@inproceedings {291245,
	author = {Milad Nasr and Jamie Hayes and Thomas Steinke and Borja Balle and Florian Tram{\`e}r and Matthew Jagielski and Nicholas Carlini and Andreas Terzis},
	title = {Tight Auditing of Differentially Private Machine Learning},
	booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
	year = {2023},
	isbn = {978-1-939133-37-3},
	address = {Anaheim, CA},
	pages = {1631--1648},
	url = {https://www.usenix.org/conference/usenixsecurity23/presentation/nasr},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {274574,
	author = {Nicholas Carlini and Florian Tram{\`e}r and Eric Wallace and Matthew Jagielski and Ariel Herbert-Voss and Katherine Lee and Adam Roberts and Tom Brown and Dawn Song and {\'U}lfar Erlingsson and Alina Oprea and Colin Raffel},
	title = {Extracting Training Data from Large Language Models},
	booktitle = {30th USENIX Security Symposium (USENIX Security 21)},
	year = {2021},
	isbn = {978-1-939133-24-3},
	pages = {2633--2650},
	url = {https://www.usenix.org/conference/usenixsecurity21/presentation/carlini-extracting},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {274598,
	author = {Nicholas Carlini},
	title = {Poisoning the Unlabeled Dataset of {Semi-Supervised} Learning},
	booktitle = {30th USENIX Security Symposium (USENIX Security 21)},
	year = {2021},
	isbn = {978-1-939133-24-3},
	pages = {1577--1592},
	url = {https://www.usenix.org/conference/usenixsecurity21/presentation/carlini-poisoning},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {251526,
	author = {Matthew Jagielski and Nicholas Carlini and David Berthelot and Alex Kurakin and Nicolas Papernot},
	title = {High Accuracy and High Fidelity Extraction of Neural Networks},
	booktitle = {29th USENIX Security Symposium (USENIX Security 20)},
	year = {2020},
	isbn = {978-1-939133-17-5},
	pages = {1345--1362},
	url = {https://www.usenix.org/conference/usenixsecurity20/presentation/jagielski},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {236216,
	author = {Nicholas Carlini and Chang Liu and {\'U}lfar Erlingsson and Jernej Kos and Dawn Song},
	title = {The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks},
	booktitle = {28th USENIX Security Symposium (USENIX Security 19)},
	year = {2019},
	isbn = {978-1-939133-06-9},
	address = {Santa Clara, CA},
	pages = {267--284},
	url = {https://www.usenix.org/conference/usenixsecurity19/presentation/carlini},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {206180,
	author = {Warren He and James Wei and Xinyun Chen and Nicholas Carlini and Dawn Song},
	title = {Adversarial Example Defense: Ensembles of Weak Defenses are not Strong},
	booktitle = {11th USENIX Workshop on Offensive Technologies (WOOT 17)},
	year = {2017},
	address = {Vancouver, BC},
	url = {https://www.usenix.org/conference/woot17/workshop-program/presentation/he},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {197215,
	author = {Nicholas Carlini and Pratyush Mishra and Tavish Vaidya and Yuankai Zhang and Micah Sherr and Clay Shields and David Wagner and Wenchao Zhou},
	title = {Hidden Voice Commands},
	booktitle = {25th USENIX Security Symposium (USENIX Security 16)},
	year = {2016},
	isbn = {978-1-931971-32-4},
	address = {Austin, TX},
	pages = {513--530},
	url = {https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/carlini},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {190960,
	author = {Nicholas Carlini and Antonio Barresi and Mathias Payer and David Wagner and Thomas R. Gross},
	title = {{Control-Flow} Bending: On the Effectiveness of {Control-Flow} Integrity},
	booktitle = {24th USENIX Security Symposium (USENIX Security 15)},
	year = {2015},
	isbn = {978-1-939133-11-3},
	address = {Washington, D.C.},
	pages = {161--176},
	url = {https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/carlini},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {184507,
	author = {Nicholas Carlini and David Wagner},
	title = {{ROP} is Still Dangerous: Breaking Modern Defenses},
	booktitle = {23rd USENIX Security Symposium (USENIX Security 14)},
	year = {2014},
	isbn = {978-1-931971-15-7},
	address = {San Diego, CA},
	pages = {385--399},
	url = {https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/carlini},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {179231,
	author = {Eric Kim and Nicholas Carlini and Andrew Chang and George Yiu and Kai Wang and David Wagner},
	title = {Improved Support for Machine-assisted Ballot-level Audits},
	booktitle = {2013 Electronic Voting Technology Workshop/Workshop on Trustworthy Elections (EVT/WOTE 13)},
	year = {2013},
	address = {Washington, D.C.},
	url = {https://www.usenix.org/conference/evtwote13/workshop-program/presentation/kim},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {180206,
	author = {Nicholas Carlini and Adrienne Porter Felt and David Wagner},
	title = {An Evaluation of the Google Chrome Extension Security Architecture},
	booktitle = {21st USENIX Security Symposium (USENIX Security 12)},
	year = {2012},
	isbn = {978-931971-95-9},
	address = {Bellevue, WA},
	pages = {97--111},
	url = {https://www.usenix.org/conference/usenixsecurity12/technical-sessions/presentation/carlini},
	publisher = {USENIX Association},
	month = aug
}
