Boris Köpf

Senior Principal Researcher

Publications

View by:

- Principled Design of Indexing Functions for Memory Coloring
  
  Stephan Dübler, Jana Hofmann, Boris Köpf, Stavros Volos
  
  35th USENIX Security Symposium | August 2026
  
  Publication Project
- Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks
  
  Oleksii Oleksenko, Flavien Solt, Cédric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos
  
  2026 IEEE Symposium on Security and Privacy | May 2026
  
  Distinguished Paper Award
  
  Accepted at IEEE SP 2025, publication delayed due to embargo.
  
  Publication Project
- Detecting speculative leaks with compositional semantics
  
  Xaver Fabian, Marco Guarnieri, Boris Köpf, J. Morales, Marco Patrignani, Jan Reineke, Andrés Sánchez
  
  March 2026
  
  Publication
- Optimizing Agent Planning for Security and Autonomy
  
  Aashish Kolluri, Rishi Sharma, Manuel Costa, Boris Köpf, Tobias Niessen, Mark Russinovich, Shruti Tople, Santiago Zanella-Béguelin
  
  ICLR 2026 | February 2026
  
  Publication Preprint Project
- Permissive Information-Flow Analysis for Large Language Models
  
  Shoaib Ahmed Siddiqui, Radhika Gaonkar, Boris Köpf, David Krueger, Andrew Paverd, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Menglin Xia, Santiago Zanella-Béguelin
  
  Transactions on Machine Learning Research (TMLR) | October 2025
  
  Publication Publication Project
- Securing AI Agents with Information-Flow Control
  
  Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  May 2025
  
  DOI Publication Publication Project Project
- Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring
  
  Jana Hofmann, Cédric Fournet, Boris Köpf, Stavros Volos
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  Author's Version Publication Project
- Principled Microarchitectural Isolation on Cloud CPUs
  
  Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  CCS Distinguished Paper Award
  
  Author's Version Publication Project
- Closed-Form Bounds for DP-SGD against Record-level Inference
  
  Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  USENIX Security Symposium | August 2024
  
  Publication Project
- Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions
  
  Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko
  
  Usenix Security Symposium | August 2023
  
  Publication Project
- Bayesian Estimation of Differential Privacy
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Ruehle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
  
  2023 International Conference on Machine Learning | July 2023
  
  Editor(s): Barbara Engelhardt, Emma Brunskill, Kyunghyun Cho
  
  Publication Project
- Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
  
  Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein
  
  IEEE Symposium on Security and Privacy (S&P) | May 2023
  
  Publication Project Project
- SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
  
  Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
  
  2023 IEEE Symposium on Security and Privacy | May 2023
  
  Publication PDF DOI Project
- Revizor: Testing Black-box CPUs against Speculation Contracts
  
  Oleksii Oleksenko, Christof Fetzer, Boris Köpf, Mark Silberstein
  
  27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS '22) | March 2022
  
  IEEE MICRO Top Pick
  
  Author's Version Video Video Github Project
- Grey-box Extraction of Natural Language Models
  
  Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
  
  International Conference on Machine Learning | July 2021
  
  Editor(s): Marina Meila and Tong Zhang
  
  PDF Project
- Hardware-Software Contracts for Secure Speculation
  
  Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila
  
  IEEE Symposium on Security and Privacy | May 2021
  
  Best Paper Award
  
  Publication Project Project
- Analyzing Information Leakage of Updates to Natural Language Models
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Ruehle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
  
  ACM Conference on Computer and Communication Security (CCS) | November 2020
  
  Author's Version Project
- CacheQuery: learning replacement policies from hardware caches
  
  Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
  
  2020 Programming Language Design and Implementation | June 2020
  
  DOI Publication PDF
- Spectector: Principled Detection of Speculative Information Flows
  
  Marco Guarnieri, Boris Köpf, Jose F. Morales, Jan Reineke, Andres Sanchez
  
  IEEE Symposium on Security and Privacy | May 2020
  
  Publication Project Project
- Theory and Practice of Finding Eviction Sets
  
  Pepe Vila, Boris Köpf, José F. Morales
  
  IEEE Symposium on Security and Privacy | May 2019
  
  Publication Project Project
- Loophole: Timing Attacks on Shared Event Loops in Chrome
  
  Pepe Vila, Boris Köpf
  
  USENIX Security Symposium | August 2017
  
  Distinguished paper award
  
  Publication Project
- Rigorous Analysis of Software Countermeasures against Cache Attacks
  
