@inproceedings {291199,
	author = {Nicolas Carlini and Jamie Hayes and Milad Nasr and Matthew Jagielski and Vikash Sehwag and Florian Tram{\`e}r and Borja Balle and Daphne Ippolito and Eric Wallace},
	title = {Extracting Training Data from Diffusion Models},
	booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
	year = {2023},
	isbn = {978-1-939133-37-3},
	address = {Anaheim, CA},
	pages = {5253--5270},
	url = {https://www.usenix.org/conference/usenixsecurity23/presentation/carlini},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {291245,
	author = {Milad Nasr and Jamie Hayes and Thomas Steinke and Borja Balle and Florian Tram{\`e}r and Matthew Jagielski and Nicholas Carlini and Andreas Terzis},
	title = {Tight Auditing of Differentially Private Machine Learning},
	booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
	year = {2023},
	isbn = {978-1-939133-37-3},
	address = {Anaheim, CA},
	pages = {1631--1648},
	url = {https://www.usenix.org/conference/usenixsecurity23/presentation/nasr},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {274574,
	author = {Nicholas Carlini and Florian Tram{\`e}r and Eric Wallace and Matthew Jagielski and Ariel Herbert-Voss and Katherine Lee and Adam Roberts and Tom Brown and Dawn Song and {\'U}lfar Erlingsson and Alina Oprea and Colin Raffel},
	title = {Extracting Training Data from Large Language Models},
	booktitle = {30th USENIX Security Symposium (USENIX Security 21)},
	year = {2021},
	isbn = {978-1-939133-24-3},
	pages = {2633--2650},
	url = {https://www.usenix.org/conference/usenixsecurity21/presentation/carlini-extracting},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {251526,
	author = {Matthew Jagielski and Nicholas Carlini and David Berthelot and Alex Kurakin and Nicolas Papernot},
	title = {High Accuracy and High Fidelity Extraction of Neural Networks},
	booktitle = {29th USENIX Security Symposium (USENIX Security 20)},
	year = {2020},
	isbn = {978-1-939133-17-5},
	pages = {1345--1362},
	url = {https://www.usenix.org/conference/usenixsecurity20/presentation/jagielski},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {236234,
	author = {Ambra Demontis and Marco Melis and Maura Pintor and Matthew Jagielski and Battista Biggio and Alina Oprea and Cristina Nita-Rotaru and Fabio Roli},
	title = {Why Do Adversarial Attacks Transfer? Explaining Transferability of Evasion and Poisoning Attacks},
	booktitle = {28th USENIX Security Symposium (USENIX Security 19)},
	year = {2019},
	isbn = {978-1-939133-06-9},
	address = {Santa Clara, CA},
	pages = {321--338},
	url = {https://www.usenix.org/conference/usenixsecurity19/presentation/demontis},
	publisher = {USENIX Association},
	month = aug
}
