Florian Tramèr

Florian Tramèr is an Assistant Professor in the Department of Computer Science at ETH Zurich, Switzerland, leading research at the intersection of machine learning security, privacy, and AI safety. His work focuses on identifying and mitigating security vulnerabilities in machine learning systems, particularly in large language models and other AI systems.

Tramèr's primary research interests include adversarial machine learning, membership inference attacks, privacy-preserving AI, and the security implications of large language models. His work has significantly advanced our understanding of how machine learning models memorize training data, how this memorization creates privacy risks, and how to evaluate the robustness of machine learning systems against various attacks.

His recent publications demonstrate a strong focus on practical security challenges in deployed AI systems, including data extraction from language models, adversarial attacks against generative AI, and developing more rigorous evaluation methodologies for machine learning security. Tramèr's research has been published in top venues including ICLR, NeurIPS, ICML, and IEEE Security & Privacy.

Tramèr is actively collaborating with leading researchers in the field including Nicholas Carlini, Matthew Jagielski, and Javier Rando, contributing to important initiatives like the International AI Safety Report. His work bridges theoretical security concepts with practical implications for real-world AI deployment.