  Goran Doychev, Boris Köpf
  
  ACM SIGPLAN Conference on Programming Language Design and Implementation | June 2017
  
  Publication

- Principled Design of Indexing Functions for Memory Coloring
  
  Stephan Dübler, Jana Hofmann, Boris Köpf, Stavros Volos
  
  35th USENIX Security Symposium | August 2026
  
  Publication Project
- Principled Microarchitectural Isolation on Cloud CPUs
  
  Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  CCS Distinguished Paper Award
  
  Author's Version Publication Project
- Principled Design of Indexing Functions for Memory Coloring
  
  Stephan Dübler, Jana Hofmann, Boris Köpf, Stavros Volos
  
  35th USENIX Security Symposium | August 2026
  
  Publication Project
- Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks
  
  Oleksii Oleksenko, Flavien Solt, Cédric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos
  
  2026 IEEE Symposium on Security and Privacy | May 2026
  
  Distinguished Paper Award
  
  Accepted at IEEE SP 2025, publication delayed due to embargo.
  
  Publication Project
- Detecting speculative leaks with compositional semantics
  
  Xaver Fabian, Marco Guarnieri, Boris Köpf, J. Morales, Marco Patrignani, Jan Reineke, Andrés Sánchez
  
  March 2026
  
  Publication
- Permissive Information-Flow Analysis for Large Language Models
  
  Shoaib Ahmed Siddiqui, Radhika Gaonkar, Boris Köpf, David Krueger, Andrew Paverd, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Menglin Xia, Santiago Zanella-Béguelin
  
  Transactions on Machine Learning Research (TMLR) | October 2025
  
  Publication Publication Project
- Securing AI Agents with Information-Flow Control
  
  Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  May 2025
  
  DOI Publication Publication Project Project
- Principled Microarchitectural Isolation on Cloud CPUs
  
  Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  CCS Distinguished Paper Award
  
  Author's Version Publication Project
- Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring
  
  Jana Hofmann, Cédric Fournet, Boris Köpf, Stavros Volos
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  Author's Version Publication Project
- Closed-Form Bounds for DP-SGD against Record-level Inference
  
  Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  USENIX Security Symposium | August 2024
  
  Publication Project
- Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions
  
  Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko
  
  Usenix Security Symposium | August 2023
  
  Publication Project
- Bayesian Estimation of Differential Privacy
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Ruehle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
  
  2023 International Conference on Machine Learning | July 2023
  
  Editor(s): Barbara Engelhardt, Emma Brunskill, Kyunghyun Cho
  
  Publication Project
- SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
  
  Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
  
  2023 IEEE Symposium on Security and Privacy | May 2023
  
  Publication PDF DOI Project
- Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
  
  Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein
  
  IEEE Symposium on Security and Privacy (S&P) | May 2023
  
  Publication Project Project
- Revizor: Testing Black-box CPUs against Speculation Contracts
  
  Oleksii Oleksenko, Christof Fetzer, Boris Köpf, Mark Silberstein
  
  27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS '22) | March 2022
  
  IEEE MICRO Top Pick
  
  Author's Version Video Video Github Project
- Grey-box Extraction of Natural Language Models
  
  Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
  
  International Conference on Machine Learning | July 2021
  
  Editor(s): Marina Meila and Tong Zhang
  
  PDF Project
- Hardware-Software Contracts for Secure Speculation
  
  Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila
  
  IEEE Symposium on Security and Privacy | May 2021
  
  Best Paper Award
  
  Publication Project Project
- Analyzing Information Leakage of Updates to Natural Language Models
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Ruehle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
  
  ACM Conference on Computer and Communication Security (CCS) | November 2020
  
  Author's Version Project
- CacheQuery: learning replacement policies from hardware caches
  
  Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
  
  2020 Programming Language Design and Implementation | June 2020
  
  DOI Publication PDF
- Spectector: Principled Detection of Speculative Information Flows
  
  Marco Guarnieri, Boris Köpf, Jose F. Morales, Jan Reineke, Andres Sanchez
  
  IEEE Symposium on Security and Privacy | May 2020
  
  Publication Project Project
- Theory and Practice of Finding Eviction Sets
  
  Pepe Vila, Boris Köpf, José F. Morales
  
  IEEE Symposium on Security and Privacy | May 2019
  
  Publication Project Project
- Loophole: Timing Attacks on Shared Event Loops in Chrome
  
