---
title: "Matt Fredrikson — author profile and papers — Elamur Research"
description: "Matt Fredrikson, Carnegie Mellon University: 2 papers on Elamur Research (2017–2023), h-index 28 — affiliations, topics, co-authors and…"
canonical: "https://research.elamur.ai/free/en/authors/matt-fredrikson/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/authors/matt-fredrikson/)

[home](https://md.research.elamur.ai/free/en/) / [authors](https://md.research.elamur.ai/free/en/authors/) / Matt Fredrikson

# Matt Fredrikson

Matt Fredrikson has 2 papers in our library, in 2017–2023, most of them on [Language models & pretraining](https://md.research.elamur.ai/free/en/topics/language-models/), [Bias, fairness & safety](https://md.research.elamur.ai/free/en/topics/bias-fairness-safety/); often with [Andy Zou](https://md.research.elamur.ai/free/en/authors/andy-zou/), [J. Zico Kolter](https://md.research.elamur.ai/free/en/authors/j-zico-kolter/), [Milad Nasr](https://md.research.elamur.ai/free/en/authors/milad-nasr/).

2 papers in our library · 2017–2023

[OpenAlex](https://openalex.org/A5057424614) · [ORCID](https://orcid.org/0000-0003-1820-1698) · [Wikidata](https://www.wikidata.org/wiki/Q130802843) · [**h-index 28**](https://openalex.org/authors/A5057424614) · [122 works](https://openalex.org/works?filter=author.id:A5057424614) · [10,483 citations](https://openalex.org/works?filter=author.id:A5057424614&sort=cited_by_count:desc) OpenAlex, 2026-10-14

[📄 2 works in our library](https://md.research.elamur.ai/free/en/authors/matt-fredrikson/#papers) · [🔗 Cited 1,295 times in our library](https://md.research.elamur.ai/free/en/authors/matt-fredrikson/cited-by/) · [2 more in our library without a page yet](#also) · [⭐ Paper Stars ranking: #1468](https://md.research.elamur.ai/free/en/paper-stars/page/15/#star-1468)

The profile is the library's match of the name; two people with one name are not always told apart.

Elsewhere: [Google Scholar](https://scholar.google.com/citations?view_op=search_authors&mauthors=Matt+Fredrikson) · [Semantic Scholar](https://www.semanticscholar.org/search?q=Matt+Fredrikson) · [dblp](https://dblp.org/search?q=Matt+Fredrikson) · [ACL Anthology](https://aclanthology.org/search/?q=Matt+Fredrikson)

## Affiliations

[🎓**Carnegie Mellon University** Pittsburgh · United States 2015–2026 · 61 papersEmployment since 2015 · Associate Professor, Computer Science Department*current*](https://md.research.elamur.ai/free/en/universities/carnegie-mellon-university/) · [🎓**University of Wisconsin–Madison** Madison · United States 2007–2016 · 14 papersEducation 2007–2009 · M.S., Computer Sciences](https://md.research.elamur.ai/free/en/universities/university-of-wisconsin-madison/) · [🎓**University of Wisconsin System** Madison · United States 2014 · 3 papers](https://ror.org/03ydkyb10)

🏛️**University of Wisconsin** Madison · [United States](https://md.research.elamur.ai/free/en/countries/united-states/) 2009–2015Education 2009–2015 · PhD, Computer Sciences

[🎓**Duquesne University** Pittsburgh · United States 2003–2007Education 2003–2007 · B.S., Computer ScienceEducation 2003–2007 · B.A., Mathematics](https://ror.org/02336z538)

From the bylines of their papers (OpenAlex, 2026-10-14), ORCID and Wikidata; institutions on papers are matched by machine. 1 more institution on single bylines are not listed.

## Fields, topics and concepts

Of its works in our library, with the number of works on each.

