Teaching

Classes

Privacy Enhancing Technologies

Fall 2025, Fall 2024

Large Language Models

Spring 2025, Spring 2024, Spring 2023

Information Security Lab

Fall 2025, Fall 2023, Fall 2022

Student projects

If you’re interested in a semester project or thesis please fill in the form matching your status:

With ETH Zurich account
Incoming students without an ETH Zurich account (e.g., exchange)

Please include a copy of your CV, latest transcripts, and a short description of your interests.

Past projects

This is a complete list of previous Master and Bachelor theses at our lab:

2024

Jakub Łucki. An Adversarial Perspective on Machine Unlearning for AI Safety. SoLaR Workshop @ NeurIPS 2024, Best Paper Award.
Lorenzo Rossi. Membership Inference Attacks on Sequence Models. DLSP workshop @ IEEE S&P 2025, Best Paper Award.
Robert Hönig. Adversarial Perturbations Cannot Reliably Protect Artists From Generative AI. ICLR 2025 (Spotlight).
Fredrik Nestaas. Adversarial Search Engine Optimization for Large Language Models. ICLR 2025.
Thomas Baumann. Universal Jailbreak Backdoors in Large Language Model Alignment. SafeGenAI Workshop @ NeurIPS 2024.
Oscar Obeso. Refusal in Language Models Is Mediated by a Single Direction. NeurIPS 2024.

2023

Shanglun Feng. Privacy Backdoors: Stealing Data with Corrupted Pretrained Models. ICML 2024.
Javi Rando. Universal Jailbreak Backdoors from Poisoned Human Feedback. ICLR 2024.
Lukas Fluri. Evaluating Superhuman Models with Consistency Checks. SaTML 2024.

Other student projects that resulted in papers are listed on our publications page.