@inproceedings{boyang24usenix,

title = {SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models},

author = {Boyang Zhang and Zheng Li and Ziqing Yang and Xinlei He and Michael Backes and Mario Fritz and Yang Zhang},

url = {https://arxiv.org/abs/2310.12665

https://arxiv.org/pdf/2310.12665.pdf},

year  = {2024},

date = {2024-08-24},

booktitle = {USENIX Security Symposium (USENIX)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{greshake23aisec,

title = {Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection},

author = {Kai Greshake and Sahar Abdelnabi and Shailesh Mishra and Christoph Endres and Thorsten Holz and Mario Fritz},

url = {https://arxiv.org/abs/2302.12173

https://arxiv.org/pdf/2302.12173.pdf},

year  = {2023},

date = {2023-11-30},

booktitle = {16th ACM Workshop on Artificial Intelligence and Security (AISec)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abdelnabi23usenix,

title = {Fact-Saboteurs: A Taxonomy of Evidence Manipulation Attacks against Fact-Verification Systems},

author = {Sahar Abdelnabi and Mario Fritz},

url = {https://arxiv.org/abs/2209.03755

https://arxiv.org/pdf/2209.03755.pdf},

year  = {2023},

date = {2023-08-09},

booktitle = {USENIX Security Symposium (USENIX Security)}},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{nokey,

title = {Compromising LLMs: The Advent of AI Malware },

author = {Kai Greshake and Sahar Abdelnabi and Shailesh Mishra and Christoph Endres and Thorsten Holz and Mario Fritz},

url = {https://i.blackhat.com/BH-US-23/Presentations/US-23-Greshake-Compromising-LLMS.pdf},

year  = {2023},

date = {2023-08-09},

booktitle = {BlackHat},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{li23usenix,

title = {UnGANable: Defending Against GAN-based Face Manipulation},

author = {Zheng Li and Ning Yu and Ahmed Salem and Michael Backes and Mario Fritz and Yang Zhang},

url = {https://arxiv.org/abs/2210.00957

https://arxiv.org/pdf/2210.00957.pdf},

year  = {2023},

date = {2023-08-09},

booktitle = {USENIX Security Symposium (USENIX Security)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{chen22neurips,

title = {Private Set Generation with Discriminative Information},

author = {Dingfan Chen and Raouf Kerkouche and Mario Fritz},

url = {https://arxiv.org/abs/2211.04446

https://arxiv.org/pdf/2211.04446.pdf},

year  = {2022},

date = {2022-12-01},

booktitle = {Neural Information Processing Systems (NeurIPS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{usenix22liu,

title = {ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models},

author = {Yugeng Liu and Rui Wen and Xinlei He and Ahmed Salem and Zhikun Zhang and Michael Backes and Emiliano De Cristofaro and Mario Fritz and Yang Zhang},

url = {https://arxiv.org/abs/2102.02551

https://arxiv.org/pdf/2102.02551.pdf},

year  = {2022},

date = {2022-08-22},

urldate = {2022-08-22},

booktitle = {USENIX Security Symposium (USENIX Security)},

keywords = {2022},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wang2022progfed,

title = {ProgFed: Effective, Communication, and Computation Efficient Federated Learning by Progressive Training},

author = {Hui-Po Wang and Sebastian Stich and Yang He and Mario Fritz},

url = {https://proceedings.mlr.press/v162/wang22y/wang22y.pdf

https://github.com/a514514772/ProgFed},

year  = {2022},

date = {2022-07-18},

urldate = {2022-01-01},

booktitle = {International Conference on Machine Learning (ICML)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{boehle22cvpr,

title = {B-cos Networks: Alignment is All We Need for Interpretability},

author = {Moritz Böhle and Mario Fritz and Bernt Schiele},

url = {https://openaccess.thecvf.com/content/CVPR2022/papers/Bohle_B-Cos_Networks_Alignment_Is_All_We_Need_for_Interpretability_CVPR_2022_paper.pdf

https://github.com/moboehle/B-cos},

year  = {2022},

date = {2022-06-19},

urldate = {2022-06-19},

booktitle = {Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abdelnabi22cvpr,

title = {Open-Domain, Content-based, Multi-modal Fact-checking of Out-of-Context Images via Online Resources},

author = {Sahar Abdelnabi and Rakibul Hasan and Mario Fritz},

url = {https://arxiv.org/abs/2112.00061

https://arxiv.org/pdf/2112.00061.pdf},

year  = {2022},

date = {2022-06-19},

urldate = {2022-06-19},

booktitle = {Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yu22iclr,

title = {Responsible Disclosure of Generative Models Using Scalable Fingerprinting},