📚 Shelves 6 The field of science this work belongs to (OpenAlex fields).[Artificial Intelligence · 2 works](https://md.research.elamur.ai/free/en/shelves/computer-science/artificial-intelligence/) · [Computer Science · 2 works](https://md.research.elamur.ai/free/en/shelves/computer-science/) · [Social Sciences · 1 work](https://md.research.elamur.ai/free/en/shelves/social-sciences/) · [Sociology and Political Science · 1 work](https://md.research.elamur.ai/free/en/shelves/social-sciences/sociology-and-political-science/) · [Arts and Humanities · 1 work](https://md.research.elamur.ai/free/en/shelves/arts-and-humanities/) · [Language and Linguistics · 1 work](https://md.research.elamur.ai/free/en/shelves/arts-and-humanities/language-and-linguistics/)

🧭 Topics 2 Research subjects and languages the work is about.[Bias, fairness & safety · 1 work](https://md.research.elamur.ai/free/en/topics/bias-fairness-safety/) · [Language models & pretraining · 1 work](https://md.research.elamur.ai/free/en/topics/language-models/)

💡 Concepts 1 Key ideas and methods explained on our concept pages.[Machine learning · 1 work](https://md.research.elamur.ai/free/en/concepts/machine-learning/)

## Works by year

### 2020s

[**2023** 1 paper](https://md.research.elamur.ai/free/en/authors/matt-fredrikson/year/2023/)

### 2010s

[**2017** 1 paper](https://md.research.elamur.ai/free/en/authors/matt-fredrikson/year/2017/)

## Papers

The most cited first (OpenAlex and our library).

1. **[Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting](https://md.research.elamur.ai/free/en/papers/yeom-2017-privacy-risk-machine-learning-analyzing/)** *(2017 · 1,036 citations)* Models trained on sensitive records can expose facts about the people in their training sets. Before this work, the causes of that leakage were explained mostly through scattered anecdotes. Yeom, Giacomelli, Fredrikson and Jha study two black-box threats. Membership inference asks whether a given record was used for…
2. **[Universal and Transferable Adversarial Attacks on Aligned Language Models](https://md.research.elamur.ai/free/en/papers/zou-2023-universal-transferable-adversarial-attacks-aligned/)** *(2023 · 1,005 citations)* Aligned chat models refuse harmful requests, but earlier jailbreaks were handcrafted and fragile, and automatic prompt search had mostly failed.

## All works

4 works of theirs in our library, the most cited first; 2 with a page here, the others link their original until we summarise them.

1. [**Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting arXiv:1709.01604**Samuel Yeom, Irene Giacomelli, Matt Fredrikson, et al.*2017 · 1,036 citations*](https://md.research.elamur.ai/free/en/papers/yeom-2017-privacy-risk-machine-learning-analyzing/)
2. [**Universal and Transferable Adversarial Attacks on Aligned Language Models arXiv:2307.15043**Andy Zou, Zifan Wang, Nicholas Carlini, et al.*2023 · 1,005 citations*](https://md.research.elamur.ai/free/en/papers/zou-2023-universal-transferable-adversarial-attacks-aligned/)
3. **[Improving Alignment and Robustness with Circuit Breakers ↗](https://arxiv.org/abs/2406.04313) arXiv:2406.04313 · no summary yet**Andy Zou et al.*2024 · 83 citations*
4. **[Comparing AI Agents to Cybersecurity Professionals in Real-World Penetration Testing ↗](https://arxiv.org/abs/2512.09882) arXiv (Cornell University) · no summary yet**Justin W. Lin et al.*2025 · 1 citation*

## Co-authors here

6 co-authors with a page, the most papers together first.

- [Andy Zou](https://md.research.elamur.ai/free/en/authors/andy-zou/)
- [J. Zico Kolter](https://md.research.elamur.ai/free/en/authors/j-zico-kolter/)
- [Milad Nasr](https://md.research.elamur.ai/free/en/authors/milad-nasr/)
- [Nicholas Carlini](https://md.research.elamur.ai/free/en/authors/nicholas-carlini/)
- [Somesh Jha](https://md.research.elamur.ai/free/en/authors/somesh-jha/)
- [Zifan Wang](https://md.research.elamur.ai/free/en/authors/zifan-wang/)

## Cited by

Papers of our library cite their works 1,295 times (of the 149,439 papers whose bibliographies we read); [272 citing papers with a page here →](https://md.research.elamur.ai/free/en/authors/matt-fredrikson/cited-by/).

Updated 1 November 2026
