Publications

International Conferences and Workshops

1. PETS’27

   Online Safety Regulation Increases Privacy Risk: Evidence from the UK Online Safety Act

   Dhyey Mehta, Eldar Jalilzade,  Maksim Kalameyets and 5 more authors

   To appear in the Privacy Enhancing Technologies Symposium (PETS) 2027

   Bib

   @article{MehtaJKOJASE27,
     journal = {To appear in the Privacy Enhancing Technologies Symposium (PETS)},
     author = {Mehta, Dhyey and Jalilzade, Eldar and Kalameyets, Maksim and Owens, Rebecca and Juarez, Marc and Aidinlis, Stergios and Shi, Lei and Elmas, Tu{\u{g}}rulcan},
     title = {Online Safety Regulation Increases Privacy Risk: Evidence from the UK Online Safety Act},
     year = {2027}
   }

2. NeurIPS’26

   FARE: Forensic Acceptance Region Estimation for Catching Bait-and-Switch Image Generators

   Kai Yao,  and Marc Juarez

   To appear in the 40th Annual Conference on Neural Information Processing Systems (NeurIPS), 2026

   Bib PDF Code

   @inproceedings{YaoJ26Neurips,
     booktitle = {To appear in the 40th Annual Conference on Neural Information Processing Systems (NeurIPS)},
     author = {Yao, Kai and Juarez, Marc},
     title = {FARE: Forensic Acceptance Region Estimation for Catching Bait-and-Switch Image Generators},
     publisher = {Curran Associates, Inc.},
     year = {2026}
   }

3. AISec’26

   What Breaks Local Watermarks? A Robustness Benchmark for Local Invisible Image Watermarking

   Kai Yao, Bence Szilagyi,  Sebestyén Kamp and 4 more authors

   To appear in ACM Workshop on Artificial Intelligence and Security (AISec’26), 2026

   Bib PDF Code

   @inproceedings{YaoSKPSZJ26,
     booktitle = {To appear in ACM Workshop on Artificial Intelligence and Security (AISec'26)},
     author = {Yao, Kai and Szilagyi, Bence and Kamp, Sebesty{\'e}n and Poor, Mate and Szilveszter, M{\'a}t{\'e} and Zsoldos, Matyas K. and Juarez, Marc},
     title = {What Breaks Local Watermarks? A Robustness Benchmark for Local Invisible Image Watermarking},
     publisher = {ACM},
     year = {2026}
   }

4. JNCA’26

   The attention leak: Behavioral inference from temporal metadata in network traffic

   Alejandro Donaire, Carlos Borrego,  and Marc Juarez

   Journal of Network and Computer Applications 2026

   Bib PDF Code

   @article{DonaireBJ26,
     journal = {Journal of Network and Computer Applications},
     author = {Donaire, Alejandro and Borrego, Carlos and Juarez, Marc},
     title = {The attention leak: Behavioral inference from temporal metadata in network traffic},
     pages = {104560},
     year = {2026},
     publisher = {Elsevier}
   }

5. CCS’26

   Brewing Under Pressure: More Realistic Tor Flow Correlation Considering Low FPRs

   Haeseung Jeon, Yeonseo Cho,  Nate Mathews and 3 more authors

   To appear in the ACM Conference on Computer and Communications Security (CCS’26), 2026

   Bib PDF Code

   @inproceedings{J26,
     booktitle = {To appear in the ACM Conference on Computer and Communications Security (CCS'26)},
     author = {Jeon, Haeseung and Cho, Yeonseo and Mathews, Nate and Jansen, Rob and Juarez, Marc and Oh, Se Eun},
     title = {Brewing Under Pressure: More Realistic Tor Flow Correlation
     Considering Low FPRs},
     publisher = {ACM},
     year = {2026}
   }

6. SATML’26

   Smudged Fingerprints: A Systematic Evaluation of the Robustness of AI Image Fingerprints

   Kai Yao,  and Marc Juarez

   In the Proceedings of the IEEE Conference on Secure and Trustworthy Machine Learning (SaTML’26), 2026

   Bib PDF Code

   @inproceedings{YaoJ26,
     booktitle = {In the Proceedings of the IEEE Conference on Secure and Trustworthy Machine Learning (SaTML'26)},
     author = {Yao, Kai and Juarez, Marc},
     title = {Smudged Fingerprints: A Systematic Evaluation of the Robustness of AI Image Fingerprints},
     publisher = {IEEE},
     year = {2026}
   }

7. PhilTransRSA’26

   Can model attribution bridge AI’s accountability gap in safety-critical domains?

