person
Nicolas Papernot
U Toronto / Vector Institute; ML privacy and security
University of Toronto and Vector Institute assistant professor; researches privacy attacks, membership inference, machine unlearning, and ML supply-chain security.
current Assistant Professor of ECE, University of Toronto; Faculty Member, Vector Institute
Strategy positions
Security mindsetendorses
Treat safety as adversarial security; assume systems break under attackArgues that the training data, model, and deployment surface of ML systems each need security analysis as rigorous as that applied to mature software systems.
Machine learning is software. The same threat models that govern software supply chains apply, but with the additional surface of the data pipeline.
Closest strategy neighbours
by jaccard overlapOther people whose strategy tags overlap with Nicolas Papernot's. Overlap is on tag identity, not stance; opposites can show up if they reference the same tags.
Record last updated 2026-04-25.