry and Charline Le Lan and Tom Hudson and Qingze Wang and Felix Fischer and Ivy Zheng and Elspeth White and Anca Dragan and Jean-baptiste Alayrac and Eric Ni and Alexander Pritzel and Adam Iwanicki and Michael Isard and Anna Bulanova and Lukas Zilka and Ethan Dyer and Devendra Sachan and Srivatsan Srinivasan and Hannah Muckenhirn and Honglong Cai and Amol Mandhane and Mukarram Tariq and Jack W. Rae and Gary Wang and Kareem Ayoub and Nicholas FitzGerald and Yao Zhao and Woohyun Han and Chris Alberti and Dan Garrette and Kashyap Krishnakumar and Mai Gimenez and Anselm Levskaya and Daniel Sohn and Josip Matak and Inaki Iturrate and Michael B. Chang and Jackie Xiang and Yuan Cao and Nishant Ranka and Geoff Brown and Adrian Hutter and Vahab Mirrokni and Nanxin Chen and Kaisheng Yao and Zoltan Egyed and Francois Galilee and Tyler Liechty and Praveen Kallakuri and Evan Palmer and Sanjay Ghemawat and Jasmine Liu and David Tao and Chloe Thornton and Tim Green and Mimi Jasarevic and Sharon Lin and Victor Cotruta and Yi-Xuan Tan and Noah Fiedel and Hongkun Yu and Ed Chi and Alexander Neitz and Jens Heitkaemper and Anu Sinha and Denny Zhou and Yi Sun and Charbel Kaed and Brice Hulse and Swaroop Mishra and Maria Georgaki and Sneha Kudugunta and Clement Farabet and Izhak Shafran and Daniel Vlasic and Anton Tsitsulin and Rajagopal Ananthanarayanan and Alen Carin and Guolong Su and Pei Sun and Shashank V and Gabriel Carvajal and Josef Broder and Iulia Comsa and Alena Repina and William Wong and Warren Weilun Chen and Peter Hawkins and Egor Filonov and Lucia Loher and Christoph Hirnschall and Weiyi Wang and Jingchen Ye and Andrea Burns and Hardie Cate and Diana Gage Wright and Federico Piccinini and Lei Zhang and Chu-Cheng Lin and Ionel Gog and Yana Kulizhskaya and Ashwin Sreevatsa and Shuang Song and Luis C. Cobo and Anand Iyer and Chetan Tekur and Guillermo Garrido and Zhuyun Xiao and Rupert Kemp and Huaixiu Steven Zheng and Hui Li and Ananth Agarwal and Christel Ngani and Kati Goshvadi and Rebeca Santamaria-Fernandez and Wojciech Fica and Xinyun Chen and Chris Gorgolewski and Sean Sun and Roopal Garg and Xinyu Ye and S. M. Ali Eslami and Nan Hua and Jon Simon and Pratik Joshi and Yelin Kim and Ian Tenney and Sahitya Potluri and Lam Nguyen Thiet and Quan Yuan and Florian Luisier and Alexandra Chronopoulou and Salvatore Scellato and Praveen Srinivasan and Minmin Chen and Vinod Koverkathu and Valentin Dalibard and Yaming Xu and Brennan Saeta and Keith Anderson and Thibault Sellam and Nick Fernando and Fantine Huot and Junehyuk Jung and Mani Varadarajan and Michael Quinn and Amit Raul and Maigo Le and Ruslan Habalov and Jon Clark and Komal Jalan and Kalesha Bullard and Achintya Singhal and Thang Luong and Boyu Wang and Sujeevan Rajayogam and Julian Eisenschlos and Johnson Jia and Daniel Finchelstein and Alex Yakubovich and Daniel Balle and Michael Fink and Sameer Agarwal and Jing Li and Dj Dvijotham and Shalini Pal and Kai Kang and Jaclyn Konzelmann and Jennifer Beattie and Olivier Dousse and Diane Wu and Remi Crocker and Chen Elkind and Siddhartha Reddy Jonnalagadda and Jong Lee and Dan Holtmann-Rice and Krystal Kallarackal and Rosanne Liu and Denis Vnukov and Neera Vats and Luca Invernizzi and Mohsen Jafari and Huanjie Zhou and Lilly Taylor and Jennifer Prendki and Marcus Wu and Tom Eccles and Tianqi Liu and Kavya Kopparapu and Francoise Beaufays and Christof Angermueller and Andreea Marzoca and Shourya Sarcar and Hilal Dib and Jeff Stanway and Frank Perbet and Nejc Trdin and Rachel Sterneck and Andrey Khorlin and Dinghua Li and Xihui Wu and Sonam Goenka and David Madras and Sasha Goldshtein and Willi Gierke and Tong Zhou and Yaxin Liu and Yannie Liang and Anais White and Yunjie Li and Shreya Singh and Sanaz Bahargam and Mark Epstein and Sujoy Basu and Li Lao and Adnan Ozturel and Carl Crous and Alex Zhai and Han Lu and Zora Tung and Neeraj Gaur and Alanna Walton and Lucas Dixon and Ming Zhang and Amir Globerson and Grant Uy and Andrew Bolt and Olivia Wiles and Milad Nasr and Ilia Shumailov and Marco Selvi and Francesco Piccinno and Ricardo Aguilar and Sara McCarthy and Misha Khalman and Mrinal Shukla and Vlado Galic and John Carpenter and Kevin Villela and Haibin Zhang and Harry Richardson and James Martens and Matko Bosnjak and Shreyas Rammohan Belle and Jeff Seibert and Mahmoud Alnahlawi and Brian McWilliams and Sankalp Singh and Annie Louis and Wen Ding and Dan Popovici and Lenin Simicich and Laura Knight and Pulkit Mehta and Nishesh Gupta and Chongyang Shi and Saaber Fatehi and Jovana Mitrovic and Alex Grills and Joseph Pagadora and Tsendsuren Munkhdalai and