Vitaly Shmatikov
Vitaly Shmatikov studies privacy risks in anonymized data and in machine learning. He completed a Stanford doctorate in 2000 on finite-state analysis of security protocols, worked at SRI International, joined the University of Texas at Austin in 2004, and joined Cornell Tech in 2016. With Arvind Narayanan, he showed in 2008 that Netflix Prize ratings could be de-anonymized, and that work received a Test of Time award in 2019. With Reza Shokri, he published Privacy-Preserving Deep Learning in 2015, and in 2018 he shared a PET award for membership-inference attacks on machine learning models. In June 2026 he is a professor of computer science at Cornell Tech and a principal investigator, with Alexandra Silva, of the AI4AI initiative on safety for AI agents and the code they produce.
- Now at
- Cornell University
- Works
- 244
- Citations
- 23,380
- h-index
- 61
Publication numbers from OpenAlex, as of 17 October 2026.
Timeline
-
2000
A Stanford doctorate
In 2000 he completes a Ph.D. at Stanford University. The dissertation is Finite-State Analysis of Security Protocols.
-
2004
From Moscow to Austin
He grows up in Moscow and studies as an undergraduate at Moscow University and the University of Washington. Graduate work at Stanford yields an M.S. in engineering-economic systems and a Ph.D. in computer science. In 2004 he joins the University of Texas at Austin as an assistant professor, after work as a computer scientist at SRI International on security, anonymity, and privacy.
-
2008
The Netflix Prize dataset
In 2008, with Arvind Narayanan, he shows how to break the anonymity of the Netflix Prize dataset. That work receives a Test of Time award in 2019.
-
2015
Privacy-preserving deep learning
With Reza Shokri, he publishes Privacy-Preserving Deep Learning in 2015. The paper shows that participants such as hospitals, research institutions, and companies can train neural-network models together by sharing selected model parameters while keeping raw training data on their own systems.
-
2016
Joining Cornell Tech
In 2016 he joins Cornell Tech as a computer science professor. The new professors' work includes machine-learning privacy and security.
-
2018
Membership inference attacks
In 2018 he shares the PET Award with Reza Shokri, Marco Stronati, and Congzheng Song for the 2017 paper Membership Inference Attacks against Machine Learning Models.
-
December 2023
Text recovered from embeddings
In December 2023 he shares an Outstanding Paper Award at EMNLP for Text Embeddings Reveal (Almost) As Much As Text, with Alexander Rush, Volodymyr Kuleshov, and Jack Morris. Vec2Text reconstructs 92 percent of a data set of original text exactly, and the team retrieves 94 percent of first names and 95 percent of last names from clinical notes.
-
Since June 2026
Safety for AI agents
An Amazon partnership establishes AI4AI, Assured Integrity for AI-Based Software, in June 2026. He is a professor of computer science at Cornell Tech and a principal investigator with Alexandra Silva. The project develops safety protocols for AI agents and the code they produce.
Sources and credits
Photo: We have no published photo of Vitaly Shmatikov yet. Send us a free-licensed photo.
- Vitaly Shmatikov - Wikipedia
- Vitaly Shmatikov - The Mathematics Genealogy Project
- UTCS welcomes Professor Vitaly Shmatikov | UT Austin Computer Science
- Vitaly Shmatikov: Research Papers
- Vitaly Shmatikov Wins Test of Time Award
- Cyber Security Experts Join Cornell Tech Faculty - The Cornell Daily Sun
- PET Award
- Cornell Tech - Researchers Win Award for Study on Text Embedding Privacy Risks
- Amazon partnership establishes Cornell AI security initiative | Cornell Chronicle
- AI4AI - Assured Integrity for AI-Based Software @ Cornell University