The Curious Engineer

All blogs / Security

Elie on AI and Cybersecurity

elie.net

In-depth blog posts about Google security, Research at Google, and cybersecurity in general.

SecurityAI / ML

’10’15’20’25
Posts
112 from 30 Sep 2007 to 27 Oct 2026
Posting
monthly (6 in the last year)
Kind
personal blog
Feed
https://feeds.feedburner.com/inftoint

2026 4

  1. Taming AI Agents with Capsem: Hardware Sandboxing That Doesn’t Kill Productivity
  2. Facade: High-Precision Insider Threat Detection Using Deep Contextual Anomaly Detection
  3. ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?
  4. Profiling Resilient to Change in Probe Position | arXiv preprint publication

2025 9

  1. DROIDCCT: Cryptographic Compliance Test via Trillion-Scale Measurement
  2. Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks
  3. Integrating Large Language Models into Security Incident Response
  4. FACADE High-Precision Insider Threat Detection Using Contrastive Learning
  5. Autonomous Timeline Analysis and Threat Hunting
  6. Supporting the Digital Safety of At-Risk Users: Lessons Learned from 9+ Years of Research and Training
  7. Supporting Human Raters with the Detection of Harmful Content Using Large Language Models
  8. Magika: AI-Powered Content-Type Detection
  9. AI Toward Secure & Trustworthy AI: Independent Benchmarking talks InCyber Forum 2025

2024 9

  1. AI Security: Top 5 Recommendations To Get Started Today | Google DevFest talk
  2. AI AI for Cybersecurity: Get Started Today talks Sectember AI 2024
  3. Generalized Power Attacks against Crypto Hardware using Long-Range Deep Learning | Cryptographic Hardware and Embedded Systems publication
  4. Imagen 3 | Google DeepMind team technical report publication
  5. Leveraging Virtual Reality to Enhance Diversity and Inclusion training at Google | Conference on Human Factors in Computing Systems publication
  6. Lessons Learned from Developing Secure AI Workflows at Google | RSA talk
  7. RETSim: Resilient and Efficient Text Similarity | International Conference on Learning Representations publication
  8. How Large Language Models Are Reshaping the Cybersecurity Landscape | RSA talk
  9. Gemini 1.5: Unlocking multimodal understanding across millions of tokens of context | Google DeepMind team technical report publication

2023 4

  1. Identifying and Mitigating the Security Risks of Generative AI | Foundations and Trends in Privacy and Security publication
  2. RETVec: Resilient and Efficient Text Vectorizer | Neural Information Processing Systems publication
  3. Hybrid Post-Quantum Signatures in Hardware Security Keys | International Conference on Applied Cryptography and Network Security publication
  4. How AI helps keeping Gmail inboxes malware free | International Cybersecurity Forum talk

2022 2

  1. Building Safe End-to-End Encrypted Services for Business - a Google Workspace perspective | RSA talk
  2. It's common and a part of being a content creator: Understanding How Creators Experience and Cope with Hate and Harassment Online | Conference on Human Factors in Computing Systems publication

2021 4

  1. Deep-Cryptanalysis - Fashion or Revolution? | Workshop on Attacks in Cryptography talk
  2. Why wouldn't someone think of democracy as a target? Security practices & challenges of people involved with U.S. political campaigns" | Usenix Security publication
  3. Designing Toxic Content Classification for a Diversity of Perspectives | SOUPS publication
  4. SoK: Hate, Harassment, and the Changing Landscape of Online Abuse | Security and Privacy publication

2020 6

  1. Spotlight: Malware Lead Generation At Scale | Proceedings of Annual Computer Security Applications Conference publication
  2. Who is targeted by email-based phishing and malware? Measuring factors that differentiate risk | Internet Measurement Conference publication
  3. A Hacker’s guide to reducing side-channel attack surfaces using deep-learning | Defcon 28 & Black Hat USA talk
  4. CoinPolice: Detecting Hidden Cryptojacking Attacks with Neural Networks | arXiv preprint publication
  5. Malicious Documents Emerging Trends: A Gmail Perspective | RSA talk
  6. Account protections - A Google Perspective | International Cybersecurity Forum talk

2019 8

  1. Five years of the Right to Be Forgotten | Computer and Communications Security publication
  2. Protecting accounts from credential stuffing with password breach alerting | Proceedings of the USENIX Security Symposium publication
  3. A Hacker Guide To Deep Learning Based Side Channel Attacks | Defcon 27 talk
  4. Deconstructing the Phishing Campaigns that Target Gmail Users | Black Hat USA talk
  5. Rethinking the detection of child sexual abuse imagery on the Internet | World Wide Web publication
  6. Cutting Edge TensorFlow - Keras Tuner: hypertuning for humans | Google IO talk
  7. They Don't Leave Us Alone Anywhere We Go - Gender and Digital Abuse in South Asia | CHI Conference on Human Factors in Computing Systems publication
  8. Rethinking how to detect child sexual abuse imagery on the Internet | Enigma talk

2018 3

  1. Data Breaches: User Comprehension, Expectations, and Concerns with Handling Exposed Data | Symposium on Usable Security and Privacy publication
  2. Tracking desktop ransomware payments end to end | Security and Privacy publication
  3. How to successfully harness AI to combat fraud and abuse | RSA talk

