Sign in

Egor Zverev

@egorzverev.bsky.social
59 followers 86 following 30 posts

ml safety researcher | visiting phd student @ETHZ | doing phd @ISTA | prev. @phystech | prev. developer @GSOC | love poetry

PostsRepliesMedia
Egor Zverev @egorzverev.bsky.social · 20/04/2026
Flying to #ICLR2026 🇧🇷 to present our paper, ASIDE: a parameter-free 90° rotation of data embeddings gives LLMs built-in instruction-data separation, cutting prompt injection rates without explicit safety training. 📍Thu Apr 23, 10:30, Pavilion 4, #3910 ⬇️ Paper, Code, Models
110
Egor Zverev @egorzverev.bsky.social · 11/03/2026
ASIDE accepted to #ICLR2026! 🇧🇷🎉 We architecturally separate instructions and data in LLMs by rotating data token embeddings 90° during the forward pass: one extra matmul, virtually no overhead. Models & code open-sourced ⬇️
130
Reposted by Egor Zverev
Sahar Abdelnabi @sahar-abdelnabi.bsky.social · 09/10/2025
✨ 𝗦𝘂𝗯𝗺𝗶𝘀𝘀𝗶𝗼𝗻 𝗜𝗻𝗳𝗼: - Quick application - Accepting posters for 2025 papers from top ML / Security venues - 𝗗𝗲𝗮𝗱𝗹𝗶𝗻𝗲: October 28, 2025 - Notifications: October 31, 2025 Submission link: docs.google.com/forms/d/e/1F... Workshop website: llmsafety-unconference.github.io
docs.google.com
Submit a Paper for the ELLIS UnConference 2025 LLM Safety and Security workshop Poster Session
We’re hosting a poster session at the LLM Safety and Security Workshop (ELLIS UnConference) on December 2, 2025 in Copenhagen, Denmark. We invite attendees to present already published 2025 work in areas related to LLM safety and security. Eligibility. Posters must be based on papers accepted in 2025 at a top venue (or an associated LLM safety/security workshop). If your venue isn’t listed, please enter it manually. First-author or any co-author may present. Selection policy. We aim to accept as many posters as our space allows. If submissions exceed capacity, earlier submissions will be prioritized (first-come, first-served). Deadlines. Submission deadline: October 28, 2025 Notification: October 31, 2025
121
Reposted by Egor Zverev
Sahar Abdelnabi @sahar-abdelnabi.bsky.social · 09/10/2025
📢 𝗖𝗮𝗹𝗹 𝗳𝗼𝗿 𝗣𝗼𝘀𝘁𝗲𝗿𝘀: 𝗟𝗟𝗠 𝗦𝗮𝗳𝗲𝘁𝘆 𝗮𝗻𝗱 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗪𝗼𝗿𝗸𝘀𝗵𝗼𝗽 @ 𝗘𝗟𝗟𝗜𝗦 𝗨𝗻𝗖𝗼𝗻𝗳𝗲𝗿𝗲𝗻𝗰𝗲 📅 December 2, 2025 📍 Copenhagen An opportunity to discuss your work with colleagues working on similar problems in LLM safety and security
122
Egor Zverev @egorzverev.bsky.social · 03/10/2025
🎉 Excited to announce the Workshop on Foundations of LLM Security at #EurIPS2025! 🇩🇰 Dec 6–7, Copenhagen! 📢 Call for contributed talks is now open! See details at llmsec-eurips.github.io #EurIPS @euripsconf.bsky.social @sahar-abdelnabi.bsky.social @aideenfay.bsky.social @thegruel.bsky.social
021
Egor Zverev @egorzverev.bsky.social · 30/09/2025
Cool news: I have co-affiliated with @floriantramer.bsky.social at @ethz.ch through the #ELLIS PhD program! I will be visiting ETH for the next 3 months to work with @nkristina.bsky.social on LLM Agents Safety.
010
Reposted by Egor Zverev
Zeynep Akata @zeynepakata.bsky.social · 28/08/2025
NeurIPS has decided to do what ICLR did: As a SAC I received the message 👇 This is wrong! If the review process cannot handle so many papers, the conference needs yo split instead of arbitrarily rejecting 400 papers.
810518
Reposted by Egor Zverev
Christoph Lampert (MLCV@ISTA) @mlcv-at-ista.bsky.social · 28/08/2025
Let's push for the obvious solution: Dear @neuripsconf.bsky.social ! Allow authors to present accepted papers at EurIPS instead of NeurIPS rather than just additionally. Likely, at least 500 papers would move to Copenhagen, problem solved.