author = {Ning Yu and Vladislav Skripniuk and Dingfan Chen and Larry S. Davi and Mario Fritz},

url = {https://arxiv.org/abs/2012.08726

https://arxiv.org/pdf/2012.08726.pdf},

year  = {2022},

date = {2022-04-25},

urldate = {2022-04-25},

booktitle = {International Conference on Representation Learning (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{chen22iclr,

title = {RelaxLoss: Defending Membership Inference Attacks without Losing Utility},

author = {Dingfan Chen and Ning Yu and Mario Fritz},

year  = {2022},

date = {2022-04-25},

urldate = {2022-04-25},

booktitle = {International Conference on Representation Learning (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Rahimian22chil,

title = {Practical Challenges in Differentially-Private Federated Survival Analysis of Medical Data},

author = {Shadi Rahimian and Raouf Kerkouche and Ina Kurth and Mario Fritz},

url = {https://arxiv.org/abs/2202.03758

https://arxiv.org/pdf/2202.03758.pdf

},

year  = {2022},

date = {2022-04-07},

urldate = {2022-04-07},

booktitle = {Conference on Health, Inference, and Learning (CHIL)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{ning21iccv1,

title = {Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Data},

author = {Ning Yu and Vladislav Skripniuk and Sahar Abdelnabi and Mario Fritz},

url = {preliminary version:

https://arxiv.org/abs/2007.08457

https://arxiv.org/pdf/2007.08457.pdf},

year  = {2021},

date = {2021-10-12},

booktitle = {International Conference on Computer Vision (ICCV)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{ning21iccv2,

title = {Dual Contrastive Loss and Attention for GANs},

author = {Ning Yu and Guilin Liu and Aysegul Dundar and Andrew Tao and Bryan Catanzaro and Larry Davis and Mario Fritz },

url = {preliminary version:

https://arxiv.org/abs/2103.16748

https://arxiv.org/pdf/2103.16748.pdf},

year  = {2021},

date = {2021-10-11},

booktitle = {International Conference on Computer Vision (ICCV)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{he21ijcai,

title = {Beyond the Spectrum: Detecting Deepfakes via Re-Synthesis},

author = {Yang He and Ning Yu and Margret Keuper and Mario Fritz},

url = {https://cispa.saarland/group/fritz/wp-content/blogs.dir/13/files/2021/05/ijcai21.pdf},

year  = {2021},

date = {2021-08-21},

booktitle = {30th International Joint Conference on Artificial Intelligence (IJCAI)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{moritz21cvpr,

title = {Convolutional Dynamic Alignment Networks for Interpretable Classifications},

author = {Moritz Bohle, Mario Fritz, Bernt Schiele},

url = {https://openaccess.thecvf.com/content/CVPR2021/papers/Bohle_Convolutional_Dynamic_Alignment_Networks_for_Interpretable_Classifications_CVPR_2021_paper.pdf},

year  = {2021},

date = {2021-06-22},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{apratim21cvpr,

title = {Euro-PVI: Pedestrian Vehicle Interactions in Dense Urban Centers},

author = {Apratim Bhattacharyya and Daniel Olmeda Reino and Mario Fritz and Bernt Schiele},

url = {https://openaccess.thecvf.com/content/CVPR2021/papers/Bhattacharyya_Euro-PVI_Pedestrian_Vehicle_Interactions_in_Dense_Urban_Centers_CVPR_2021_paper.pdf

https://www.mpi-inf.mpg.de/departments/computer-vision-and-machine-learning/research/euro-pvi-dataset},

year  = {2021},

date = {2021-06-21},

urldate = {2021-06-21},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wang21cvpr,

title = {Hijack-GAN: Unintended-Use of Pretrained, Black-Box GANs},

author = {Hui-Po Wang and Ning Yu and Mario Fritz},

url = {https://arxiv.org/abs/2011.14107

https://arxiv.org/pdf/2011.14107.pdf},

year  = {2021},

date = {2021-06-19},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abdelnabi21oakland,

title = {Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hiding},

author = {Sahar Abdelnabi and Mario Fritz},

url = {https://arxiv.org/abs/2009.03015

https://arxiv.org/pdf/2009.03015.pdf

https://github.com/S-Abdelnabi/awt

short video: https://www.youtube.com/watch?v=_Wc2OLVfD7Q

long video: https://www.youtube.com/watch?v=3wvgds9bYg4},

year  = {2021},

date = {2021-05-21},

booktitle = {IEEE Symposium on Security and Privacy (S&P)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wacv21ke,