   Marc Juarez

   Philosophical Transactions of the Royal Society A Mathematical Physical and Engineering Sciences 2026

   Bib PDF

   @article{Juarez26,
     journal = {Philosophical Transactions of the Royal Society A Mathematical Physical and Engineering Sciences},
     author = {Juarez, Marc},
     title = {Can model attribution bridge AI's accountability gap in safety-critical domains?},
     year = {2026},
     pages = {1-13}
   }

8. AutoCyber’25

   Adversarial Evasion Against Autonomous Cyber Defence Agents

   Melanie Meijer, Sanyam Vyas,  Vasilios Mavroudis and 1 more author

   European Symposium on Research in Computer Security, 2025

   Bib PDF

   @inproceedings{MeijerVMJ2025,
     title = {Adversarial Evasion Against Autonomous Cyber Defence Agents},
     author = {Meijer, Melanie and Vyas, Sanyam and Mavroudis, Vasilios and Juarez, Marc},
     booktitle = {European Symposium on Research in Computer Security},
     pages = {19--38},
     year = {2025},
     organization = {Springer}
   }

9. USENIX’25

   A Crack in the Bark: Leveraging Public Knowledge to Remove Tree-Ring Watermarks

   Junhua Lin,  and Marc Juarez

   USENIX Security Symposium, 2025

   Bib PDF Code

   @inproceedings{LinJ25,
     booktitle = {USENIX Security Symposium},
     author = {Lin, Junhua and Juarez, Marc},
     title = {A Crack in the Bark: Leveraging Public Knowledge to Remove Tree-Ring Watermarks},
     publisher = {USENIX},
     year = {2025}
   }

10. SATML’25

    SoK: What Makes Private Learning Unfair?

    Kai Yao,  and Marc Juarez

    In the Proceedings of the IEEE Conference on Secure and Trustworthy Machine Learning (SaTML’25), 2025

    Bib PDF

    @inproceedings{YaoJ25,
      booktitle = {In the Proceedings of the IEEE Conference on Secure and Trustworthy Machine Learning (SaTML'25)},
      author = {Yao, Kai and Juarez, Marc},
      title = {SoK: What Makes Private Learning Unfair?},
      publisher = {IEEE},
      year = {2025}
    }

11. CoNEXT’25

    Black-Box Evasion Attacks on Data-Driven Open RAN Apps: Tailored Design and Experimental Evaluation

    Pranshav Gajjar, Molham Khoja,  Abiodun Ganiyu and 4 more authors

    Proceedings of the ACM on Networking 2025

    Bib PDF

    @article{GajjarKGJMLS25,
      journal = {Proceedings of the ACM on Networking},
      author = {Gajjar, Pranshav and Khoja, Molham and Ganiyu, Abiodun and Juarez, Marc and Marina, Mahesh K. and Lehane, Andrew and Shah, Vijay K.},
      title = {Black-Box Evasion Attacks on Data-Driven Open RAN Apps: Tailored Design and Experimental Evaluation},
      year = {2025},
      pages = {1-26}
    }

12. TDSC’25

    Shift Your Shape: Correlating and Defending Mixnet Flows Based on Their Shapes

    Lennart Oldenburg,  Marc Juarez,  Enrique Argones Rúa and 1 more author

    IEEE Transactions on Dependable and Secure Computing 2025

    Bib PDF Code

    @article{OldenburgJRD25,
      journal = {IEEE Transactions on Dependable and Secure Computing},
      author = {Oldenburg, Lennart and Juarez, Marc and Rúa, Enrique Argones and Diaz, Claudia},
      title = {Shift Your Shape: Correlating and Defending Mixnet Flows Based on Their Shapes},
      year = {2025},
      pages = {1466-1483}
    }