25615
Egor Zverev @egorzverev.bsky.social · 25/07/2025
I will be attending #ACL2025NLP next week in Vienna 🇦🇹 Simply DM me if you want to chat about LLM Safety/Security, especially topics like instruction/data separation and instruction hierarchies.
000
Reposted by Egor Zverev
Christoph Lampert (MLCV@ISTA) @mlcv-at-ista.bsky.social · 16/07/2025
Are you looking for an opportunity to do curiosity-driven basic ML research after your PhD? Look no further! Apply for a postdoc position in my group at ISTA (ELLIS Unit Vienna)! Topics are flexible, as long as they fit to our general research group's interests, see cvml.ista.ac.at/Postdoc-ML.h...
cvml.ista.ac.at
Machine Learning and Computer Vision Group -- Christoph Lampert -- ISTA
Computer Vision and Machine Learning, ISTA: open postdoc positions, Machine Learning, curiosity-driven, fully-funded
041
Reposted by Egor Zverev
NeurIPS Europe @neuripseurope.bsky.social · 16/07/2025
EurIPS is coming! 📣 Mark your calendar for Dec. 2-7, 2025 in Copenhagen 📅 EurIPS is a community-organized conference where you can present accepted NeurIPS 2025 papers, endorsed by @neuripsconf.bsky.social and @nordicair.bsky.social and is co-developed by @ellis.eu eurips.cc
214470
Egor Zverev @egorzverev.bsky.social · 24/06/2025
🚀 We’ve released the source code for 𝗔𝗦𝗜𝗗𝗘 (presented as an 𝗢𝗿𝗮𝗹 at the #ICLR2025 BuildTrust workshop)! 🔍 ASIDE boosts prompt injection robustness without safety-tuning: we simply rotate embeddings of marked tokens by 90° during instruction-tuning and inference. 👇 code & docs👇
163
Reposted by Egor Zverev
Egor Zverev @egorzverev.bsky.social · 23/04/2025
I’ll present our 𝗔𝗦𝗜𝗗𝗘 paper as an 𝗢𝗿𝗮𝗹 at the #ICLR2025 BuildTrust workshop! 🚀 ✅ ASIDE = architecturally separating instructions and data in LLMs from layer 0 🔍 +12–44 pp↑ separation, no utility loss​​ 📉 lowers prompt‑injection ASR (without safety tuning!) 🚀 Talk: Hall 4 #6, 28 Apr, 4:45
174
Reposted by Egor Zverev
Egor Zverev @egorzverev.bsky.social · 25/04/2025
Tomorrow I am presenting"Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?" at #ICLR2025! Looking forward to fun discussions near the poster! 📆 Sat 26 Apr, 10:00-12:30 - Poster session 5 (#500)
021
Egor Zverev @egorzverev.bsky.social · 25/04/2025
Tomorrow I am presenting"Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?" at #ICLR2025! Looking forward to fun discussions near the poster! 📆 Sat 26 Apr, 10:00-12:30 - Poster session 5 (#500)
021
Egor Zverev @egorzverev.bsky.social · 23/04/2025
I’ll present our 𝗔𝗦𝗜𝗗𝗘 paper as an 𝗢𝗿𝗮𝗹 at the #ICLR2025 BuildTrust workshop! 🚀 ✅ ASIDE = architecturally separating instructions and data in LLMs from layer 0 🔍 +12–44 pp↑ separation, no utility loss​​ 📉 lowers prompt‑injection ASR (without safety tuning!) 🚀 Talk: Hall 4 #6, 28 Apr, 4:45
174
Egor Zverev @egorzverev.bsky.social · 18/04/2025
Landing in Singapore for #ICLR2025 next week! DM me for a 1‑on‑1 about LLM safety, building safe LLMs by design, control and data flows, instruction–data separation and hierarchies. I’m presenting our instruction–data separation paper plus a workshop paper—long post coming.
110
Egor Zverev @egorzverev.bsky.social · 18/03/2025
(1/n) In our #ICLR2025 paper, we explore a fundamental issue that enables prompt injections: 𝐋𝐋𝐌𝐬’ 𝐢𝐧𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐭𝐨 𝐬𝐞𝐩𝐚𝐫𝐚𝐭𝐞 𝐢𝐧𝐬𝐭𝐫𝐮𝐜𝐭𝐢𝐨𝐧𝐬 𝐟𝐫𝐨𝐦 𝐝𝐚𝐭𝐚 𝐢𝐧 𝐭𝐡𝐞𝐢𝐫 𝐢𝐧𝐩𝐮𝐭. ✅ Definition of separation 👉 SEP Benchmark 🔍 LLM evals on SEP
2174