title = {Future Moment Assessment for Action Query},

author = {Qiuhong Ke and Mario Fritz and Bernt Schiele},

url = {https://openaccess.thecvf.com/content/WACV2021/html/Ke_Future_Moment_Assessment_for_Action_Query_WACV_2021_paper.html

https://openaccess.thecvf.com/content/WACV2021/papers/Ke_Future_Moment_Assessment_for_Action_Query_WACV_2021_paper.pdf},

year  = {2021},

date = {2021-01-05},

booktitle = {IEEE Winter Conference on Applications of Computer Vision (WACV ’20)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{neurips20chen,

title = {GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generators},

author = {Dingfan Chen and Tribhuvanesh Orekondy and Mario Fritz},

url = {https://arxiv.org/abs/2006.08265

https://arxiv.org/pdf/2006.08265.pdf},

year  = {2020},

date = {2020-12-06},

booktitle = {Neural Information Processing Systems (NeurIPS)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{chen20ccs,

title = {GAN-Leaks: A Taxonomy of Membership Inference Attacks against GANs},

author = {Dingfan Chen and Ning Yu and Yang Zhang and Mario Fritz},

url = {https://arxiv.org/abs/1909.03935

https://arxiv.org/pdf/1909.03935.pdf},

year  = {2020},

date = {2020-11-09},

booktitle = {ACM Conference on Computer and Communications Security (CCS) },

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abdelnabi20ccs,

title = {VisualPhishNet: Zero-Day Phishing Website Detection by Visual Similarity},

author = {Sahar Abdelnabi and Katharina Krombholz and Mario Fritz},

url = {https://arxiv.org/abs/1909.00300

https://arxiv.org/pdf/1909.00300.pdf},

year  = {2020},

date = {2020-11-09},

booktitle = {ACM Conference on Computer and Communications Security (CCS) },

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{gcpr20bhattacharyya,

title = {Haar Wavelet based Block Autoregressive Flows for Trajectories},

author = {Apratim Bhattacharyya and Christoph-Nikolas Straehle and Mario Fritz and Bernt Schiele},

url = {https://unitc-my.sharepoint.com/personal/iigaf01_cloud_uni-tuebingen_de/Documents/gcpr_vmv_vcbm/gcpr/preprints/Apratim_Bhattacharyy_gcpr_0067_v01.pdf?originalPath=aHR0cHM6Ly91bml0Yy1teS5zaGFyZXBvaW50LmNvbS86YjovZy9wZXJzb25hbC9paWdhZjAxX2Nsb3VkX3VuaS10dWViaW5nZW5fZGUvRVpsOHdqUWRjdXhBa2VpTEo3NmNET3dCd2FQZjZpY2xUSTUxNkJ6VjdmbUV1dz9ydGltZT03YzZyZUgxbzJFZw

https://arxiv.org/abs/2009.09878

https://arxiv.org/pdf/2009.09878.pdf},

year  = {2020},

date = {2020-09-30},

booktitle = {German Conference on Pattern Recognition (GCPR)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{gcpr20sharma,

title = {Long-Tailed Recognition Using Class-Balanced Experts},

author = {Saurabh Sharma and Ning Yu and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/2004.03706

https://arxiv.org/pdf/2004.03706.pdf},

year  = {2020},

date = {2020-09-29},

booktitle = {German Conference on Pattern Recognition (GCPR)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{gcpr20losch,

title = {Semantic Bottlenecks: Quantifying & Improving Inspectability of Deep Representations},

author = {Max Losch and Mario Fritz and Bernt Schiele},

url = {https://unitc-my.sharepoint.com/personal/iigaf01_cloud_uni-tuebingen_de/Documents/gcpr_vmv_vcbm/gcpr/preprints/gcpr_0028_v01.pdf?originalPath=aHR0cHM6Ly91bml0Yy1teS5zaGFyZXBvaW50LmNvbS86YjovZy9wZXJzb25hbC9paWdhZjAxX2Nsb3VkX3VuaS10dWViaW5nZW5fZGUvRVhYM0ZsVEczS2RGaDZ3aDc4T1FBQWNCSGE5VmJwNWFFeDFZUURiSmZER21rdz9ydGltZT1WR052OUgxbzJFZw},

year  = {2020},

date = {2020-09-29},

booktitle = {German Conference on Patter Recognition (GCPR)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{shetty20eccv,

title = {Towards Automated Testing and Robustification by Semantic Adversarial Data Generation},

