Publications
2026
The Distillation Game: Adaptive Attacks & Efficient Defenses
FoGen @ ICML 2026 – Workshop on Foundations of Deep Generative Models
What to Forget in Unlearning? Forget Set Curation for Language Models
FoGen @ ICML 2026 – Workshop on Foundations of Deep Generative Models
2025
Certified Unlearning for Neural Networks
ICML 2025 – International Conference on Machine Learning
Towards Trustworthy Federated Learning with Untrusted Participants
ICML 2025 – International Conference on Machine Learning
The Utility and Complexity of In- and Out-of-Distribution Machine Unlearning
ICLR 2025 – International Conference on Learning Representations
Adaptive Gradient Clipping for Robust Federated Learning
ICLR 2025 – International Conference on Learning Representations (Spotlight)
2024
The Privacy Power of Correlated Noise in Decentralized Learning
ICML 2024 – International Conference on Machine Learning
Robust Sparse Voting
AISTATS 2024 – International Conference on Artificial Intelligence and Statistics
Revisiting Ensembling in One-Shot Federated Learning
NeurIPS 2024 – Conference on Neural Information Processing Systems
Fine-Tuning Personalization in Federated Learning to Mitigate Adversarial Clients
NeurIPS 2024 – Conference on Neural Information Processing Systems
Byzantine-Robust Federated Learning: Impact of Client Subsampling and Local Updates
ICML 2024 – International Conference on Machine Learning
2023
Robust Distributed Learning: Tight Error Bounds and Breakdown Point under Data Heterogeneity
NeurIPS 2023 – Conference on Neural Information Processing Systems (Spotlight)
On the Privacy-Robustness-Utility Trilemma in Distributed Learning
ICML 2023 – International Conference on Machine Learning
Fixing by Mixing: a Recipe for Optimal Byzantine ML under Heterogeneity
AISTATS 2023 – International Conference on Artificial Intelligence and Statistics
2021
Further Results on Latent Discourse Models and Word Embeddings
JMLR 2021 – Journal of Machine Learning Research
Doctoral thesis
The Cost of Trust in Machine Learning: Privacy, Robustness, Unlearning, and their Interactions
EPFL 2025 – Doctoral thesis