13. HoTNETS’25

    Rethinking the Role of Network Stacks for Website Fingerprinting Defenses

    Elisaveta Lavrentieva,  Marc Juarez,  and Michio Honda

    Workshop on Hot Topics in Networks (HoTNETS), 2025

    Bib PDF

    @inproceedings{LavrentievaJH25,
      author = {Lavrentieva, Elisaveta and Juarez, Marc and Honda, Michio},
      title = {Rethinking the Role of Network Stacks for Website Fingerprinting Defenses},
      booktitle = {Workshop on Hot Topics in Networks (HoTNETS)},
      year = {2025},
      pages = {254-262}
    }

14. PETS’24

    MixMatch: Flow Matching for Mixnet Traffic

    Lennart Oldenburg,  Marc Juarez,  Enrique Argones Rúa and 1 more author

    In the Proceedings of the 2024 Privacy Enhancing Technologies Symposium (PETS’24), 2024

    🏆 Andreas Pfitzmann best student paper award

    Bib PDF Blog Code

    @inproceedings{OldenburgJAD24,
      booktitle = {In the Proceedings of the 2024 Privacy Enhancing Technologies Symposium (PETS'24)},
      author = {Oldenburg, Lennart and Juarez, Marc and Argones R\'ua, Enrique and Diaz, Claudia},
      title = {MixMatch: Flow Matching for Mixnet Traffic},
      publisher = {PETS},
      year = {2024}
    }

15. AAAI’23

    Online Platforms and the Fair Exposure Problem Under Homophily

    Jakob Schoeffer, Alexander Ritchie,  Keziah Naggita and 3 more authors

    Accepted at the 37th AAAI Conference on Artificial Intelligence (AAAI-23), 2023

    Bib HTML PDF

    @inproceedings{SchoefferRNMFJ22,
      booktitle = {Accepted at the 37th AAAI Conference on Artificial Intelligence (AAAI-23)},
      url = {https://arxiv.org/abs/2202.09727},
      author = {Schoeffer, Jakob and Ritchie, Alexander and Naggita, Keziah and Monachou, Faidra and Finocchiaro, Jessie and Juarez, Marc},
      title = {Online Platforms and the Fair Exposure Problem Under Homophily},
      publisher = {AAAI},
      year = {2023}
    }

16. AFCP’22

    "You Can’t Fix What You Can’t Measure": Privately Measuring Demographic Performance Disparities in Federated Learning

    Marc Juarez,  and Aleksandra Korolova

    Proceedings of Machine Learning Research. In the Algorithmic Fairness through the Lens of Causality and Privacy Workshop (NeurIPS), 2022

    Also presented at EAAMO’22 and TPDP’22

    Bib HTML PDF Video

    @inproceedings{JuarezK22,
      doi = {10.48550/ARXIV.2206.12183},
      url = {https://arxiv.org/abs/2206.12183},
      author = {Juarez, Marc and Korolova, Aleksandra},
      title = {"You Can't Fix What You Can't Measure": Privately Measuring Demographic Performance Disparities in Federated Learning},
      publisher = {Proceedings of Machine Learning Research},
      note = {Also presented at EAAMO'22 and TPDP'22},
      year = {2022},
      copyright = {arXiv.org perpetual, non-exclusive license},
      booktitle = {<a href="https://proceedings.mlr.press/v214/">Proceedings of Machine Learning Research</a>. In the Algorithmic Fairness through the Lens of Causality and Privacy Workshop (NeurIPS)}
    }

17. NDSS’20

    Encrypted DNS ⇒Privacy? A Traffic Analysis Perspective.

    Sandra Siby,  Marc Juarez,  Claudia Diaz and 2 more authors

    Network & Distributed System Security Symposium (NDSS), 2020

    Bib PDF Blog Blog Code

    @inproceedings{SibyJDVT20,
      title = {{Encrypted DNS $\Rightarrow$ Privacy? A Traffic Analysis Perspective.}},
      author = {Siby, Sandra and Juarez, Marc and Diaz, Claudia and Vallina-Rodriguez, Narseo and Troncoso, Carmela},
      booktitle = {Network \& Distributed System Security Symposium (NDSS)},
      year = {2020},
      organization = {Internet Society}
    }

18. CCS’18

    Deep Fingerprinting: Undermining Website Fingerprinting Defenses With Deep Learning

