Software Engineer · Zürich

Federico Villa

M.Sc. Computer Science Student at ETH Zürich

Interested in Cyber Security and Machine Learning.
Currently focused on securing AI agents and building robust machine learning systems.

Federico Villa

Experience

Software Engineer Intern Palantir
Jun 2026 – Sep 2026

Platform Security · AI Platform · London, UK

Software Engineer Intern Snowflake
Jan 2026 – Jun 2026

SQL Execution Platform · Berlin, DE

Research Collaborator Microsoft Research
Aug 2025 – Dec 2025

Co-designed a framework that enforces evolving access-control policies in multi-agent AI systems — formalized as a protocol with provable guarantees against prompt injection and jailbreaks.

M.Sc. Computer Science ETH Zürich
Sep 2024 – Feb 2027

Major in Cyber Security · Minor in Machine Intelligence · GPA 5.7 / 6.0 · Zürich, CH

Deep Learning Large-Scale AI Engineering Privacy-Enhancing Technologies Big Data Network Security Information Security Lab Applied Security Lab Computational Intelligence Lab
Exchange Semester EPFL
Feb 2025 – Jul 2025

Computer Science & Cybersecurity · Lausanne, CH

Optimization for ML Software Security Private, Robust & Scalable Aggregate Statistics
B.Sc. Computer Science & Engineering Politecnico di Milano
Sep 2021 – Jul 2024

Graduated 109 / 110 · Best Freshman Award 2021/2022 · Milan, IT

Software Intern Nokia
Jun 2019

PCTO program · Vimercate, IT

Publications

KONVENS 2026 · Oral presentation

Generating Adversarial Texts for Machine Translation via GRPO

Applied Group Relative Policy Optimization to fine-tune Llama-3.1-8B, producing a scalable RL pipeline for adversarial NLP examples. A multi-objective reward system (COMET, semantic similarity, CoLA) yields rewrites that degrade state-of-the-art translation models while keeping 87%+ naturalness, generalizing across WMT19–WMT24.

Result: adversarial behaviour that transfers to unseen benchmarks — a concrete step toward stress-testing the robustness of production translation systems.

Machine Translation GRPO Reinforcement Learning Adversarial NLP LLMs Paper Code
arXiv:2603.02590 · Microsoft Research collaboration

Extending the Formalism and Theoretical Foundations of Cryptography to AI

Federico Villa, F. Betül Durak, Franziska Roesner, et al.

A formal security-game framework that unifies Confidentiality, Integrity and Availability in agentic AI systems, with provable reductions for agentic access control and a proof of the tension between training-data confidentiality and system completeness.

AI Security Agentic Systems LLMs Cryptography Formal Methods Paper

Projects

ETH Zürich Nov 2025 – Jan 2026

Breaking Machine Translation with GRPO

Using Group Relative Policy Optimization, we train small LLMs to generate examples that are genuinely hard to translate — outperforming base models and alternative approaches.

Code Paper LLMs Reinforcement Learning GRPO PyTorch
EPFL Mar 2025 – May 2025

Generalization of Asynchronous SGD Variants

Studied how staleness in Asynchronous SGD affects generalization. Found ASGD variants match — and sometimes beat — standard SGD on both convergence and generalization.

Website Report ASGD Optimization Machine Learning PyTorch
ETH Zürich Mar 2025 – May 2025

Monocular Depth Estimation via Self-Attention

Transferred a transformer-based segmentation model (SegFormer) to monocular depth estimation in PyTorch, reaching high accuracy with minimal fine-tuning and beating traditional approaches.

Code Paper PyTorch Computer Vision Transformers
Microsoft · LASEC EPFL Feb 2025 – Jul 2025

Trust and Security of Agentic Systems

Joint Microsoft Research–EPFL project on how LLM agents access personal data and compose decisions, and how to put human consent back in the loop.

Code Report LLM Security Privacy
EPFL Mar 2025 – May 2025

Fuzzing Tmux with OSS-Fuzz and libDebug

Hunted memory bugs in the tmux codebase using state-of-the-art fuzzing with OSS-Fuzz and a libDebug harness.

Code Report Fuzzing C Security
Politecnico di Milano Feb 2024 – Jun 2024

RISC-V Side-Channel Attacks Simulator

Adapted an open-source C++ simulator to emulate side-channel attacks, supervised by Politecnico di Milano faculty.

Report RISC-V C++ Side-Channel Attacks Security
Politecnico di Milano Feb 2024 – May 2024

Codex Naturalis

A Java re-implementation of the board game, playable remotely over RMI and Socket with JavaFX GUI and CLI, plus chat and resilience to disconnections.

Code Java RMI JavaFX Sockets

Get In Touch