Dessie Petrova and Danielle Eisenbud and Zhishuai Zhang and Damion Yates and Bhavishya Mittal and Nilesh Tripuraneni and Yannis Assael and Thomas Brovelli and Prateek Jain and Mihajlo Velimirovic and Canfer Akbulut and Jiaqi Mu and Wolfgang Macherey and Ravin Kumar and Jun Xu and Haroon Qureshi and Gheorghe Comanici and Jeremy Wiesner and Zhitao Gong and Anton Ruddock and Matthias Bauer and Nick Felt and Anirudh GP and Anurag Arnab and Dustin Zelle and Jonas Rothfuss and Bill Rosgen and Ashish Shenoy and Bryan Seybold and Xinjian Li and Jayaram Mudigonda and Goker Erdogan and Jiawei Xia and Jiri Simsa and Andrea Michi and Yi Yao and Christopher Yew and Steven Kan and Isaac Caswell and Carey Radebaugh and Andre Elisseeff and Pedro Valenzuela and Kay McKinney and Kim Paterson and Albert Cui and Eri Latorre-Chimoto and Solomon Kim and William Zeng and Ken Durden and Priya Ponnapalli and Tiberiu Sosea and Christopher A. Choquette-Choo and James Manyika and Brona Robenek and Harsha Vashisht and Sebastien Pereira and Hoi Lam and Marko Velic and Denese Owusu-Afriyie and Katherine Lee and Tolga Bolukbasi and Alicia Parrish and Shawn Lu and Jane Park and Balaji Venkatraman and Alice Talbert and Lambert Rosique and Yuchung Cheng and Andrei Sozanschi and Adam Paszke and Praveen Kumar and Jessica Austin and Lu Li and Khalid Salama and Bartek Perz and Wooyeol Kim and Nandita Dukkipati and Anthony Baryshnikov and Christos Kaplanis and XiangHai Sheng and Yuri Chervonyi and Caglar Unlu and Diego de Las Casas and Harry Askham and Kathryn Tunyasuvunakool and Felix Gimeno and Siim Poder and Chester Kwak and Matt Miecnikowski and Vahab Mirrokni and Alek Dimitriev and Aaron Parisi and Dangyi Liu and Tomy Tsai and Toby Shevlane and Christina Kouridi and Drew Garmon and Adrian Goedeckemeyer and Adam R. Brown and Anitha Vijayakumar and Ali Elqursh and Sadegh Jazayeri and Jin Huang and Sara Mc Carthy and Jay Hoover and Lucy Kim and Sandeep Kumar and Wei Chen and Courtney Biles and Garrett Bingham and Evan Rosen and Lisa Wang and Qijun Tan and David Engel and Francesco Pongetti and Dario de Cesare and Dongseong Hwang and Lily Yu and Jennifer Pullman and Srini Narayanan and Kyle Levin and Siddharth Gopal and Megan Li and Asaf Aharoni and Trieu Trinh and Jessica Lo and Norman Casagrande and Roopali Vij and Loic Matthey and Bramandia Ramadhana and Austin Matthews and CJ Carey and Matthew Johnson and Kremena Goranova and Rohin Shah and Shereen Ashraf and Kingshuk Dasgupta and Rasmus Larsen and Yicheng Wang and Manish Reddy Vuyyuru and Chong Jiang and Joana Ijazi and Kazuki Osawa and Celine Smith and Ramya Sree Boppana and Taylan Bilal and Yuma Koizumi and Ying Xu and Yasemin Altun and Nir Shabat and Ben Bariach and Alex Korchemniy and Kiam Choo and Olaf Ronneberger and Chimezie Iwuanyanwu and Shubin Zhao and David Soergel and Cho-Jui Hsieh and Irene Cai and Shariq Iqbal and Martin Sundermeyer and Zhe Chen and Elie Bursztein and Chaitanya Malaviya and Fadi Biadsy and Prakash Shroff and Inderjit Dhillon and Tejasi Latkar and Chris Dyer and Hannah Forbes and Massimo Nicosia and Vitaly Nikolaev and Somer Greene and Marin Georgiev and Pidong Wang and Nina Martin and Hanie Sedghi and John Zhang and Praseem Banzal and Doug Fritz and Vikram Rao and Xuezhi Wang and Jiageng Zhang and Viorica Patraucean and Dayou Du and Igor Mordatch and Ivan Jurin and Lewis Liu and Ayush Dubey and Abhi Mohan and Janek Nowakowski and Vlad-Doru Ion and Nan Wei and Reiko Tojo and Maria Abi Raad and Drew A. Hudson and Vaishakh Keshava and Shubham Agrawal and Kevin Ramirez and Zhichun Wu and Hoang Nguyen and Ji Liu and Madhavi Sewak and Bryce Petrini and DongHyun Choi and Ivan Philips and Ziyue Wang and Ioana Bica and Ankush Garg and Jarek Wilkiewicz and Priyanka Agrawal and Xiaowei Li and Danhao Guo and Emily Xue and Naseer Shaik and Andrew Leach and Sadh MNM Khan and Julia Wiesinger and Sammy Jerome and Abhishek Chakladar and Alek Wenjiao Wang and Tina Ornduff and Folake Abu and Alireza Ghaffarkhah and Marcus Wainwright and Mario Cortes and Frederick Liu and Joshua Maynez and Andreas Terzis and Pouya Samangouei and Riham Mansour and Tomasz Kępa and François-Xavier Aubet and Anton Algymr and Dan Banica and Agoston Weisz and Andras Orban and Alexandre Senges and Ewa Andrejczuk and Mark Geller and Niccolo Dal Santo and Valentin Anklin and Majd Al Merey and Martin Baeuml and Trevor Strohman and Junwen Bai and Slav Petrov and Yonghui Wu and Demis Hassabis and Koray Kavukcuoglu and Jeff Dean and Oriol Vinyals},
  booktitle = {Google DeepMind team technical report},
  year = {2024},
  organization = {Google DeepMind}
}