author = {Rakshith Shetty and Mario Fritz and Bernt Schiele},

url = {https://www.ecva.net/papers/eccv_2020/papers_ECCV/papers/123470477.pdf},

year  = {2020},

date = {2020-08-23},

booktitle = {European Conference on Computer Vision (ECCV)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yu20eccv,

title = {Inclusive GAN: Improving Data and Minority Coverage in Generative Models},

author = {Ning Yu and Ke Li and Peng Zhou and Jitendra Malik and Larry S. Davis and Mario Fritz},

url = {https://arxiv.org/abs/2004.03355

https://arxiv.org/pdf/2004.03355.pdf},

year  = {2020},

date = {2020-08-23},

booktitle = {European Conference on Computer Vision (ECCV)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{he20eccv,

title = {Segmentations-Leak: Membership Inference Attacks and Defenses in Semantic Image Segmentation},

author = {Yang He and Shadi Rahimian and Bernt Schiele and Mario Fritz},

url = {https://github.com/SSAW14/segmentation_membership_inference

https://arxiv.org/abs/1912.09685

https://arxiv.org/pdf/1912.09685.pdf},

year  = {2020},

date = {2020-08-23},

booktitle = {European Conference on Computer Vision (ECCV)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{salem20usenix,

title = {Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning},

author = {Ahmed Salem and Apratim Bhattacharyya and Michael Backes and Mario Fritz and Yang Zhang},

url = {preliminary version:

https://arxiv.org/abs/1904.01067

https://arxiv.org/pdf/1904.01067.pdf},

year  = {2020},

date = {2020-08-12},

booktitle = {USENIX Security Symposium (USENIX Security 20)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{agarwal20cvpr,

title = {Towards Causal VQA: Revealing and Reducing Spurious Correlations by Invariant and Covariant Semantic Editing},

author = {Vedika Agarwal and Rakshith Shetty and Mario Fritz

},

url = {preliminary version:

https://arxiv.org/abs/1912.07538

https://arxiv.org/pdf/1912.07538.pdf

https://rakshithshetty.github.io/CausalVQA/},

year  = {2020},

date = {2020-06-15},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{apratim20cvpr,

title = {Normalizing Flows with Multi-scale Autoregressive Priors},

author = {Apratim Bhattacharyya and Shweta Mahajan and Mario Fritz and Bernt Schiele and Stefan Roth},

url = {https://arxiv.org/abs/2004.03891

https://arxiv.org/pdf/2004.03891.pdf

https://github.com/visinf/mar-scf},

year  = {2020},

date = {2020-06-14},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{hasan20sp,

title = {Automatically Detecting Bystanders in Photos to Reduce Privacy Risks},

author = {Rakibul Hasan and David Crandall and Mario Fritz and Apu Kapadia},

url = {https://homes.luddy.indiana.edu/kapadia/papers/hasan-oakland-20-preprint.pdf

https://www.youtube.com/watch?v=TDupeMj0bXg

https://www.youtube.com/watch?v=uwKM_S8RpTQ

},

year  = {2020},

date = {2020-05-18},

booktitle = {IEEE Symposium on Security and Privacy (S&P)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{orekondy20iclr,

title = {Prediction Poisoning: Utility-Constrained Defenses Against Model Stealing Attacks},

author = {Tribhuvanesh Orekondy and Bernt Schiele and Mario Fritz},

url = {https://arxiv.org/abs/1906.10908

https://arxiv.org/pdf/1906.10908.pdf},

year  = {2020},

date = {2020-04-30},

urldate = {2020-04-30},

booktitle = {International Conference on Representation Learning (ICLR)},

type = {arXiv:1906.10908 },

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yu19iccv,

title = {Attributing Fake Images to GANs: Learning and Analyzing GAN Fingerprints},

author = {Ning Yu and Larry Davis and Mario Fritz},

url = {//arxiv.org/abs/1811.08180

//arxiv.org/pdf/1811.08180.pdf

},

year  = {2019},

date = {2019-10-30},

urldate = {2019-10-30},

booktitle = {International Conference on Computer Vision (ICCV)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{maximov19iccv,

title = {Deep Appearance Maps},

author = {Maxim Maximov and Tobias Ritschel and Laura Leal-Taixe and Mario Fritz},

url = {//arxiv.org/abs/1804.00863

//arxiv.org/pdf/1804.00863.pdf},

year  = {2019},

date = {2019-10-29},

urldate = {2019-10-29},

booktitle = {International Conference on Computer Vision (ICCV)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{orekondy19cvpr,

title = {Knockoff Nets: Stealing Functionality of Black-Box Models },

author = {Tribhuvanesh Orekondy and Bernt Schiele and Mario Fritz},

url = {preliminary version:

https://arxiv.org/abs/1812.02766

https://arxiv.org/pdf/1812.02766},

year  = {2019},

date = {2019-06-18},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{shetty19cvpr,

title = {Not Using the Car to See the Sidewalk: Quantifying and Controlling the Effects of Context in Classification and Segmentation},

author = {Rakshith Shetty and Bernt Schiele and Mario Fritz},

url = {preliminary version:

https://arxiv.org/abs/1812.06707

https://arxiv.org/pdf/1812.06707.pdf},

year  = {2019},

date = {2019-06-17},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{ke19cvpr,

title = {Time-Conditioned Action Anticipation in One Shot},

author = {Qiuhong Ke and Mario Fritz and Bernt Schiele},

year  = {2019},

date = {2019-06-16},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{apratim19iclr,

title = {Bayesian Prediction of Future Street Scenes using Synthetic Likelihoods},

author = {Apratim Bhattacharyya and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/1810.00746

https://arxiv.org/pdf/1810.00746.pdf},

year  = {2019},

date = {2019-05-06},

booktitle = {International Conference on Representation Learning (ICLR)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{ndss19salem,

title = {ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models},

author = {Ahmed Salem and Yang Zhang and Mathias Humbert and Mario Fritz and Michael Backes},

url = {preliminary:

https://arxiv.org/abs/1806.01246

https://arxiv.org/pdf/1806.01246.pdf

},

year  = {2019},

date = {2019-02-24},

urldate = {2019-02-24},

booktitle = {Annual Network and Distributed System Security Symposium (NDSS)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sattar19wacv,

title = {Fashion is Taking Shape: Understanding Clothing Preference Based on Body Shape From Online Sources },

author = {Hosnieh Sattar and Gerard Pons-Moll and Mario Fritz},

url = {preliminary:

//arxiv.org/abs/1807.03235

//arxiv.org/pdf/1807.03235.pdf},

year  = {2019},

date = {2019-01-08},

urldate = {2019-01-08},

booktitle = {IEEE Winter Conference on Applications of Computer Vision (WACV)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{shetty18nips,

title = {Adversarial Scene Editing: Automatic Object Removal from Weak Supervision },

author = {Rakshith Shetty and Mario Fritz and Bernt Schiele},

url = {preliminary:

https://arxiv.org/abs/1806.01911

https://arxiv.org/pdf/1806.01911.pdf},

year  = {2018},

date = {2018-12-03},

booktitle = {Neural Information Processing Systems (NIPS)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{he18eccv,

title = {Diverse Conditional Image Generation by Stochastic Regression with Latent Drop-Out Codes},

author = {Yang He and Bernt Schiele and Mario Fritz},

url = {http://openaccess.thecvf.com/content_ECCV_2018/papers/Yang_He_Diverse_Conditional_Image_ECCV_2018_paper.pdf},

year  = {2018},

date = {2018-09-12},

booktitle = {European Conference on Computer Vision (ECCV)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sun18eccv,

title = {A Hybrid Model for Identity Obfuscation by Face Replacement},

author = {Qianru Sun and Ayush Tewari and Weipeng Xu and Mario Fritz and Christian Theobalt and Bernt Schiele},

url = {https://arxiv.org/abs/1804.04779

https://arxiv.org/pdf/1804.04779.pdf},

year  = {2018},

date = {2018-09-09},

booktitle = {European Conference on Computer Vision},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wagner18eccvw,

title = {Answering Visual What-If Questions: From Actions to Predicted Scene Descriptions},

author = {Misha Wagner and Hector Basevi and Rakshith Shetty and Wenbin Li and Mateusz Malinowski and Mario Fritz and Ales Leonardis},

url = {https://arxiv.org/abs/1809.03707

https://arxiv.org/pdf/1809.03707.pdf},

year  = {2018},

date = {2018-09-08},

booktitle = {Visual Learning and Embodied Agents in Simulation Environments Workshop at European Conference on Computer Vision},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{edgar18cscs,

title = {Sequential Attacks on Agents for Long-Term Adversarial Goals},

author = {Edgar Tretschk and Seong Joon Oh and Mario Fritz}},

year  = {2018},

date = {2018-09-01},

booktitle = {2. ACM Computer Science in Cars Symposium -- Future Challenges in Artificial Intelligence & Security for Autonomous Vehicles},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{usenix18rakshith,

title = {A4NT: Author Attribute Anonymity by Adversarial Training of Neural Machine Translation},

author = {Rakshith Shetty and Bernt Schiele and Mario Fritz},

url = {preliminary version:

https://arxiv.org/abs/1711.01921

https://arxiv.org/pdf/1711.01921.pdf

},

year  = {2018},

date = {2018-08-17},

urldate = {2018-08-17},

booktitle = {27th USENIX Security Symposium (USENIX Security 18)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{apratim18cvprb,

title = {Accurate and Diverse Sampling of Sequences based on a “Best of Many” Sample Objective},

author = {Apratim Bhattacharyya and Bernt Schiele and Mario Fritz},

url = {http://openaccess.thecvf.com/content_cvpr_2018/CameraReady/3890.pdf},

year  = {2018},

date = {2018-06-22},

urldate = {2018-06-22},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{tribhu18cvpr,

title = {Connecting Pixels to Privacy and Utility: Automatic Redaction of Private Information in Images},

author = {Tribhuvanesh Orekondy and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/1712.01066

https://arxiv.org/pdf/1712.01066.pdf},

year  = {2018},

date = {2018-06-18},

urldate = {2018-06-18},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sun18cvpr,

title = {Natural and Effective Obfuscation by Head Inpainting},

author = {Qianru Sun and Liqian Ma and Seong Joon Oh and Luc Van Gool and Bernt Schiele and Mario Fritz},

url = {https://arxiv.org/abs/1711.09001

https://arxiv.org/pdf/1711.09001.pdf},

year  = {2018},

date = {2018-06-18},

urldate = {2018-06-18},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{ma18cvpr,

title = {Disentangled Person Image Generation },

author = {Liqian Ma and Qianru Sun and Stamatios Georgoulis and Luc Van Gool and Bernt Schiele and Mario Fritz},

url = {https://arxiv.org/abs/1712.02621

https://arxiv.org/pdf/1712.02621.pdf},

year  = {2018},

date = {2018-06-18},

urldate = {2018-06-18},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{apratim18cvpr,

title = {Long-Term On-Board Prediction of People in Traffic Scenes under Uncertainty},

author = {Apratim Bhattacharyya and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/1711.09026

https://arxiv.org/pdf/1711.09026.pdf},

year  = {2018},

date = {2018-06-18},

urldate = {2018-06-18},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{joon18icrl,

title = {Towards Reverse-Engineering Black-Box Neural Networks},

author = {Seong Joon Oh and Max Augustin and Bernt Schiele and Mario Fritz},

url = {https://github.com/coallaoh/WhitenBlackBox

https://arxiv.org/abs/1711.01768

https://arxiv.org/pdf/1711.01768.pdf},

year  = {2018},

date = {2018-04-30},

urldate = {2018-04-30},

booktitle = {Internation Conference on Representation Learning (ICLR)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{apratim18aaai,

title = {Long-Term Image Boundary Prediction},

author = {Apratim Bhattacharyya and Mateusz Malinowski and Bernt Schiele and Mario Fritz},

url = {https://www.aaai.org/ocs/index.php/AAAI/AAAI18/paper/viewFile/17280/16540},

year  = {2018},

date = {2018-02-02},

urldate = {2018-02-02},

booktitle = {Association for the Advancement of Artificial Intelligence (AAAI)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sattar17iccvw,

title = {Predicting the Category and Attributes of Visual Search Targets Using Deep Gaze Pooling},

author = {Hosnieh Sattar and Andreas Bulling and Mario Fritz},

url = {https://arxiv.org/abs/1611.10162

https://arxiv.org/pdf/1611.10162.pdf

https://www.youtube.com/watch?v=wPeyK5jkjUU},

year  = {2017},

date = {2017-10-30},

urldate = {2017-10-30},

booktitle = {Mutual Benefits of Cognitive and Computer Vision Workshop at International Conference on Computer Vision (ICCV-W)},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{orekondy17iccv,

title = {Towards a Visual Privacy Advisor: Understanding and Predicting Privacy Risks in Images},

author = {Tribhuvanesh Orekondy and Bernt Schiele and Mario Fritz},

url = {https://arxiv.org/abs/1703.10660

https://arxiv.org/pdf/1703.10660.pdf

https://tribhuvanesh.github.io/vpa/},

year  = {2017},

date = {2017-10-29},

urldate = {2017-10-29},

booktitle = {IEEE International Conference on Computer Vision (ICCV)},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{rakshith17iccv,

title = {Speaking the Same Language: Matching Machine to Human Captions by Adversarial Training},

author = {Rakshith Shetty and Marcus Rohrbach and Lisa Anne Hendricks and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/1703.10476

https://arxiv.org/pdf/1703.10476.pdf},

year  = {2017},

date = {2017-10-28},

urldate = {2017-10-28},

booktitle = {IEEE International Conference on Computer Vision (ICCV)},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{oh17iccv,

