Carmela González Troncoso

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

Security system designers favor worst-case security metrics, such as those derived from differential privacy (DP), due to the strong guarantees they provide. On the downside, these guarantees result in a high penalty on the system's performance. In this pa ...

The social demand for email end-to-end encryption is barely supported by mainstream service providers. Autocrypt is a new community -driven open specification for e-mail encryption that attempts to respond to this demand. In Autocrypt the encryption keys a ...

Virtually every connection to an Internet service is preceded by a DNS lookup. Lookups are performed without any traffic-level protection, thus enabling manipulation, redirection, surveillance, and censorship. To address these issues, large organizations s ...

The Domain Name Service (DNS) is ubiquitous in today’s Internet infrastructure. Almost every connection to an Internet service is preceded by a DNS lookup. A vast majority of DNS queries are sent in plaintext. Thus, they reveal information about the connec ...

Crowdsourcing enables application developers to benefit from large and diverse datasets at a low cost. Specifically, mobile crowdsourcing (MCS) leverages users' devices as sensors to perform geo-located data collection. The collection of geo-located data r ...

Our increasing reliance on digital technology for personal, economic, and government affairs has made it essential to secure the communications and devices of private citizens, businesses, and governments. This has led to pervasive use of cryptography acro ...

In this work, we carry out the first, in-depth, privacy analysis of Decentralized Learning-a collaborative machine learning framework aimed at addressing the main limitations of federated learning. We introduce a suite of novel attacks for both passive and ...

The area of privacy preserving machine learning has been of growing importance in practice, which has lead to an increased interest in this topic in both academia and industry. We have witnessed this through numerous papers and systems published and develo ...

As third-party cookie blocking is becoming the norm in mainstream web browsers, advertisers and trackers have started to use first-party cookies for tracking. To understand this phenomenon, we conduct a differential measurement study with versus without th ...

Humanitarian aid-distribution programs help bring physical goods to people in need. Traditional paper-based solutions to support aid distribution do not scale to large populations and are hard to secure. Existing digital solutions solve these issues, at th ...

Zero-knowledge proofs are an essential building block in many privacy-preserving systems. However, implementing these proofs is tedious and error-prone. In this paper, we present zksk, a well-documented Python library for defining and computing sigma proto ...

Humanitarian organizations provide aid to people in need. To use their limited budget efficiently, their distribution processes must ensure that legitimate recipients cannot receive more aid than they are entitled to. Thus, it is essential that recipients ...

We introduce the concept of "universal"password model - a password model that, once pre-trained, can automatically adapt its guessing strategy based on the target system. To achieve this, the model does not need to access any plaintext passwords from the t ...

We introduce a new family of prompt injection attacks, termed Neural Exec. Unlike known attacks that rely on handcrafted strings (e.g., Ignore previous instructions and...), we show that it is possible to conceptualize the creation of execution triggers as ...

There is growing evidence that SARS-CoV-2 can be transmitted beyond close proximity contacts, in particular in closed and crowded environments with insufficient ventilation. To help mitigation efforts, contact tracers need a way to notify those who were pr ...

While digital contact tracing has been extensively studied in Western contexts, its relevance and application in Africa remain largely unexplored. This study focuses on Kenya and Côte d’Ivoire to uncover user perceptions and inform the design of culturally ...

Users rely on ad and tracker blocking tools to protect their privacy. Unfortunately, existing ad and tracker blocking tools are susceptible to mutable advertising and tracking content. In this paper, we first demonstrate that a state-of-the-art ad and trac ...

Humanitarian organizations distribute aid to people affected by armed conflicts or natural disasters. Digitalization has the potential to increase the efficiency and fairness of aid-distribution systems, and recent work by Wang et al. has shown that these ...

One major obstacle to developing precision medicine to its full potential is the privacy concerns related to genomic-data sharing. Even though the academic community has proposed many solutions to protect genomic privacy, these so far have not been adopted ...

Investigative journalists collect large numbers of digital documents during their investigations. These documents can greatly benefit other journalists' work. However, many of these documents contain sensitive information. Hence, possessing such documents ...

Carmela González Troncoso

Chat with Graph Search

Bayes Security: A Not So Average Metric

ClaimChain: Improving the Security and Privacy of In-band Key Distribution for Messaging

Encrypted DNS double right arrow Privacy? A Traffic Analysis Perspective

DNS Privacy not so private: the traffic analysis perspective

On (The Lack Of) Location Privacy in Crowdsourcing Applications

Bugs in our pockets: the risks of client-side scanning

On the (In)security of Peer-to-Peer Decentralized Machine Learning

PPML '19: Privacy Preserving Machine Learning

CookieGraph: Understanding and Detecting First-Party Tracking Cookies

Not Yet Another Digital ID: Privacy-Preserving Humanitarian Aid Distribution

zksk: A Library for Composable Zero-Knowledge Proofs

Janus: Safe Biometric Deduplication for Humanitarian Aid Distribution

Universal Neural-Cracking-Machines: Self-Configurable Password Models from Auxiliary Data

Neural Exec: Learning (and Learning from) Execution Triggers for Prompt Injection Attacks

CrowdNotifier: Decentralized Privacy-Preserving Presence Tracing

Reimagining Wearable-Based Digital Contact Tracing: Insights from Kenya and Côte d’Ivoire

WEBGRAPH: Capturing Advertising and Tracking Information Flows for Robust Blocking

A Low-Cost Privacy-Preserving Digital Wallet for Humanitarian Aid Distribution

GenoShare: Supporting Privacy-Informed Decisions for Sharing Individual-Level Genetic Data

DATASHARENETWORK A Decentralized Privacy-Preserving Search Engine for Investigative Journalists