@inproceedings{Bursztein2024Generalized,
  title = {Generalized Power Attacks against Crypto Hardware using Long-Range Deep Learning},
  author = {Elie Bursztein and Luca Invernizzi and Karel Král and Daniel Moghimi and Jean-Michel Picod and Marina Zhang},
  booktitle = {Cryptographic Hardware and Embedded Systems},
  year = {2024},
  organization = {ICAR}
}

@inproceedings{Bursztein2014Handcrafted,
  title = {Handcrafted fraud and extortion: manual account hijacking in the wild},
  author = {Elie Bursztein and Borbala Benko and Daniel Margolis and Tadek Pietraszek and Andy Archer and Allan Aquino and Andreas Pitsillidis and Stefan Savage},
  booktitle = {Internet Measurement Conference},
  year = {2014},
  organization = {AMC}
}

@inproceedings{Bursztein2010How,
  title = {How good are humans at solving captchas a large scale evaluation},
  author = {Elie Bursztein and Steven Bethard and Celine Fabry and Dan Jurafsky and John C. Mitchell},
  booktitle = {Security and Privacy},
  year = {2010},
  organization = {IEEE}
}

@inproceedings{Ghinea2023Hybrid,
  title = {Hybrid Post-Quantum Signatures in Hardware Security Keys},
  author = {Diana Ghinea and Fabian Kaczmarczyck and Jennifer Pullman and Julien Cretin and Stefan Kolbl and Rafael Misoczki and Jean-Michel Picod and Luca Invernizzi and Elie Bursztein},
  booktitle = {International Conference on Applied Cryptography and Network Security},
  year = {2023},
  organization = {Spring}
}

@inproceedings{Bursztein2016I,
  title = {I am a legend hacking hearthstone using statistical learning methods},
  author = {Elie Bursztein},
  booktitle = {Computational Intelligence and Games conference},
  year = {2016},
  organization = {IEEE}
}

@inproceedings{Barrett2023Identifying,
  title = {Identifying and Mitigating the Security Risks of Generative AI},
  author = {Clark Barrett and Brad Boyd and Elie Bursztein and Nicholas Carlini and Brad Chen and Jihye Choi and Amrita Roy Chowdhury and Mihai Christodorescu and Anupam Datta and Soheil Feizi and Kathleen Fisher and Tatsunori Hashimoto and Dan Hendrycks and Somesh Jha and Daniel Kang and Florian Kerschbaum and Eric Mitchell and John Mitchell and Zulfikar Ramzan and Khawaja Shams and Dawn Song and Ankur Taly and Diyi Yang},
  booktitle = {Foundations and Trends in Privacy and Security},
  year = {2023},
  organization = {Now Publishers}
}

@inproceedings{Baldridge2024Imagen,
  title = {Imagen 3},
  author = {Jason Baldridge and Jakob Bauer and Mukul Bhutani and Nicole Brichtova and Andrew Bunner and Lluis Castrejon and Kelvin Chan and Yichang Chen and Sander Dieleman and Yuqing Du and Zach Eaton-Rosen and Hongliang Fei and Nando de Freitas and Yilin Gao and Evgeny Gladchenko and Sergio Gómez Colmenarejo and Mandy Guo and Alex Haig and Will Hawkins and Hexiang Hu and Huilian Huang and Tobenna Peter Igwe and Christos Kaplanis and Siavash Khodadadeh and Yelin Kim and Ksenia Konyushkova and Karol Langner and Eric Lau and Rory Lawton and Shixin Luo and Soňa Mokrá and Henna Nandwani and Yasumasa Onoe and Aäron van den Oord and Zarana Parekh and Jordi Pont-Tuset and Hang Qi and Rui Qian and Deepak Ramachandran and Poorva Rane and Abdullah Rashwan and Ali Razavi and Robert Riachi and Hansa Srinivasan and Srivatsan Srinivasan and Robin Strudel and Benigno Uria and Oliver Wang and Su Wang and Austin Waters and Chris Wolff and Auriel Wright and Zhisheng Xiao and Hao Xiong and Keyang Xu and Marc van Zee and Junlin Zhang and Katie Zhang and Wenlei Zhou and Konrad Zolna and Ola Aboubakar and Canfer Akbulut and Oscar Akerlund and Isabela Albuquerque and Nina Anderson and Marco Andreetto and Lora Aroyo and Ben Bariach and David Barker and Sherry Ben and Dana Berman and Courtney Biles and Irina Blok and Pankil Botadra and Jenny Brennan and Karla Brown and John Buckley and Rudy Bunel and Elie Bursztein and Christina Butterfield and Ben Caine and Viral Carpenter and Norman Casagrande and Ming-Wei Chang and Solomon Chang and Shamik Chaudhuri and Tony Chen and John Choi and Dmitry Churbanau and Nathan Clement and Matan Cohen and Forrester Cole and Mikhail Dektiarev and Vincent Du and Praneet Dutta and Tom Eccles and Ndidi Elue and Ashley Feden and Shlomi Fruchter and Frankie Garcia and Roopal Garg and Weina Ge and Ahmed Ghazy and Bryant Gipson and Andrew Goodman and Dawid Górny and Sven Gowal and Khyatti Gupta and Yoni Halpern and Yena Han and Susan Hao and Jamie Hayes and Jonathan Heek and Amir Hertz and Ed Hirst and Emiel Hoogeboom and Tingbo Hou and Heidi Howard and Mohamed Ibrahim and Dirichi Ike-Njoku and Joana Iljazi and Vlad Ionescu and William Isaac and Reena Jana and Gemma Jennings and Donovon Jenson and Xuhui Jia and Kerry Jones and Xiaoen Ju and Ivana Kajic and Christos Kaplanis and Burcu Karagol Ayan and Jacob Kelly and Suraj Kothawade and Christina Kouridi and Ira Ktena and Jolanda Kumakaw and Dana Kurniawan and Dmitry Lagun and Lily Lavitas and Jason Lee and Tao Li and Marco Liang and Maggie Li-Calis and Yuchi Liu and Javier Lopez Alberca and Matthieu Kim Lorrain and Peggy Lu and Kristian Lum and Yukun Ma and Chase Malik and John Mellor and Thomas Mensink and Inbar Mosseri and Tom Murray and Aida Nematzadeh and Paul Nicholas and Signe Nørly and João Gabriel Oliveira and Guillermo Ortiz-Jimenez and Michela Paganini and Tom Le Paine and Roni Paiss and Alicia Parrish and Anne Peckham and Vikas Peswani and Igor Petrovski and Tobias Pfaff and Alex Pirozhenko and Ryan Poplin and Utsav Prabhu and Yuan Qi and Matthew Rahtz and Cyrus Rashtchian and Charvi Rastogi and Amit Raul and Ali Razavi and Sylvestre-Alvise Rebuffi and Susanna Ricco and Felix Riedel and Dirk Robinson and Pankaj Rohatgi and Bill Rosgen and Sarah Rumbley and Moonkyung Ryu and Anthony Salgado and Tim Salimans and Sahil Singla and Florian Schroff and Candice Schumann and Tanmay Shah and Eleni Shaw and Gregory Shaw and Brendan Shillingford and Kaushik Shivakumar and Dennis Shtatnov and Zach Singer and Evgeny Sluzhaev and Valerii Sokolov and Thibault Sottiaux and Florian Stimberg and Brad Stone and David Stutz and Yu-Chuan Su and Eric Tabellion and Shuai Tang and David Tao and Kurt Thomas and Gregory Thornton and Andeep Toor and Cristian Udrescu and Aayush Upadhyay and Cristina Vasconcelos and Alex Vasiloff and Andrey Voynov and Amanda Walker and Luyu Wang and Miaosen Wang and Simon Wang and Stanley Wang and Qifei Wang and Yuxiao Wang and Ágoston Weisz and Olivia Wiles and Chenxia Wu and Xingyu Federico Xu and Andrew Xue and Jianbo Yang and Luo Yu and Mete Yurtoglu and Ali Zand and Han Zhang and Jiageng Zhang and Catherine Zhao and Adilet Zhaxybay and Miao Zhou and Shengqi Zhu and Zhenkai Zhu and Dawn Bloxwich and Mahyar Bordbar and Luis C. Cobo and Eli Collins and Shengyang Dai and Tulsee Doshi and Anca Dragan and Douglas Eck and Demis Hassabis and Sissie Hsiao and Tom Hume and Koray Kavukcuoglu and Helen King and Jack Krawczyk and Yeqing Li and Kathy Meier-Hellstern and Andras Orban and Yury Pinsky and Amar Subramanya and Oriol Vinyals and Ting Yu and Yori Zwols},
  booktitle = {Google DeepMind team technical report},
  year = {2024},
  organization = {Google DeepMind}
}