title = {Adversarial Image Perturbation for Privacy Protection -- A Game Theory Perspective},

author = {Seong Joon Oh and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/1703.09471

https://arxiv.org/pdf/1703.09471.pdf},

year  = {2017},

date = {2017-10-27},

urldate = {2017-10-27},

booktitle = {IEEE International Conference on Computer Vision (ICCV), 2017},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{stam17iccv,

title = {What Is Around The Camera?},

author = {Stamatios Georgoulis and Konstantinos Rematas and Tobias Ritschel and Mario Fritz and Tinne Tuytelaars and Luc Van Gool},

url = {https://arxiv.org/abs/1611.09325

https://arxiv.org/pdf/1611.09325.pdf},

year  = {2017},

date = {2017-10-26},

urldate = {2017-10-26},

booktitle = {IEEE International Conference on Computer Vision (ICCV)},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{he17gcpr,

title = {Learning Dilation Factors for Semantic Segmentation of Street Scenes},

author = {Yang He and Margret Keuper and Bernt Schiele and Mario Fritz},

url = {https://cispa.saarland/group/fritz/wp-content/blogs.dir/13/files/2020/06/main51.pdf},

year  = {2017},

date = {2017-09-13},

urldate = {2017-09-13},

booktitle = {German Conference on Pattern Recognition (GCPR)},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yang17cvpr,

title = {STD2P: RGBD Semantic Segmentation Using Spatio-Temporal Data-Driven Pooling},

author = {Yang He and Wei-Chen Chiu and Margret Keuper and Mario Fritz},

url = {https://cispa.saarland/group/fritz/wp-content/blogs.dir/13/files/2020/06/cvpr2017.pdf

https://cispa.saarland/group/fritz/wp-content/blogs.dir/13/files/2020/06/2002-supp.pdf},

year  = {2017},

date = {2017-07-25},

urldate = {2017-07-25},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sun17cvpr,

title = {A Domain Based Approach to Social Relation Recognition},

author = {Qianru Sun and Bernt Schiele and Mario Fritz },

url = {https://cispa.saarland/group/fritz/wp-content/blogs.dir/13/files/2020/06/main_paper.pdf

https://cispa.saarland/group/fritz/wp-content/blogs.dir/13/files/2020/06/1289-supp.pdf},

year  = {2017},

date = {2017-07-24},

urldate = {2017-07-24},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{joon17cvpr,

title = {Exploiting saliency for object segmentation from image level labels},

author = {Seong Joon Oh and Rodrigo Benenson and Anna Khoreva and Zeynep Akata and Mario Fritz and Bernt Schiele},

url = {https://cispa.saarland/group/fritz/wp-content/blogs.dir/13/files/2020/06/cvpr2017-1.pdf

https://cispa.saarland/group/fritz/wp-content/blogs.dir/13/files/2020/06/1802-supp.pdf},

year  = {2017},

date = {2017-07-23},

urldate = {2017-07-23},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{xucong17cvprw,

title = {It's Written All Over Your Face: Full-Face Appearance-Based Gaze Estimation},

author = {Xucong Zhang and Yusuke Sugano and Mario Fritz and Andreas Bulling},

url = {https://arxiv.org/abs/1611.08860

https://arxiv.org/pdf/1611.08860.pdf},

year  = {2017},

date = {2017-07-22},

urldate = {2017-07-22},

booktitle = {1st International Workshop on Deep Affective Learning and Context Modeling at Computer Vision and Pattern Recognition Conference (CVPR-W)},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{li17icra,

title = {Visual Stability Prediction for Robotic Manipulation},

author = {Wenbin Li and Ales Leonardis and Mario Fritz},

url = {https://cispa.saarland/group/fritz/wp-content/blogs.dir/13/files/2020/06/icra2017-visualstabilitypredictionforroboticmanipulation.pdf},

year  = {2017},

date = {2017-05-23},

urldate = {2017-05-23},

booktitle = {IEEE International Conference on Robotics and Automation (ICRA)},

note = {to appear},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{joon16eccv,

title = {Faceless Person Recognition; Privacy Implications in Social Media},

author = {Seong Joon Oh and Rodrigo Benenson and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/1607.08438

https://arxiv.org/pdf/1607.08438v1.pdf

},

year  = {2016},

date = {2016-10-11},

booktitle = {European Conference on Computer Vision (ECCV)},

note = {to appear},

keywords = {2016},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sharma16eccvw,