2017 10

  1. Hunting down Gooligan — retrospective analysis | Botconf talk
  2. Data Breaches, Phishing, or Malware? Understanding the Risks of Stolen Credentials | Computer and Communications Security publication
  3. The first collision for full SHA-1 | Crypto publication
  4. Understanding the Mirai Botnet | Usenix Security publication
  5. Attacking encrypted USB keys the hard(ware) way | Black Hat USA talk
  6. How we created the first SHA-1 collision and what it means for hash security | Black Hat USA & Defcon 25 talk
  7. Tracking ransomware payments end to end | Black Hat USA talk
  8. Pinning Down Abuse on Google Maps | World Wide Web publication
  9. The Security Impact of HTTPS Interception | Network and Distributed Systems Symposium publication
  10. Targeted Attack Against Corporate Inboxes A Gmail Perspective | RSA talk

2016 11

  1. Picasso: Lightweight Device Class Fingerprinting for Web Clients | Workshop on Security and Privacy in Smartphones and Mobile Devices publication
  2. I am a legend hacking hearthstone using statistical learning methods | Computational Intelligence and Games conference publication
  3. The Abuse Sharing Economy: Understanding the Limits of Threat Exchanges | Research in Attacks, Intrusions, and Defenses publication
  4. Investigating commercial pay-per-install and the distribution of unwanted software | Usenix Security publication
  5. Cheating at poker - James Bond Style | Defcon 24 talk
  6. Does dropping usb drives really work? | Black Hat USA talk
  7. Cloak of visibility: detecting when machines browse a different web | Security and Privacy publication
  8. Learn web security with Google | Google IO talk
  9. Remedying web hijacking notification effectiveness and webmaster comprehension | Word Wide Web publication
  10. Users really do plug in usb drives they find | Security and Privacy publication
  11. Lessons learned while protecting Gmail | Enigma first edition talk

2015 4

  1. Neither snow nor rain nor mitm . . . an empirical analysis of email delivery security | IMC publication
  2. Framing dependencies introduced by underground commoditization | Workshop on Economics of Information Security publication
  3. Secrets, lies, and account recovery: lessons from the use of personal knowledge questions at google | 22nd international conference on World Wide Web publication
  4. Ad injection at scale: assessing deceptive advertisement modifications | Security and Privacy publication

2014 7

  1. Handcrafted fraud and extortion: manual account hijacking in the wild | Internet Measurement Conference publication
  2. Dialing back abuse on phone verified accounts | Conference on Computer and Communications Security publication
  3. The end is nigh: generic solving of text-based captchas | Workshop on Offensive Technology publication
  4. I am a legend: hacking hearthstone with machine learning | Defcon 22 talk
  5. Cloak and swagger: understanding data sensitivity through the lens of user anonymity | Security And Privacy publication
  6. Easy does it: more usable captchas | Conference on Human Factors in Computing Systems publication
  7. Online microsurveys for user experience research | Human Factors in Computing Systems publication

2012 3

  1. Fuzzing online games | Defcon 20 talk
  2. Sessionjuggler secure web login from an untrusted terminal using session hijacking | World Wide Web publication
  3. The Art of Breaking and Designing CAPTCHAS | RSA talk

2011 6

  1. Text-based captcha strengths and weaknesses | Computer and Communications Security publication
  2. Reclaiming the blogosphere talkback a secure linkback protocol for weblogs | European Symposium on Research in Computer Security publication
  3. Towards secure embedded web interfaces | Usenix Security publication
  4. Beyond files recovery owade cloud-based forensic | Black Hat USA talk
  5. Openconflict preventing real time map hacks in online games | Security and Privacy publication
  6. The failure of noise-based non-continuous audio captchas | Security and Privacy publication

2010 11

  1. Kamouflage loss-resistant password management | European Symposium On Research In Computer Security publication
  2. Webseclab security education workbench | Cyber Security Experimentation and Test publication
  3. An analysis of private browsing modes in modern browsers | Usenix Security publication
  4. Framing attacks on smartphones and dumb routers: social sites tap-jacking and geo-localization attacks | Workshop On Offensive Technologies publication
  5. Recovering windows secrets and efs certificates offline | Workshop On Offensive Technologies publication
  6. Kartograph | Defcon 18 talk
  7. Bad memories | Black Hat USA / Defcon 18 talk
  8. Busting frame busting a study of clickjacking vulnerabilities on popular sites | Web 2.0 Security and Privacy publication
  9. How good are humans at solving captchas a large scale evaluation | Security and Privacy publication
  10. State of the art automated black-box web application vulnerability testing | Security and Privacy publication
  11. Reversing dpapi and stealing windows secrets offline | Black Hat DC talk

2009 5

  1. Using strategy objectives for network security analysis | 5th China International Conference on Information Security and Cryptology publication
  2. Trackback spam abuse and prevention | Cloud Computing Security Workshop publication
  3. Xcs cross channel scripting and its impact on web applications | Computer and Communications Security publication
  4. Decaptcha breaking 75% of ebay audio captchas | 3rd USENIX Workshop On Offensive Technologies publication
  5. Embedded management interfaces emerging massive insecurity | Black Hat USA talk

2008 3

  1. Extending anticipation games with location penalty and timeline | Revised Selected Papers of the 5th International Workshop on Formal Aspects in Security and Trust publication
  2. Netqi a model checker for anticipation game | 6th International Symposium on Automated Technology for Verification and Analysis publication
  3. Probabilistic protocol identification for hard to classify protocol | 2nd International Workshop on Information Security Theory and Practices publication

2007 2

  1. A logical framework for evaluating network resilience against faults and attacks | 12th Asian Computing Science Conference publication
  2. Time has something to tell us about network address translation | 12th Nordic Workshop on Secure IT Systems publication

Undated 1

  1. The emergence of cross channel scripting | Communications of the ACM Journal publication