@inproceedings{Kramer2025Integrating,
  title = {Integrating Large Language Models into Security Incident Response},
  author = {Diana Kramer and Lambert Rosique and Ajay Narotam and Elie Bursztein and Patrick Gage Kelley and Kurt Thomas and Allison Woodruff},
  booktitle = {Symposium on Usable Privacy and Security},
  year = {2025},
  organization = {USENIX Association}
}

@inproceedings{Thomas2016Investigating,
  title = {Investigating commercial pay-per-install and the distribution of unwanted software},
  author = {Kurt Thomas and Juan A. Elices Crespo and Ryan Rasti and Jean-Michel Picod and Cait Phillips and Marc-Andre Decoste and Chris Sharp and Fabio Tirelo and Ali Tofigh and Marc-Antoine Courteau and Lucas Ballard and Robert Shield and Nav Jagpal and Moheeb Abu Rajab and Panayiotis Mavrommatis and Niels Provos and Elie Bursztein and Damon McCoy},
  booktitle = {Usenix Security},
  year = {2016},
  organization = {Usenix}
}

@inproceedings{Thomas2022It,
  title = {It's common and a part of being a content creator: Understanding How Creators Experience and Cope with Hate and Harassment Online},
  author = {Kurt Thomas and Patrick Gage Kelley and Sunny Consolvo and Patrawat Samermit and Elie Bursztein},
  booktitle = {Conference on Human Factors in Computing Systems},
  year = {2022},
  organization = {ACM}
}

@inproceedings{Bojinov2010Kamouflage,
  title = {Kamouflage loss-resistant password management},
  author = {Hristo Bojinov and Elie Bursztein and Dan Boneh and Xavier Boyen},
  booktitle = {European Symposium On Research In Computer Security},
  year = {2010},
  organization = {IEEE}
}

@inproceedings{Bursztein2024Leveraging,
  title = {Leveraging Virtual Reality to Enhance Diversity and Inclusion training at Google},
  author = {Elie Bursztein and Karla Brown and Patrick Gage Kelley and Leonie Sanderson},
  booktitle = {Conference on Human Factors in Computing Systems},
  year = {2024},
  organization = {ACM}
}

@inproceedings{Fratantonio2025Magika,
  title = {Magika: AI-Powered Content-Type Detection},
  author = {Yanick Fratantonio and Luca Invernizzi and Loua Farah and Kurt Thomas and Marina Zhang and Ange Albertini and Francois Galilee and Giancarlo Metitieri and Julien Cretin and Alex Petit-Bianco and David Tao and Elie Bursztein},
  booktitle = {International Conference on Software Engineering},
  year = {2025},
  organization = {IEEE/ACM}
}

@inproceedings{Durumeric2015Neither,
  title = {Neither snow nor rain nor mitm . . . an empirical analysis of email delivery security},
  author = {Zakir Durumeric and David Adrian and Ariana Mirian and James Kasten and Elie Bursztein and Nicolas Lidzborski and Kurt Thomas and Vijay Eranti and Michael Bailey and J. Alex Halderman},
  booktitle = {IMC},
  year = {2015},
  organization = {ACM}
}

@inproceedings{Bursztein2008Netqi,
  title = {Netqi a model checker for anticipation game},
  author = {Elie Bursztein},
  booktitle = {6th International Symposium on Automated Technology for Verification and Analysis},
  year = {2008},
  organization = {Springer}
}

@inproceedings{Sosik2014Online,
  title = {Online microsurveys for user experience research},
  author = {Victoria Schwanda Sosik and Elie Bursztein and Sunny Consolvo and David Huffaker and Gueorgi Kossinets and Kerwell Liao and Paul McDonald and Aaron Sedley},
  booktitle = {Human Factors in Computing Systems},
  year = {2014},
  organization = {ACM}
}

@inproceedings{Bursztein2011Openconflict,
  title = {Openconflict preventing real time map hacks in online games},
  author = {Elie Bursztein and Jocelyn Lagarenne and Mike Hamburg and Dan Boneh},
  booktitle = {Security and Privacy},
  year = {2011},
  organization = {IEEE}
}

@inproceedings{Bursztein2016Picasso,
  title = {Picasso: Lightweight Device Class Fingerprinting for Web Clients},
  author = {Elie Bursztein and Artem Malyshey and Tadek Pietraszek and Kurt Thomas},
  booktitle = {Workshop on Security and Privacy in Smartphones and Mobile Devices},
  year = {2016},
  organization = {ACM}
}

