@inproceedings {287334,
	author = {Shimaa Ahmed and Yash Wani and Ali Shahin Shamsabadi and Mohammad Yaghini and Ilia Shumailov and Nicolas Papernot and Kassem Fawaz},
	title = {Tubes Among Us: Analog Attack on Automatic Speaker Identification},
	booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
	year = {2023},
	isbn = {978-1-939133-37-3},
	address = {Anaheim, CA},
	pages = {265--282},
	url = {https://www.usenix.org/conference/usenixsecurity23/presentation/ahmed-shimaa},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {279996,
	author = {Anvith Thudi and Hengrui Jia and Ilia Shumailov and Nicolas Papernot},
	title = {On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning},
	booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
	year = {2022},
	isbn = {978-1-939133-31-1},
	address = {Boston, MA},
	pages = {4007--4022},
	url = {https://www.usenix.org/conference/usenixsecurity22/presentation/thudi},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {277150,
	author = {Shimaa Ahmed and Ilia Shumailov and Nicolas Papernot and Kassem Fawaz},
	title = {Towards More Robust Keyword Spotting for Voice Assistants},
	booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
	year = {2022},
	isbn = {978-1-939133-31-1},
	address = {Boston, MA},
	pages = {2655--2672},
	url = {https://www.usenix.org/conference/usenixsecurity22/presentation/ahmed},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {272262,
	author = {Hengrui Jia and Christopher A. Choquette-Choo and Varun Chandrasekaran and Nicolas Papernot},
	title = {Entangled Watermarks as a Defense against Model Extraction},
	booktitle = {30th USENIX Security Symposium (USENIX Security 21)},
	year = {2021},
	isbn = {978-1-939133-24-3},
	pages = {1937--1954},
	url = {https://www.usenix.org/conference/usenixsecurity21/presentation/jia},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {251526,
	author = {Matthew Jagielski and Nicholas Carlini and David Berthelot and Alex Kurakin and Nicolas Papernot},
	title = {High Accuracy and High Fidelity Extraction of Neural Networks},
	booktitle = {29th USENIX Security Symposium (USENIX Security 20)},
	year = {2020},
	isbn = {978-1-939133-17-5},
	pages = {1345--1362},
	url = {https://www.usenix.org/conference/usenixsecurity20/presentation/jagielski},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {238162,
	author = {Nicolas Papernot},
	title = {Machine Learning at Scale with Differential Privacy in {TensorFlow}},
	booktitle = {2019 {USENIX} Conference on Privacy Engineering Practice and Respect ({PEPR} 19)},
	year = {2019},
	address = {Santa Clara, CA},
	url = {https://www.usenix.org/node/238163},
	publisher = {USENIX Association},
	month = aug
}
