Notable Work
Harvey
Building Harvey’s MCP Policy Engine
How Harvey Secures Embeddings at Scale (Blog Post)
Trail of Bits
Weaponizing Image Scaling Against Production AI Systems
- Blog Post
- GitHub Repository
- Covered by The Register, Wired Italy, Risky Business, Bleeding Computer, HackRead, BGR, etc.
- Black Hat Europe, BSides Berlin, Best Multimodal Build at AI Tinkerers NYC Demopalooza, Insecure Agents (Presented by Kikimora Morozova)
Hijacking Multi-agent Systems in Your PajaMAS
Incubated Machine Learning Exploits: Backdooring ML Pipelines Using Input-Handling Bugs
- DEFCON 32 (Slides)
- HOPE XV
- BSides Las Vegas
- Invited Talk for the NVIDIA Security Team
Lightweight Design Review of the 6079 Proof-of-Inference Protocol (Public Report)
Meta WhatsApp Private Processing Security Assessment (Public Report)
EZKL Security Assessment (Public Report)
Sleepy Pickle: Hybrid ML Exploit Chaining Pickle Insecurity and Model Backdoors
- Note: Contributor to the initial Sleepy Pickle PoC
- Blog post
Relishing New Fickling Features for Securing ML Systems
ML File Formats Collection (GitHub Repository)
Awesome ML Security (GitHub Repository)
MLFiles - Using Input-Handling Bugs to Inject Backdoors Into Machine Learning Pipelines
Assessing the Security Posture of a Widely Used Vision Model: YOLOv7
Safetensors Security Assessment
Secure Your Machine Learning with Semgrep
DEF CON 30 AI Village: Panel: The Use of AI/ML in Offensive Security Operations.
ToB Podcast Episode: W/Internships
ZCoin Lelantus Security Assessment (Public Report)
Never a Dill Moment: Exploiting Machine Learning Pickle Files
PrivacyRaven: Comprehensive Privacy Testing for Deep Learning
RoboJackets
Multiclass Semantic Segmentation for Autonomous Vehicle Perception
NYU CCS
COPPTCHA: COPPA Tracking by Checking Hardware-Level Activity
- IEEE Transactions on Information Forensics and Security (Paper)
- Invited Talk for the NSA Board of Directors
A New Method for the Exploitation of Speech Recognition Systems
- Invited Talk for the NSA Research Directorate
- Fall 2019 Computational Cybersecurity for Compromised Environments Workshop Poster