@inproceedings{Huang2017Pinning,
  title = {Pinning Down Abuse on Google Maps},
  author = {Danny Y. Huang and Doug Grundman and Kurt Thomas and Abhishek Kumar and Elie Bursztein and Kirill Levchenko and Alex C. Snoeren},
  booktitle = {World Wide Web},
  year = {2017},
  organization = {WWW}
}

@inproceedings{Bursztein2008Probabilistic,
  title = {Probabilistic protocol identification for hard to classify protocol},
  author = {Elie Bursztein},
  booktitle = {2nd International Workshop on Information Security Theory and Practices},
  year = {2008},
  organization = {Springer}
}

@inproceedings{Thomas2019Protecting,
  title = {Protecting accounts from credential stuffing with password breach alerting},
  author = {Kurt Thomas and Jennifer Pullman and Kevin Yeo and Ananth Raghunathan and Patrick Gage Kelley and Luca Invernizzi and Borbala Benko and Tadek Pietraszek and Sarvar Patel and Dan Boneh and Elie Bursztein},
  booktitle = {Proceedings of the USENIX Security Symposium},
  year = {2019},
  organization = {Usenix}
}

@inproceedings{Bursztein2011Reclaiming,
  title = {Reclaiming the blogosphere talkback a secure linkback protocol for weblogs},
  author = {Elie Bursztein and Baptiste Gourdin and John C. Mitchell},
  booktitle = {European Symposium on Research in Computer Security},
  year = {2011},
  organization = {IEEE}
}

@inproceedings{Bursztein2010Recovering,
  title = {Recovering windows secrets and efs certificates offline},
  author = {Elie Bursztein and Jean-Michel Picod},
  booktitle = {Workshop On Offensive Technologies},
  year = {2010},
  organization = {Usenix}
}

@inproceedings{Li2016Remedying,
  title = {Remedying web hijacking notification effectiveness and webmaster comprehension},
  author = {Frank Li and Grant Ho and Eric Kuan and Yuan Niu and Lucas Ballard and Kurt Thomas and Elie Bursztein and Vern Paxson},
  booktitle = {Word Wide Web},
  year = {2016},
  organization = {WWW}
}

@inproceedings{Bursztein2019Rethinking,
  title = {Rethinking the detection of child sexual abuse imagery on the Internet},
  author = {Elie Bursztein and Travis Bright and Michelle DeLaune and David M. Eliff and Nick Hsu and Lindsey Olson and John Shehan and Madhukar Thakur and Kurt Thomas},
  booktitle = {World Wide Web},
  year = {2019},
  organization = {WWW}
}

@inproceedings{Zhang2024RETSim,
  title = {RETSim: Resilient and Efficient Text Similarity},
  author = {Marina Zhang and Owen Vallis and Aysegul Bumin and Tanay Vakharia and Elie Bursztein},
  booktitle = {International Conference on Learning Representations},
  year = {2024},
  organization = {ICLR}
}

@inproceedings{Bursztein2023RETVec,
  title = {RETVec: Resilient and Efficient Text Vectorizer},
  author = {Elie Bursztein and Marina Zhang and Owen Vallis and Xinyu Jia and Alexandros Kapravelos and Alexey Kurakin},
  booktitle = {Neural Information Processing Systems},
  year = {2023},
  organization = {NeurIPS}
}

@inproceedings{Bonneau2015Secrets,
  title = {Secrets, lies, and account recovery: lessons from the use of personal knowledge questions at google},
  author = {Joseph Bonneau and Elie Bursztein and Ilan Caron and Rob Jackson and Mike Williamson},
  booktitle = {22nd international conference on World Wide Web},
  year = {2015},
  organization = {ACM}
}

@inproceedings{Bursztein2012Sessionjuggler,
  title = {Sessionjuggler secure web login from an untrusted terminal using session hijacking},
  author = {Elie Bursztein and Chinmay Soman and Dan Boneh and John C. Mitchell},
  booktitle = {World Wide Web},
  year = {2012},
  organization = {WWW}
}

@inproceedings{Thomas2021SoK,
  title = {SoK: Hate, Harassment, and the Changing Landscape of Online Abuse},
  author = {Kurt Thomas and Devdatta Akhawe and Michael Bailey and Dan Boneh and Elie Bursztein and Sunny Consolvo and Nicola Dell and Zakir Durumeric and Patrick Gage Kelley and Deepak Kumar and Damon McCoy and Sarah Meiklejohn and Thomas Ristenpart and Gianluca Stringhini},
  booktitle = {Security and Privacy},
  year = {2021},
  organization = {IEEE}
}

@inproceedings{Kaczmarczyck2020Spotlight,
  title = {Spotlight: Malware Lead Generation At Scale},
  author = {Fabian Kaczmarczyck and Bernhard Grill and Luca Invernizzi and Jennifer Pullman and Cecilia M. Procopiuc and David Tao and Borbala Benko and Elie Bursztein},
  booktitle = {Proceedings of Annual Computer Security Applications Conference},
  year = {2020},
  organization = {ACM}
}

@inproceedings{Bau2010State,
  title = {State of the art automated black-box web application vulnerability testing},
  author = {Jason Bau and Elie Bursztein and Divij Gupta and John C. Mitchell},
  booktitle = {Security and Privacy},
  year = {2010},
  organization = {IEEE}
}

@inproceedings{Thomas2025Supporting,
  title = {Supporting Human Raters with the Detection of Harmful Content Using Large Language Models},
  author = {Kurt Thomas and Patrick Gage Kelley and David Tao and Sarah Meiklejohn and Owen Vallis and Shunwen Tan and Blaž Bratanič and Felipe Tiengo Ferreira and Vijay Kumar Eranti and Elie Bursztein},
  booktitle = {IEEE Symposium on Security and Privacy},
  year = {2025},
  organization = {IEEE}
}

@inproceedings{Matthews2025Supporting,
  title = {Supporting the Digital Safety of At-Risk Users: Lessons Learned from 9+ Years of Research and Training},
  author = {Tara Matthews and Elie Bursztein and Patrick Gage Kelley and Lea Kissner and Andreas Kramm and Andrew Oplinger and Andreas Schou and Manya Sleeper and Stephan Somogyi and Dalila Szostak and Kurt Thomas and Anna Turner and Jill Palzkill Woelfer and Lawrence L. You and Izzie Zahorian and Sunny Consolvo},
  booktitle = {ACM Transactions on Computer-Human Interaction},
  year = {2025},
  organization = {ACM}
}