    Payap Sirinam, Mohsen Imani,  Marc Juarez and 1 more author

    ACM Conference on Computer and Communications Security (CCS), 2018

    🏆 Finalist of the CCS’18 Outstanding Paper Awards

    Bib PDF Code

    @inproceedings{SirinamIJW18,
      title = {Deep Fingerprinting: Undermining Website Fingerprinting Defenses With Deep Learning},
      author = {Sirinam, Payap and Imani, Mohsen and Juarez, Marc and Wright, Matthew},
      booktitle = {ACM Conference on Computer and Communications Security (CCS)},
      pages = {1928--1943},
      publisher = {{ACM}},
      year = {2018}
    }

19. HotPETs’18

    DNS Privacy not so private: the traffic analysis perspective

    Sandra Siby,  Marc Juarez,  Narseo Vallina-Rodriguez and 1 more author

    Workshop on Hot Topics in Privacy Enhancing Technologies (HotPETS), 2018

    Bib

    @inproceedings{SibyJVT18,
      title = {{DNS Privacy not so private: the traffic analysis perspective}},
      author = {Siby, Sandra and Juarez, Marc and Vallina-Rodriguez, Narseo and Troncoso, Carmela},
      booktitle = {{Workshop on Hot Topics in Privacy Enhancing Technologies (HotPETS)}},
      year = {2018}
    }

20. NDSS’18

    Automated Website Fingerprinting Through Deep Learning

    Vera Rimmer, Davy Preuveneers,  Marc Juarez and 2 more authors

    Network & Distributed System Security Symposium (NDSS), 2018

    Bib PDF Code Website

    @inproceedings{RimmerPJVW18,
      title = {Automated Website Fingerprinting Through Deep Learning},
      author = {Rimmer, Vera and Preuveneers, Davy and Juarez, Marc and Van Goethem, Tom and Joosen, Wouter},
      booktitle = {Network \& Distributed System Security Symposium (NDSS)},
      year = {2018},
      organization = {Internet Society}
    }

21. NDSS’18

    Inside Job: Applying Traffic Analysis to Measure Tor From Within

    Rob Jansen,  Marc Juarez,  Rafael Galvez and 2 more authors

    Network & Distributed System Security Symposium (NDSS), 2018

    Bib PDF Code

    @inproceedings{JansenJGED18,
      title = {Inside Job: Applying Traffic Analysis to Measure Tor From Within},
      author = {Jansen, Rob and Juarez, Marc and Galvez, Rafael and Elahi, Tariq and Diaz, Claudia},
      booktitle = {Network \& Distributed System Security Symposium (NDSS)},
      year = {2018},
      organization = {Internet Society}
    }

22. On the Application of Deep Learning Techniques to Website Fingerprinting Attacks and Defenses

    Marc Juarez,  and Vera Rimmer

    Deep Learning Security Workshop (Research Forum), 2017

    🏆 Presentation Award

    Bib

    @inproceedings{JuarezR17,
      title = {{On the Application of Deep Learning Techniques to Website Fingerprinting Attacks and Defenses}},
      author = {Juarez, Marc and Rimmer, Vera},
      booktitle = {{Deep Learning Security Workshop (Research Forum)}},
      year = {2017}
    }

23. PETS’17

    Website Fingerprinting Defenses at the Application Layer

    Giovanni Cherubin, Jamie Hayes,  and Marc Juarez

    Proceedings on Privacy Enhancing Technologies (PoETS) 2017

    Bib PDF Video Blog Code

    @article{CherubinHJ17,
      author = {Cherubin, Giovanni and Hayes, Jamie and Juarez, Marc},
      journal = {Proceedings on Privacy Enhancing Technologies (PoETS)},
      issue = {2},
      pages = {168--185},
      title = {{Website Fingerprinting Defenses at the Application Layer}},
      year = {2017},
      publisher = {De Gruyter}
    }

24. CCS’17

    How unique is your onion? An Analysis of the Fingerprintability of Tor Onion Services

    Rebekah Overdorf,  Marc Juarez,  Gunes Acar and 2 more authors

    ACM Conference on Computer and Communications Security (CCS), 2017

    🏆 Finalist of the PETS Caspar Bowden Award
    🏆 Finalist of the CCS’17 Paper Awards