  Pepe Vila, Boris Köpf
  
  USENIX Security Symposium | August 2017
  
  Distinguished paper award
  
  Publication Project
- Rigorous Analysis of Software Countermeasures against Cache Attacks
  
  Goran Doychev, Boris Köpf
  
  ACM SIGPLAN Conference on Programming Language Design and Implementation | June 2017
  
  Publication
- Optimizing Agent Planning for Security and Autonomy
  
  Aashish Kolluri, Rishi Sharma, Manuel Costa, Boris Köpf, Tobias Niessen, Mark Russinovich, Shruti Tople, Santiago Zanella-Béguelin
  
  ICLR 2026 | February 2026
  
  Publication Preprint Project
- Permissive Information-Flow Analysis for Large Language Models
  
  Shoaib Ahmed Siddiqui, Radhika Gaonkar, Boris Köpf, David Krueger, Andrew Paverd, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Menglin Xia, Santiago Zanella-Béguelin
  
  Transactions on Machine Learning Research (TMLR) | October 2025
  
  Publication Publication Project
- Securing AI Agents with Information-Flow Control
  
  Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  May 2025
  
  DOI Publication Publication Project Project
- Closed-Form Bounds for DP-SGD against Record-level Inference
  
  Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  USENIX Security Symposium | August 2024
  
  Publication Project
- Bayesian Estimation of Differential Privacy
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Ruehle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
  
  2023 International Conference on Machine Learning | July 2023
  
  Editor(s): Barbara Engelhardt, Emma Brunskill, Kyunghyun Cho
  
  Publication Project
- SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
  
  Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
  
  2023 IEEE Symposium on Security and Privacy | May 2023
  
  Publication PDF DOI Project
- Grey-box Extraction of Natural Language Models
  
  Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
  
  International Conference on Machine Learning | July 2021
  
  Editor(s): Marina Meila and Tong Zhang
  
  PDF Project
- Analyzing Information Leakage of Updates to Natural Language Models
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Ruehle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
  
  ACM Conference on Computer and Communication Security (CCS) | November 2020
  
  Author's Version Project
- CacheQuery: learning replacement policies from hardware caches
  
  Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
  
  2020 Programming Language Design and Implementation | June 2020
  
  DOI Publication PDF
- Principled Microarchitectural Isolation on Cloud CPUs
  
  Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  CCS Distinguished Paper Award
  
  Author's Version Publication Project
- Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions
  
  Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko
  
  Usenix Security Symposium | August 2023
  
  Publication Project
- Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
  
  Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein
  
  IEEE Symposium on Security and Privacy (S&P) | May 2023
  
  Publication Project Project
- Revizor: Testing Black-box CPUs against Speculation Contracts
  
  Oleksii Oleksenko, Christof Fetzer, Boris Köpf, Mark Silberstein
  
  27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS '22) | March 2022
  
  IEEE MICRO Top Pick
  
  Author's Version Video Video Github Project
- Hardware-Software Contracts for Secure Speculation
  
  Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila
  
  IEEE Symposium on Security and Privacy | May 2021
  
  Best Paper Award
  
  Publication Project Project
- CacheQuery: learning replacement policies from hardware caches
  
  Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
  
  2020 Programming Language Design and Implementation | June 2020
  
  DOI Publication PDF
- Rigorous Analysis of Software Countermeasures against Cache Attacks
  
  Goran Doychev, Boris Köpf
  
  ACM SIGPLAN Conference on Programming Language Design and Implementation | June 2017
  
  Publication

- Principled Design of Indexing Functions for Memory Coloring
  
  Stephan Dübler, Jana Hofmann, Boris Köpf, Stavros Volos
  
  35th USENIX Security Symposium | August 2026
  
  Publication Project
- Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks
  
  Oleksii Oleksenko, Flavien Solt, Cédric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos
  
  2026 IEEE Symposium on Security and Privacy | May 2026
  
  Distinguished Paper Award
  
  Accepted at IEEE SP 2025, publication delayed due to embargo.
  
