Skip to content

Author

Florian Tramèr

We have 4 of 53 papers

We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.

Not the right person? Other researchers publish under this name.

#artificial intelligence Preprint Sep 2026

Calibrating One-Round Membership Inference with Neighbors

A key observation is that reference models serve only to reveal how an example behaves under models not trained on it, and that querying the target model on nearby samples yields the same information, and that querying the target model on nearby samples yields the same information.

Francesco Rita, Jie Zhang, Florian Tramèr · 0 citations
#artificial intelligence Preprint Sep 2026

Render Before Reading: Visual Rendering as a Prompt Injection Defense

This paper studies the role played by the adversarial data's input modality, and identifies a systematic asymmetry: multimodal LLMs are more likely to follow adversarial instruction when they appear as text than when the same instruction is delivered through a non-textual channel.

Jie Zhang, Andrei Baroian, J. V. van Rijn et al. · 0 citations

Jailbreaking Jailbreaks: A Proactive Defense for LLMs

P RO A CT represents an orthogonal defense strategy that serves as an additional guardrail to enhance LLM safety against the most effective attacks.

Wei-Liang Zhao, Daniel Ben-Levi, Jinjun Peng et al. · 1 citation
Jul 2026

Untrusted Content Masking for Web Agents with Security Guarantees

This paper presents Untrusted Content Masking (UCM), a simple and effective approach that restores the trust boundary in web environments by leveraging a key structural insight: a webpage's Document Object Model encodes sufficient information to distinguish trusted from untrusted regions without reading their content.

Kristina Nikoli'c, Egor Zverev, Javier Rando et al. · 2 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.