@inproceedings{Bursztein2011Text,
  title = {Text-based captcha strengths and weaknesses},
  author = {Elie Bursztein and Matthieu Martin and John C. Mitchell},
  booktitle = {Computer and Communications Security},
  year = {2011},
  organization = {ACM}
}

@inproceedings{Thomas2016The,
  title = {The Abuse Sharing Economy: Understanding the Limits of Threat Exchanges},
  author = {Kurt Thomas and Rony Amira and Adi Ben-Yoash and Ori Folger and Amir Hardon and Ari Berger and Elie Bursztein and Michael Bailey},
  booktitle = {Research in Attacks, Intrusions, and Defenses},
  year = {2016},
  organization = {Springer}
}

@inproceedings{Bojinov2010The,
  title = {The emergence of cross channel scripting},
  author = {Hristo Bojinov and Elie Bursztein and Dan Boneh},
  booktitle = {Communications of the ACM Journal},
  year = {2010},
  organization = {ACM}
}

@inproceedings{Bursztein2014The,
  title = {The end is nigh: generic solving of text-based captchas},
  author = {Elie Bursztein and Jonathan Aigrain and Angelika Mosciki and John Mitchell},
  booktitle = {Workshop on Offensive Technology},
  year = {2014},
  organization = {Usenix}
}

@inproceedings{Bursztein2011The,
  title = {The failure of noise-based non-continuous audio captchas},
  author = {Elie Bursztein and Romain Bauxis and Hristo Paskov and Daniele Perito and Celine Fabry and John C. Mitchell},
  booktitle = {Security and Privacy},
  year = {2011},
  organization = {IEEE}
}

@inproceedings{Stevens2017The,
  title = {The first collision for full SHA-1},
  author = {Marc Stevens and Elie Bursztein and Pierre Karpman and Ange Albertini and Yarik Markov},
  booktitle = {Crypto},
  year = {2017},
  organization = {IACR}
}

@inproceedings{Durumeric2017The,
  title = {The Security Impact of HTTPS Interception},
  author = {Zakir Durumeric and Zane Ma and Drew Springall and Richard Barnes and Nick Sullivan and Elie Bursztein and Michael Bailey and J Alex Halderman and Vern Paxson},
  booktitle = {Network and Distributed Systems Symposium},
  year = {2017},
  organization = {Internet Society}
}

@inproceedings{Sambasivan2019They,
  title = {They Don't Leave Us Alone Anywhere We Go - Gender and Digital Abuse in South Asia},
  author = {Nithya Sambasivan and Amna Batool and Nova Ahmed and Tara Matthews and Kurt Thomas and Laura Sanely Gaytán-Lugo and David Nemer and Elie Bursztein and Elizabeth Churchill and Sunny Consolvo},
  booktitle = {CHI Conference on Human Factors in Computing Systems},
  year = {2019},
  organization = {ACM}
}

@inproceedings{Bertram2019Five,
  title = {Five years of the Right to Be Forgotten},
  author = {Theo Bertram and Elie Bursztein and Stephanie Caro and Hubert Chao and Rutledge Chin Feman and Peter Fleischer and Albin Gustafsson and Jess Hemerly and Chris Hibbert and Luca Invernizzi and Lanah Kammourieh Donnelly and Jason Ketover and Jay Laefer and Paul Nicholas and Yuan Niu and Harjinder Obhi and David Price and Andrew Strait and Kurt Thomas and Al Verney},
  booktitle = {Computer and Communications Security},
  year = {2019},
  organization = {ACM}
}

@inproceedings{Bursztein2007Time,
  title = {Time has something to tell us about network address translation},
  author = {Elie Bursztein},
  booktitle = {12th Nordic Workshop on Secure IT Systems},
  year = {2007},
  organization = {Springer}
}

@inproceedings{Gourdin2011Towards,
  title = {Towards secure embedded web interfaces},
  author = {Baptiste Gourdin and Chinmay Soman and Hristo Bojinov and Elie Bursztein},
  booktitle = {Usenix Security},
  year = {2011},
  organization = {Usenix}
}

@inproceedings{Bursztein2009Trackback,
  title = {Trackback spam abuse and prevention},
  author = {Elie Bursztein and Peifung E. Lam and John C. Mitchell},
  booktitle = {Cloud Computing Security Workshop},
  year = {2009},
  organization = {ACM}
}

@inproceedings{Huang2018Tracking,
  title = {Tracking desktop ransomware payments end to end },
  author = {Danny Yuxing Huang and Maxwell Aliapoulios and Vector Guo and Luca Invernizzi and Kylie McRoberts and Elie Bursztein and Jonathan Levin and Kirill Levchenko and Alex C. Snoeren and Damon McCoy},
  booktitle = {Security and Privacy},
  year = {2018},
  organization = {IEEE}
}

@inproceedings{Antonakakis2017Understanding,
  title = {Understanding the Mirai Botnet},
  author = {Manos Antonakakis and Tim April and Michael Bailey and Matt Bernhard and Elie Bursztein and Jaime Cochran and Zakir Durumeric and J. Alex Halderman and Luca Invernizzi and Michalis Kallitsis and Deepak Kumar and Chaz Lever and Zane Ma and Joshua Mason and Damian Menscher and Chad Seaman and Nick Sullivan and Kurt Thomas and Yi Zhou},
  booktitle = {Usenix Security},
  year = {2017},
  organization = {Usenix}
}

@inproceedings{Tischer2016Users,
  title = {Users really do plug in usb drives they find},
  author = {Matthew Tischer and Zakir Durumeric and Sam Foster and Sunny Duan and Alec Mori and Elie Bursztein and Michael Bailey},
  booktitle = {Security and Privacy},
  year = {2016},
  organization = {IEEE}
}

@inproceedings{Bursztein2009Using,
  title = {Using strategy objectives for network security analysis},
  author = {Elie Bursztein and John C. Mitchell},
  booktitle = {5th China International Conference on Information Security and Cryptology},
  year = {2009},
  organization = {IEEE}
}