  Publication Project
- Optimizing Agent Planning for Security and Autonomy
  
  Aashish Kolluri, Rishi Sharma, Manuel Costa, Boris Köpf, Tobias Niessen, Mark Russinovich, Shruti Tople, Santiago Zanella-Béguelin
  
  ICLR 2026 | February 2026
  
  Publication Preprint Project
- Principled Microarchitectural Isolation on Cloud CPUs
  
  Stavros Volos, Cédric Fournet, Jana Hofmann, Boris Köpf, Oleksii Oleksenko
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  CCS Distinguished Paper Award
  
  Author's Version Publication Project
- Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring
  
  Jana Hofmann, Cédric Fournet, Boris Köpf, Stavros Volos
  
  ACM Conference on Computer and Communications Security (CCS) | October 2024
  
  Author's Version Publication Project
- Closed-Form Bounds for DP-SGD against Record-level Inference
  
  Giovanni Cherubin, Boris Köpf, Andrew Paverd, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  USENIX Security Symposium | August 2024
  
  Publication Project
- Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions
  
  Jana Hofmann, Emanuele Vannacci, Cédric Fournet, Boris Köpf, Oleksii Oleksenko
  
  Usenix Security Symposium | August 2023
  
  Publication Project
- Bayesian Estimation of Differential Privacy
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Ahmed Salem, Victor Ruehle, Andrew Paverd, Mohammad Naseri, Boris Köpf, Daniel Jones
  
  2023 International Conference on Machine Learning | July 2023
  
  Editor(s): Barbara Engelhardt, Emma Brunskill, Kyunghyun Cho
  
  Publication Project
- SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
  
  Ahmed Salem, Giovanni Cherubin, David Evans, Boris Köpf, Andrew Paverd, Anshuman Suri, Shruti Tople, Santiago Zanella-Béguelin
  
  2023 IEEE Symposium on Security and Privacy | May 2023
  
  Publication PDF DOI Project
- Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
  
  Oleksii Oleksenko, Marco Guarnieri, Boris Köpf, Mark Silberstein
  
  IEEE Symposium on Security and Privacy (S&P) | May 2023
  
  Publication Project Project
- Revizor: Testing Black-box CPUs against Speculation Contracts
  
  Oleksii Oleksenko, Christof Fetzer, Boris Köpf, Mark Silberstein
  
  27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS '22) | March 2022
  
  IEEE MICRO Top Pick
  
  Author's Version Video Video Github Project
- Grey-box Extraction of Natural Language Models
  
  Santiago Zanella-Béguelin, Shruti Tople, Andrew Paverd, Boris Köpf
  
  International Conference on Machine Learning | July 2021
  
  Editor(s): Marina Meila and Tong Zhang
  
  PDF Project
- Hardware-Software Contracts for Secure Speculation
  
  Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila
  
  IEEE Symposium on Security and Privacy | May 2021
  
  Best Paper Award
  
  Publication Project Project
- Analyzing Information Leakage of Updates to Natural Language Models
  
  Santiago Zanella-Béguelin, Lukas Wutschitz, Shruti Tople, Victor Ruehle, Andrew Paverd, Olga Ohrimenko, Boris Köpf, Marc Brockschmidt
  
  ACM Conference on Computer and Communication Security (CCS) | November 2020
  
  Author's Version Project
- CacheQuery: learning replacement policies from hardware caches
  
  Pepe Vila, Pierre Ganty, Marco Guarnieri, Boris Köpf
  
  2020 Programming Language Design and Implementation | June 2020
  
  DOI Publication PDF
- Spectector: Principled Detection of Speculative Information Flows
  
  Marco Guarnieri, Boris Köpf, Jose F. Morales, Jan Reineke, Andres Sanchez
  
  IEEE Symposium on Security and Privacy | May 2020
  
  Publication Project Project
- Theory and Practice of Finding Eviction Sets
  
  Pepe Vila, Boris Köpf, José F. Morales
  
  IEEE Symposium on Security and Privacy | May 2019
  
  Publication Project Project
- Loophole: Timing Attacks on Shared Event Loops in Chrome
  
  Pepe Vila, Boris Köpf
  
  USENIX Security Symposium | August 2017
  
  Distinguished paper award
  
  Publication Project
- Rigorous Analysis of Software Countermeasures against Cache Attacks
  
  Goran Doychev, Boris Köpf
  
  ACM SIGPLAN Conference on Programming Language Design and Implementation | June 2017
  
  Publication
- Detecting speculative leaks with compositional semantics
  
  Xaver Fabian, Marco Guarnieri, Boris Köpf, J. Morales, Marco Patrignani, Jan Reineke, Andrés Sánchez
  