    Bib PDF Code Website

    @inproceedings{OverdorfJAGD17,
      author = {Overdorf, Rebekah and Juarez, Marc and Acar, Gunes and Greenstadt, Rachel and Diaz, Claudia},
      title = {How unique is your onion? An Analysis of the Fingerprintability of Tor Onion Services},
      booktitle = {ACM Conference on Computer and Communications Security (CCS)},
      pages = {2021--2036},
      publisher = {{ACM}},
      year = {2017}
    }

25. Profiling Tor Users with Unsupervised Learning Techniques

    Rafael Galvez,  Marc Juarez,  and Claudia Diaz

    International Workshop on Inference and Privacy in a Hyperconnected World (INFER), 2016

    Bib

    @inproceedings{GalvezJD16,
      author = {Galvez, Rafael and Juarez, Marc and Diaz, Claudia},
      booktitle = {{International Workshop on Inference and Privacy in a Hyperconnected World (INFER)}},
      title = {Profiling Tor Users with Unsupervised Learning Techniques},
      year = {2016}
    }

26. ESORICS’16

    Toward an Efficient Website Fingerprinting Defense

    Marc Juarez, Mohsen Imani,  Mike Perry and 2 more authors

    European Symposium on Research in Computer Security (ESORICS), 2016

    🏆 Outstanding Paper Award

    Bib PDF Code

    @inproceedings{JuarezIPDW16,
      author = {Juarez, Marc and Imani, Mohsen and Perry, Mike and Diaz, Claudia and Wright, Matthew},
      title = {{Toward an Efficient Website Fingerprinting Defense}},
      booktitle = {European Symposium on Research in Computer Security (ESORICS)},
      pages = {27--46},
      publisher = {{Springer}},
      year = {2016}
    }

27. CCS’14

    A Critical Evaluation of Website Fingerprinting Attacks

    Marc Juarez, Sadia Afroz,  Gunes Acar and 2 more authors

    ACM Conference on Computer and Communications Security (CCS), 2014

    Bib PDF Code

    @inproceedings{JuarezAADG14,
      author = {Juarez, Marc and Afroz, Sadia and Acar, Gunes and Diaz, Claudia and Greenstadt, Rachel},
      title = {A Critical Evaluation of Website Fingerprinting Attacks},
      booktitle = {ACM Conference on Computer and Communications Security (CCS)},
      pages = {263--274},
      publisher = {{ACM}},
      year = {2014}
    }

28. CCS’14

    The Web Never Forgets: Persistent Tracking Mechanisms in the Wild

    Gunes Acar, Christian Eubank,  Steven Englehardt and 3 more authors

    ACM Conference on Computer and Communications Security (CCS), 2014

    Bib PDF Code Website

    @inproceedings{AcarEEJND2014,
      author = {Acar, Gunes and Eubank, Christian and Englehardt, Steven and Juarez, Marc and Narayanan, Arvind and Diaz, Claudia},
      booktitle = {ACM Conference on Computer and Communications Security (CCS)},
      pages = {674--689},
      publisher = {ACM},
      title = {The Web Never Forgets: Persistent Tracking Mechanisms in the Wild},
      year = {2014}
    }

29. CCS’13

    FPDetective: Dusting the Web for fingerprinters

    Gunes Acar,  Marc Juarez,  Nick Nikiforakis and 4 more authors

    ACM Conference on Computer and Communications Security (CCS), 2013

    🏆 Award for Outstanding Research in PETS, runner-up

    Bib PDF Code Website

    @inproceedings{AcarJNDGPP13,
      author = {Acar, Gunes and Juarez, Marc and Nikiforakis, Nick and Diaz, Claudia and G\"{u}rses, Seda F. and Piessens, Frank and Preneel, Bart},
      booktitle = {ACM Conference on Computer and Communications Security (CCS)},
      pages = {1129--1140},
      publisher = {ACM},
      title = {{FPDetective: Dusting the Web for fingerprinters}},
      year = {2013}
    }

30. PST’13

    A Self-Adaptive Classification for the Dissociating Privacy Agent

    Marc Juarez,  and Vicenç Torra

    International Conference on Privacy, Security and Trust, 2013

    Bib PDF

    @inproceedings{JuarezT13b,
      author = {Juarez, Marc and Torra, Vicen\c{c}},
      booktitle = {{International Conference on Privacy, Security and Trust}},
      isbn = {9781467358392},
      pages = {44--50},
      title = {{A Self-Adaptive Classification for the Dissociating Privacy Agent}},
      year = {2013}
    }