@inproceedings{Bursztein2010Webseclab,
  title = {Webseclab security education workbench},
  author = {Elie Bursztein and Baptiste Gourdin and Celine Fabry and Jason Bau and Gustav Rydstedt and Hristo Bojinov and Dan Boneh and John C. Mitchell},
  booktitle = {Cyber Security Experimentation and Test},
  year = {2010},
  organization = {Usenix}
}

@inproceedings{Simoiu2020Who,
  title = {Who is targeted by email-based phishing and malware? Measuring factors that differentiate risk},
  author = {Camelia Simoiu and Ali Zand and Kurt Thomas and Elie Bursztein},
  booktitle = {Internet Measurement Conference},
  year = {2020},
  organization = {ACM}
}

@inproceedings{Consolvo2021Why,
  title = {Why wouldn't someone think of democracy as a target? Security practices & challenges of people involved with U.S. political campaigns"},
  author = {Sunny Consolvo and Patrick Gage Kelley and Tara Matthews and Kurt Thomas and Lee Dunn and Elie Bursztein},
  booktitle = {Usenix Security},
  year = {2021},
  organization = {Usenix}
}

@inproceedings{Bojinov2009Xcs,
  title = {Xcs cross channel scripting and its impact on web applications},
  author = {Hristo Bojinov and Elie Bursztein and Dan Boneh},
  booktitle = {Computer and Communications Security},
  year = {2009},
  organization = {ACM}
}

Filter by

Facade: High-Precision Insider Threat Detection Using Deep Contextual Anomaly Detection
ai

Facade: High-Precision Insider Threat Detection Using Deep Contextual Anomaly Detection

Usenix Security 2026

ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?
ai

ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?

NeurIPS 2026

DROIDCCT: Cryptographic Compliance Test via Trillion-Scale Measurement
Cybersecurity

DROIDCCT: Cryptographic Compliance Test via Trillion-Scale Measurement

ACSAC 2025

Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks
ai

Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks

CCS 2025

Integrating Large Language Models into Security Incident Response
ai

Integrating Large Language Models into Security Incident Response

SOUPS 2025

Supporting the Digital Safety of At-Risk Users: Lessons Learned from 9+ Years of Research and Training
privacy

Supporting the Digital Safety of At-Risk Users: Lessons Learned from 9+ Years of Research and Training

TOCHI 2025

Supporting Human Raters with the Detection of Harmful Content Using Large Language Models
ai

Supporting Human Raters with the Detection of Harmful Content Using Large Language Models

S&P 2025

Magika: AI-Powered Content-Type Detection
ai

Magika: AI-Powered Content-Type Detection

ICSE 2025

Generalized Power Attacks against Crypto Hardware using Long-Range Deep Learning
Cybersecurity

Generalized Power Attacks against Crypto Hardware using Long-Range Deep Learning

CHES 2024

Imagen 3
ai

Imagen 3

Technical report 2024

Leveraging Virtual Reality to Enhance Diversity and Inclusion training at Google
Usability

Leveraging Virtual Reality to Enhance Diversity and Inclusion training at Google

CHI 2024

RETSim: Resilient and Efficient Text Similarity
AI

RETSim: Resilient and Efficient Text Similarity

ICLR 2024

Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context
ai

Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context

Technical report 2024

RETVec: Resilient and Efficient Text Vectorizer
AI

RETVec: Resilient and Efficient Text Vectorizer

NeurIPS 2023

Identifying and Mitigating the Security Risks of Generative AI
ai

Identifying and Mitigating the Security Risks of Generative AI

FnT Privacy and Security 2023

Hybrid Post-Quantum Signatures in Hardware Security Keys
Cybersecurity

Hybrid Post-Quantum Signatures in Hardware Security Keys

ACNS 2023

It's common and a part of being a content creator: Understanding How Creators Experience and Cope with Hate and Harassment Online
Safety

It's common and a part of being a content creator: Understanding How Creators Experience and Cope with Hate and Harassment Online

CHI 2022

Designing Toxic Content Classification for a Diversity of Perspectives
cybersecurity

Designing Toxic Content Classification for a Diversity of Perspectives

SOUPS 2021

SoK: Hate, Harassment, and the Changing Landscape of Online Abuse
cybersecurity

SoK: Hate, Harassment, and the Changing Landscape of Online Abuse

S&P 2021

Who is targeted by email-based phishing and malware? Measuring factors that differentiate risk
cybersecurity

Who is targeted by email-based phishing and malware? Measuring factors that differentiate risk

IMC 2020

Why wouldn't someone think of democracy as a target? Security practices & challenges of people involved with U.S. political campaigns"
cybersecurity

Why wouldn't someone think of democracy as a target? Security practices & challenges of people involved with U.S. political campaigns"

Usenix Security 2021

Spotlight: Malware Lead Generation At Scale
Anti-Abuse

Spotlight: Malware Lead Generation At Scale

ACSAC 2020

CoinPolice: Detecting Hidden Cryptojacking Attacks with Neural Networks
anti-abuse

CoinPolice: Detecting Hidden Cryptojacking Attacks with Neural Networks

arXiv 2020

Five years of the Right to Be Forgotten
web

Five years of the Right to Be Forgotten

CCS 2019

Protecting accounts from credential stuffing with password breach alerting
Cybersecurity

Protecting accounts from credential stuffing with password breach alerting

Usenix Security 2019

Rethinking the detection of child sexual abuse imagery on the Internet
ai

Rethinking the detection of child sexual abuse imagery on the Internet

WWW 2019

They Don't Leave Us Alone Anywhere We Go - Gender and Digital Abuse in South Asia
Safety

They Don't Leave Us Alone Anywhere We Go - Gender and Digital Abuse in South Asia

CHI 2019

Data Breaches: User Comprehension, Expectations, and Concerns with Handling Exposed Data
Privacy

Data Breaches: User Comprehension, Expectations, and Concerns with Handling Exposed Data

SOUPS 2018

Tracking desktop ransomware payments end to end
Anti-Abuse

Tracking desktop ransomware payments end to end

S&P 2018

Data Breaches, Phishing, or Malware? Understanding the Risks of Stolen Credentials
anti-abuse

Data Breaches, Phishing, or Malware? Understanding the Risks of Stolen Credentials

