Skip to content
@ethz-spylab

SPY Lab

Secure and Private AI research at ETH Zürich

SPY Lab (ETH Zurich)

The Secure and Private AI (SPY) Lab conducts research on the security, privacy and trustworthiness of machine learning systems. We often approach these problems from an adversarial perspective, by designing attacks that probe the worst-case performance of a system to ultimately understand and improve its safety.

💡 Learn more about our work and read our publications on our website.

🖥️ Check the code for our projects in this repository.

Popular repositories Loading

  1. agentdojo agentdojo Public

    A Dynamic Environment to Evaluate Attacks and Defenses for LLM Agents.

    Python 817 211

  2. rlhf_trojan_competition rlhf_trojan_competition Public

    Finding trojans in aligned LLMs. Official repository for the competition hosted at SaTML 2024.

    Python 119 9

  3. rlhf-poisoning rlhf-poisoning Public

    Code for paper "Universal Jailbreak Backdoors from Poisoned Human Feedback"

    Python 68 10

  4. robust-style-mimicry robust-style-mimicry Public

    Python 56 3

  5. diffusion_denoised_smoothing diffusion_denoised_smoothing Public

    Certified robustness "for free" using off-the-shelf diffusion models and classifiers

    Python 43 4

  6. autoadvexbench autoadvexbench Public

    Python 42 3

Repositories

Showing 10 of 31 repositories
  • ethz-spylab/cryptanalysis-benchmark's past year of commit activity
    C 36 MIT 3 1 0 Updated Jul 21, 2026
  • ethz-spylab/untrusted-content-masking's past year of commit activity
    Python 2 MIT 0 0 0 Updated Jul 7, 2026
  • agentdojo Public

    A Dynamic Environment to Evaluate Attacks and Defenses for LLM Agents.

    ethz-spylab/agentdojo's past year of commit activity
    Python 817 MIT 211 26 27 Updated Jun 2, 2026
  • llm_lab Public
    ethz-spylab/llm_lab's past year of commit activity
    Python 0 0 0 0 Updated Apr 14, 2026
  • jailbreak-tax Public
    ethz-spylab/jailbreak-tax's past year of commit activity
    Python 24 0 0 0 Updated Feb 17, 2026
  • modal-aphasia Public
    ethz-spylab/modal-aphasia's past year of commit activity
    Jupyter Notebook 5 1 0 0 Updated Feb 13, 2026
  • infoseclab_25 Public
    ethz-spylab/infoseclab_25's past year of commit activity
    Python 4 0 0 0 Updated Oct 13, 2025
  • hallucinated-citations Public

    Check for probably-hallucinated references in arxiv papers

    ethz-spylab/hallucinated-citations's past year of commit activity
    Python 3 MIT 0 0 0 Updated Sep 5, 2025
  • RealMath Public
    ethz-spylab/RealMath's past year of commit activity
    Python 20 0 0 0 Updated May 23, 2025
  • ethz-spylab/autoadvexbench's past year of commit activity
    Python 42 3 1 0 Updated May 21, 2025

Top languages

Loading…

Most used topics

Loading…