31. IJIS’13

    Towards a Privacy Agent for Information Retrieval

    Marc Juarez,  and Vicenç Torra

    International Journal of Intelligent Systems 2013

    Bib PDF Code

    @article{JuarezT13a,
      author = {Juarez, Marc and Torra, Vicen\c{c}},
      isbn = {9781467358392},
      journal = {{International Journal of Intelligent Systems}},
      number = {6},
      pages = {606--622},
      title = {{Towards a Privacy Agent for Information Retrieval}},
      url = {http://onlinelibrary.wiley.com/doi/10.1002/int.21595/full},
      volume = {28},
      year = {2013}
    }

Pre-prints

1. arXiv

   Towards Understanding the Interplay of Generative Artificial Intelligence and the Internet

   Gonzalo Martínez, Lauren Watson,  Pedro Reviriego and 3 more authors

   Accepted at the UAI Workshop on Epistemic Uncertainty in Artificial Intelligence, 2023

   Bib

   @misc{MartinezWRHJS23,
     title = {Towards Understanding the Interplay of Generative Artificial Intelligence and the Internet},
     author = {Martínez, Gonzalo and Watson, Lauren and Reviriego, Pedro and Hernández, José Alberto and Juarez, Marc and Sarkar, Rik},
     booktitle = {Accepted at the UAI Workshop on Epistemic Uncertainty in Artificial Intelligence},
     year = {2023},
     eprint = {2306.06130},
     archiveprefix = {arXiv},
     primaryclass = {cs.AI}
   }

2. arXiv

   Black-Box Audits for Group Distribution Shifts

   Marc Juarez, Samuel Yeom,  and Matt Fredrikson

   Accepted at the AAAI Workshop on Privacy-Preserving Artificial Intelligence, 2023

   Bib HTML PDF

   @misc{JuarezYF22,
     doi = {10.48550/ARXIV.2209.03620},
     url = {https://arxiv.org/abs/2209.03620},
     author = {Juarez, Marc and Yeom, Samuel and Fredrikson, Matt},
     title = {Black-Box Audits for Group Distribution Shifts},
     booktitle = {Accepted at the AAAI Workshop on Privacy-Preserving Artificial Intelligence},
     year = {2023}
   }

Book Chapters

1. DisPA: An Intelligent Agent for Private Web Search

   Marc Juarez,  and Vicenç Torra

   Advanced Research in Data Privacy, 2015

   Bib

   @inproceedings{JuarezT15,
     author = {Juarez, Marc and Torra, Vicen\c{c}},
     year = {2015},
     isbn = {978-3-319-09884-5},
     booktitle = {Advanced Research in Data Privacy},
     volume = {567},
     series = {Studies in Computational Intelligence},
     editor = {Navarro-Arribas, Guillermo and Torra, Vicen\'c},
     doi = {10.1007/978-3-319-09885-2_21},
     title = {DisPA: An Intelligent Agent for Private Web Search},
     url = {http://dx.doi.org/10.1007/978-3-319-09885-2_21},
     publisher = {Springer International Publishing},
     keywords = {Privacy; Web search; Search personalization; Query classification},
     pages = {389-405},
     language = {English}
   }

Posters

Theses

1. Design and Evaluation of Website Fingerprinting Techniques

   Marc Juarez

   2019

   🏆 Summa cum laude with the congratulations of the jury
   🏆 ACM SIGSAC Doctoral Dissertation Award runner-up PhD thesis

   Bib PDF

   @phdthesis{Juarez19,
     author = {Juarez, Marc},
     title = {Design and Evaluation of Website Fingerprinting Techniques},
     school = {KU Leuven},
     year = {2019},
     note = {PhD thesis}
   }

2. DisPA, un Agent per a la Cerca Privada a la Web

   Marc Juarez

   2013

   Undergraduate thesis

   Bib PDF

   @mastersthesis{Juarez13,
     author = {Juarez, Marc},
     title = {DisPA, un Agent per a la Cerca Privada a la Web},
     school = {Universitat Aut\'onoma de Barcelona},
     year = {2013},
     note = {Undergraduate thesis}
   }