CCS 2017

The first collision for full SHA-1
Cybersecurity

The first collision for full SHA-1

Crypto 2017

Understanding the Mirai Botnet
Cybersecurity

Understanding the Mirai Botnet

Usenix Security 2017

Pinning Down Abuse on Google Maps
anti-abuse

Pinning Down Abuse on Google Maps

WWW 2017

The Security Impact of HTTPS Interception
Cybersecurity

The Security Impact of HTTPS Interception

NDSS 2017

Picasso: Lightweight Device Class Fingerprinting for Web Clients
anti-abuse

Picasso: Lightweight Device Class Fingerprinting for Web Clients

SPSM 2016

I am a legend hacking hearthstone using statistical learning methods
AI

I am a legend hacking hearthstone using statistical learning methods

CIG 2016

The Abuse Sharing Economy: Understanding the Limits of Threat Exchanges
anti-abuse

The Abuse Sharing Economy: Understanding the Limits of Threat Exchanges

RAID 2016

Investigating commercial pay-per-install and the distribution of unwanted software
anti-abuse

Investigating commercial pay-per-install and the distribution of unwanted software

Usenix Security 2016

Cloak of visibility: detecting when machines browse a different web
anti-abuse

Cloak of visibility: detecting when machines browse a different web

S&P 2016

Remedying web hijacking notification effectiveness and webmaster comprehension
Usability

Remedying web hijacking notification effectiveness and webmaster comprehension

WWW 2016

Users really do plug in usb drives they find
Usability

Users really do plug in usb drives they find

S&P 2016

Neither snow nor rain nor mitm . . . an empirical analysis of email delivery security
Cybersecurity

Neither snow nor rain nor mitm . . . an empirical analysis of email delivery security

IMC 2015

Framing dependencies introduced by underground commoditization
anti-abuse

Framing dependencies introduced by underground commoditization

WEIS 2015

Secrets, lies, and account recovery: lessons from the use of personal knowledge questions at google
anti-abuse

Secrets, lies, and account recovery: lessons from the use of personal knowledge questions at google

WWW 2015

Ad injection at scale: assessing deceptive advertisement modifications
anti-abuse

Ad injection at scale: assessing deceptive advertisement modifications

S&P 2015

Handcrafted fraud and extortion: manual account hijacking in the wild
anti-abuse

Handcrafted fraud and extortion: manual account hijacking in the wild

IMC 2014

Dialing back abuse on phone verified accounts
anti-abuse

Dialing back abuse on phone verified accounts

CCS 2014

The end is nigh: generic solving of text-based captchas
Anti-Abuse

The end is nigh: generic solving of text-based captchas

WOOT 2014

Cloak and swagger: understanding data sensitivity through the lens of user anonymity
privacy

Cloak and swagger: understanding data sensitivity through the lens of user anonymity

S&P 2014

Easy does it: more usable captchas
Usability

Easy does it: more usable captchas

CHI 2014

Online microsurveys for user experience research
Usability

Online microsurveys for user experience research

CHI 2014

Sessionjuggler secure web login from an untrusted terminal using session hijacking
Cybersecurity

Sessionjuggler secure web login from an untrusted terminal using session hijacking

WWW 2012

Text-based captcha strengths and weaknesses
Anti-Abuse

Text-based captcha strengths and weaknesses

CCS 2011

Reclaiming the blogosphere talkback a secure linkback protocol for weblogs
Anti-Abuse

Reclaiming the blogosphere talkback a secure linkback protocol for weblogs

ESORICS 2011

Towards secure embedded web interfaces
Cybersecurity

Towards secure embedded web interfaces

Usenix Security 2011

Openconflict preventing real time map hacks in online games
Cybersecurity

Openconflict preventing real time map hacks in online games

S&P 2011

The failure of noise-based non-continuous audio captchas
Anti-Abuse

The failure of noise-based non-continuous audio captchas

S&P 2011

Kamouflage loss-resistant password management
Cybersecurity

Kamouflage loss-resistant password management

ESORICS 2010

An analysis of private browsing modes in modern browsers
privacy

An analysis of private browsing modes in modern browsers

Usenix Security 2010

Framing attacks on smartphones and dumb routers: social sites tap-jacking and geo-localization attacks
Cybersecurity

Framing attacks on smartphones and dumb routers: social sites tap-jacking and geo-localization attacks

WOOT 2010

Recovering windows secrets and efs certificates offline
Cybersecurity

Recovering windows secrets and efs certificates offline

WOOT 2010

Webseclab security education workbench
Cybersecurity

Webseclab security education workbench

CEST 2010

The emergence of cross channel scripting
Cybersecurity

The emergence of cross channel scripting

CACM 2010

Busting frame busting a study of clickjacking vulnerabilities on popular sites
Cybersecurity

Busting frame busting a study of clickjacking vulnerabilities on popular sites

W2SP 2010

How good are humans at solving captchas a large scale evaluation
Usability

How good are humans at solving captchas a large scale evaluation

S&P 2010

State of the art automated black-box web application vulnerability testing
Cybersecurity

State of the art automated black-box web application vulnerability testing

S&P 2010

Using strategy objectives for network security analysis
Cybersecurity

Using strategy objectives for network security analysis

Inscrypt 2009

Trackback spam abuse and prevention
Anti-Abuse

Trackback spam abuse and prevention

CCSW 2009

Xcs cross channel scripting and its impact on web applications
Cybersecurity

Xcs cross channel scripting and its impact on web applications

CCS 2009

Decaptcha breaking 75% of ebay audio captchas
Anti-Abuse

Decaptcha breaking 75% of ebay audio captchas

WOOT 2009

Extending anticipation games with location penalty and timeline
Cybersecurity

Extending anticipation games with location penalty and timeline

FAST 2008

Netqi a model checker for anticipation game
Cybersecurity

Netqi a model checker for anticipation game

ATVA 2008

Probabilistic protocol identification for hard to classify protocol
Cybersecurity

Probabilistic protocol identification for hard to classify protocol

WISTP 2008

A logical framework for evaluating network resilience against faults and attacks
Cybersecurity

A logical framework for evaluating network resilience against faults and attacks

ASIAN 2007

Time has something to tell us about network address translation
Cybersecurity

Time has something to tell us about network address translation

NordSec 2007

newsletter signup
newsletter signup