Jamie Hayes

Soft Instruction De-escalation Defense

The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against LLM Jailbreaks and Prompt Injections

Exploiting Reasoning Patterns in Language Models for Indirect Targeted Poisoning

Exploring the limits of strong membership inference attacks on large language models

Unifying Re-Identification, Attribute Inference, and Data Reconstruction Risks in Differential Privacy

Measuring memorization in RLHF for code completion

Interpreting the Repeated Token Phenomenon in Large Language Models

The Last Iterate Advantage: Empirical Auditing and Principled Heuristic Analysis of Differentially Private SGD

Stealing User Prompts from Mixture-of-Experts Models