title = {VConv-DAE: Deep Volumetric Shape Learning Without Object Labels},

author = {Abhishek Sharma and Oliver Grau and Mario Fritz},

url = {https://cispa.saarland/group/fritz/vconv-dae-deep-volumetric-shape-learning-without-object-labels/

http://arxiv.org/abs/1604.03755

http://arxiv.org/pdf/1604.03755v3.pdf},

year  = {2016},

date = {2016-10-10},

booktitle = {Geometry Meets Deep Learning Workshop at European Conference on Computer Vision (ECCV-W)},

keywords = {2016},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{chiu16accv,

title = {Towards Segmenting Consumer Stereo Videos: Benchmark, Baselines and Ensembles},

author = {Wei-Chen Chiu and Fabio Galasso and Mario Fritz},

url = {https://arxiv.org/abs/1609.00836

https://arxiv.org/pdf/1609.00836v2.pdf},

year  = {2016},

date = {2016-10-01},

booktitle = {Asian Conference on Computer Vision (ACCV)},

note = {to appear},

keywords = {2016},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{ashkan16bmvc,

title = {Mean Box Pooling: A Rich Image Representation and Output Embedding for the Visual Madlibs Task},

author = {Ashkan Mokarian and Mateusz Malinowski and Mario Fritz},

url = {http://arxiv.org/abs/1608.02717

http://arxiv.org/pdf/1608.02717v1.pdf

},

year  = {2016},

date = {2016-09-19},

booktitle = {British Machine Vision Conference (BMVC)},

note = {to appear},

keywords = {2016},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{rematas16cvpr,

title = {Deep Reflectance Maps },

author = {Konstantinos Rematas and Tobias Ritschel and Mario Fritz and Efstratios Gavves and Tinne Tuytelaars},

url = {http://arxiv.org/abs/1511.04384

http://arxiv.org/pdf/1511.04384v1.pdf

http://homes.cs.washington.edu/~krematas/DRM/},

year  = {2016},

date = {2016-07-01},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2016},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{akata16cvpr,

title = {Multi-Cue Zero-Shot Learning with Strong Supervision},

author = {Zeynep Akata and Mateusz Malinowski and Mario Fritz and Bernt Schiele},

url = {https://www.mpi-inf.mpg.de/index.php?id=2935

http://arxiv.org/abs/1603.08754

http://arxiv.org/pdf/1603.08754v1.pdf

},

year  = {2016},

date = {2016-06-26},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2016},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{aditya-2016-ipic,

title = {I-Pic: A Platform for Privacy-Compliant Image Capture},

author = {Paarijaat Aditya and Rijurekha Sen and Seong Joon Oh and Rodrigo Benenson and Bobby Bhattacharjee and Peter Druschel and Tongtong Wu and Mario Fritz and Bernt Schiele},

url = {https://scalable.mpi-inf.mpg.de/files/2016/05/ipic-mobisys2016.pdf},

year  = {2016},

date = {2016-06-25},

booktitle = {The 14th International Conference on Mobile Systems, Applications, and Services (MobiSys'16)},

address = {Singapore},

keywords = {2016},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{scheer16gcpr,

title = {Learning to Select Long Track Features for  Structure-From-Motion & Visual SLAM },

author = {Jonas Scheer and Mario Fritz and Oliver Grau},

year  = {2016},

date = {2016-06-25},

booktitle = {German Conference on Pattern Recognition (GCPR)},

keywords = {2016},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sreyasi16icmr,

title = {Contextual Media Retrieval Using Natural Language Queries},

author = {Sreyasi Nag Chowdhury and Mateusz Malinowski and Andreas Bulling and Mario Fritz},

url = {http://arxiv.org/abs/1602.04983 

http://arxiv.org/pdf/1602.04983v1.pdf},

year  = {2016},

date = {2016-06-06},

booktitle = {ACM International Conference on Multimedia Retrieval (ICMR)},

note = {to appear},

keywords = {2016},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{li16wacv,

title = {Recognition of Ongoing Complex Activities by Sequence Prediction over a Hierarchical Label Space},

author = {Wenbin Li and Mario Fritz},

url = {https://scalable.mpi-inf.mpg.de/files/2016/01/main_wacv.pdf

http://www.mpi-inf.mpg.de/departments/computer-vision-and-multimodal-computing/research/human-activity-recognition/recognition-of-ongoing-complex-activities-by-sequence-prediction-over-a-hierarchical-label-space/},

year  = {2016},

date = {2016-05-07},

booktitle = {IEEE Winter Conference on Applications of Computer Vision (WACV)},

keywords = {2016},

pubstate = {published},

tppubtype = {inproceedings}

}