  March 2026
  
  Publication
- Securing AI Agents with Information-Flow Control
  
  Manuel Costa, Boris Köpf, Aashish Kolluri, Andrew Paverd, Mark Russinovich, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Santiago Zanella-Béguelin
  
  May 2025
  
  DOI Publication Publication Project Project
- Permissive Information-Flow Analysis for Large Language Models
  
  Shoaib Ahmed Siddiqui, Radhika Gaonkar, Boris Köpf, David Krueger, Andrew Paverd, Ahmed Salem, Shruti Tople, Lukas Wutschitz, Menglin Xia, Santiago Zanella-Béguelin
  
  Transactions on Machine Learning Research (TMLR) | October 2025
  
  Publication Publication Project

Boris Köpf

Publications

Principled Design of Indexing Functions for Memory Coloring

Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks

Detecting speculative leaks with compositional semantics

Optimizing Agent Planning for Security and Autonomy

Permissive Information-Flow Analysis for Large Language Models

Securing AI Agents with Information-Flow Control

Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring

Principled Microarchitectural Isolation on Cloud CPUs

Closed-Form Bounds for DP-SGD against Record-level Inference

Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions

Bayesian Estimation of Differential Privacy

Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing

SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning

Revizor: Testing Black-box CPUs against Speculation Contracts

Grey-box Extraction of Natural Language Models

Hardware-Software Contracts for Secure Speculation

Analyzing Information Leakage of Updates to Natural Language Models

CacheQuery: learning replacement policies from hardware caches

Spectector: Principled Detection of Speculative Information Flows

Theory and Practice of Finding Eviction Sets

Loophole: Timing Attacks on Shared Event Loops in Chrome

Rigorous Analysis of Software Countermeasures against Cache Attacks

Principled Design of Indexing Functions for Memory Coloring

Principled Microarchitectural Isolation on Cloud CPUs

Principled Design of Indexing Functions for Memory Coloring

Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks

Detecting speculative leaks with compositional semantics

Permissive Information-Flow Analysis for Large Language Models

Securing AI Agents with Information-Flow Control

Principled Microarchitectural Isolation on Cloud CPUs

Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring

Closed-Form Bounds for DP-SGD against Record-level Inference

Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions

Bayesian Estimation of Differential Privacy

SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning

Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing

Revizor: Testing Black-box CPUs against Speculation Contracts

Grey-box Extraction of Natural Language Models

Hardware-Software Contracts for Secure Speculation

Analyzing Information Leakage of Updates to Natural Language Models

CacheQuery: learning replacement policies from hardware caches

Spectector: Principled Detection of Speculative Information Flows

Theory and Practice of Finding Eviction Sets

Loophole: Timing Attacks on Shared Event Loops in Chrome

Rigorous Analysis of Software Countermeasures against Cache Attacks

Optimizing Agent Planning for Security and Autonomy

Permissive Information-Flow Analysis for Large Language Models

Securing AI Agents with Information-Flow Control

Closed-Form Bounds for DP-SGD against Record-level Inference

Bayesian Estimation of Differential Privacy

SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning

Grey-box Extraction of Natural Language Models

Analyzing Information Leakage of Updates to Natural Language Models

CacheQuery: learning replacement policies from hardware caches

Principled Microarchitectural Isolation on Cloud CPUs

Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions

Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing

Revizor: Testing Black-box CPUs against Speculation Contracts

Hardware-Software Contracts for Secure Speculation

CacheQuery: learning replacement policies from hardware caches

Rigorous Analysis of Software Countermeasures against Cache Attacks

Principled Design of Indexing Functions for Memory Coloring

Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks

Optimizing Agent Planning for Security and Autonomy

Principled Microarchitectural Isolation on Cloud CPUs

Gaussian Elimination of Side-channels: Linear Algebra for Memory Coloring

Closed-Form Bounds for DP-SGD against Record-level Inference

Speculation at Fault: Modeling and Testing Microarchitectural Leakage of CPU Exceptions

Bayesian Estimation of Differential Privacy

SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning

Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing

Revizor: Testing Black-box CPUs against Speculation Contracts

Grey-box Extraction of Natural Language Models

Hardware-Software Contracts for Secure Speculation

Analyzing Information Leakage of Updates to Natural Language Models

CacheQuery: learning replacement policies from hardware caches

Spectector: Principled Detection of Speculative Information Flows

Theory and Practice of Finding Eviction Sets