| Palm 2 technical report R Anil, AM Dai, O Firat, M Johnson, D Lepikhin, A Passos, S Shakeri, ... arXiv preprint arXiv:2305.10403, 2023 | 828 | 2023 |
| Machine unlearning L Bourtoule, V Chandrasekaran, CA Choquette-Choo, H Jia, A Travers, ... 42nd IEEE Symposium on Security and Privacy, 2021 | 498 | 2021 |
| Gemini: a family of highly capable multimodal models G Team, R Anil, S Borgeaud, Y Wu, JB Alayrac, J Yu, R Soricut, ... arXiv preprint arXiv:2312.11805, 2023 | 407 | 2023 |
| Label-Only Membership Inference Attacks CA Choquette-Choo, F Tramer, N Carlini, N Papernot 38th International Conference on Machine Learning, 2021 | 393 | 2021 |
| Entangled watermarks as a defense against model extraction H Jia, CA Choquette-Choo, V Chandrasekaran, N Papernot 30th USENIX security symposium (USENIX Security 21), 1937-1954, 2021 | 212 | 2021 |
| Are aligned neural networks adversarially aligned? N Carlini, M Nasr, CA Choquette-Choo, M Jagielski, I Gao, PWW Koh, ... Advances in Neural Information Processing Systems 36, 2024 | 98 | 2024 |
| Poisoning web-scale training datasets is practical N Carlini, M Jagielski, CA Choquette-Choo, D Paleka, W Pearce, ... arXiv preprint arXiv:2302.10149, 2023 | 82 | 2023 |
| Proof-of-Learning: Definitions and Practice H Jia, M Yaghini, CA Choquette-Choo, N Dullerud, A Thudi, ... 42nd IEEE Symposium on Security and Privacy, 2021 | 75 | 2021 |
| Scalable extraction of training data from (production) language models M Nasr, N Carlini, J Hayase, M Jagielski, AF Cooper, D Ippolito, ... arXiv preprint arXiv:2311.17035, 2023 | 61 | 2023 |
| Preventing Generation of Verbatim Memorization in Language Models Gives a False Sense of Privacy D Ippolito, F Tramèr, M Nasr, C Zhang, M Jagielski, K Lee, CC Choo, ... Proceedings of the 16th International Natural Language Generation Conference …, 2023 | 56* | 2023 |
| CaPC Learning: Confidential and Private Collaborative Learning CA Choquette-Choo, N Dullerud, A Dziedzic, Y Zhang, S Jha, N Papernot, ... 9th International Conference on Learning Representations, 2021 | 55 | 2021 |
| The fundamental price of secure aggregation in differentially private federated learning WN Chen, CAC Choo, P Kairouz, AT Suresh International Conference on Machine Learning, 3056-3089, 2022 | 50 | 2022 |
| Federated learning of gboard language models with differential privacy Z Xu, Y Zhang, G Andrew, CA Choquette-Choo, P Kairouz, HB McMahan, ... arXiv preprint arXiv:2305.18465, 2023 | 35 | 2023 |
| Madlad-400: A multilingual and document-level large audited dataset S Kudugunta, I Caswell, B Zhang, X Garcia, CA Choquette-Choo, K Lee, ... Advances in Neural Information Processing Systems 36, 2024 | 24 | 2024 |
| Gemma: Open models based on gemini research and technology G Team, T Mesnard, C Hardin, R Dadashi, S Bhupatiraju, S Pathak, ... arXiv preprint arXiv:2403.08295, 2024 | 23 | 2024 |
| Multi-epoch matrix factorization mechanisms for private machine learning CA Choquette-Choo, HB McMahan, K Rush, A Thakurta 40th International Conference on Machine Learning 202, 5924-5963, 2023 | 20* | 2023 |
| A Multi-label, Dual-Output Deep Neural Network for Automated Bug Triaging CA Choquette-Choo, D Sheldon, J Proppe, J Alphonso-Gibbs, H Gupta 2019 18th IEEE International Conference On Machine Learning And Applications …, 2019 | 20 | 2019 |
| Privacy side channels in machine learning systems E Debenedetti, G Severi, N Carlini, CA Choquette-Choo, M Jagielski, ... arXiv preprint arXiv:2309.05610, 2023 | 13 | 2023 |
| Proof-of-learning is currently more broken than you think C Fang, H Jia, A Thudi, M Yaghini, CA Choquette-Choo, N Dullerud, ... 2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P), 797-816, 2023 | 13* | 2023 |
| Fine-tuning with differential privacy necessitates an additional hyperparameter search Y Cattan, CA Choquette-Choo, N Papernot, A Thakurta arXiv preprint arXiv:2210.02156, 2022 | 12 | 2022 |
Nicolas PapernotUniversity of Toronto and Vector InstituteVerified email at utoronto.ca
