@inproceedings{sheth25acl,

title = {CausalGraph2LLM: Evaluating LLMs for Causal Queries},

author = {Ivaxi Sheth and Bahare Fatemi and Mario Fritz},

url = {https://arxiv.org/abs/2410.15939

https://arxiv.org/pdf/2410.15939},

year  = {2025},

date = {2025-07-27},

urldate = {2025-07-27},

booktitle = {Findings of the Association for Computational Linguistics (NAACL)},

abstract = {https://arxiv.org/abs/2410.15939

https://arxiv.org/pdf/2410.15939},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{zhou25acl,

title = {Balancing Diversity and Risk in LLM Sampling: How to Select Your Method and Parameter for Open-Ended Text Generation},

author = {Yuxuan Zhou and Margret Keuper and Mario Fritz},

url = {https://arxiv.org/abs/2408.13586

https://arxiv.org/pdf/2408.13586},

year  = {2025},

date = {2025-07-27},

booktitle = {Annual Meeting of the Association for Computational Linguistics (ACL)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sarath25acl,

title = {A Theory of LLM Sampling: Part Descriptive and Part Prescriptive},

author = {Sarath Sivaprasad and Pramod Kaushik and Sahar Abdelnabi and Mario Fritz},

url = {https://arxiv.org/abs/2402.11005

https://arxiv.org/pdf/2402.11005},

year  = {2025},

date = {2025-07-27},

booktitle = {Annual Meeting of the Association for Computational Linguistics (ACL)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{zhuang25icml,

title = {Stealix: Model Stealing via Prompt Evolution},

author = {Zhixiong Zhuang and Hui-Po Wang and Maria-Irina Nicolae and Mario Fritz},

year  = {2025},

date = {2025-07-13},

booktitle = {International Conference on Machine Learning (ICML)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{anani25icml,

title = {Pixel-level Certified Explanations via Randomized Smoothing},

author = {Alaa Anani and Tobias Lorenz and Mario Fritz and Bernt Schiele},

year  = {2025},

date = {2025-07-13},

booktitle = {International Conference on Machine Learning (ICML)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{beste25dmva,

title = {Exploring the Potential of LLMs for Code Deobfuscation},

author = {David Beste and Grégoire Menguy and Hossein Hajipour and Mario Fritz and Antonio Emanuele and Sébastien Bardin and Thorsten Holz and Thorsten Eisenhofer and Lea Schönherr},

year  = {2025},

date = {2025-07-09},

booktitle = {SIG SIDAR Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{nguyen25iclr,

title = {DocMIA: Document-Level Membership Inference Attacks against DocVQA Models},

author = {Khanh Nguyen and Raouf Kerkouche and Mario Fritz and Dimosthenis Karatzas},

year  = {2025},

date = {2025-04-24},

booktitle = {Thirteenth International Conference on Learning Representations (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{zverev25iclr,

title = {Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?},

author = {Egor Zverev and Sahar Abdelnabi and Soroush Tabesh and Mario Fritz and Christoph H. Lampert},

url = {https://arxiv.org/abs/2403.06833

https://arxiv.org/pdf/2403.06833},

year  = {2025},

date = {2025-04-24},

booktitle = {Thirteenth International Conference on Learning Representations (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abdelnabi25satml,

title = {Get my drift? Catching LLM Task Drift with Activation Deltas},

author = {Sahar Abdelnabi and Aideen Fay and Giovanni Cherubin and Ahmed Salem and Mario Fritz and Andrew Paverd},

url = {https://github.com/microsoft/TaskTracker},

year  = {2025},

date = {2025-04-09},

urldate = {2025-04-09},

booktitle = {IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)

},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{shen25aaai,

title = {Medical Multimodal Model Stealing Attacks via Adversarial Domain Alignment},

author = {Yaling Shen and Zhixiong Zhuang and Kun Yuan and Maria-Irina Nicolae and Nassir Navab and Nicolas Padoy and Mario Fritz },

url = {https://ojs.aaai.org/index.php/AAAI/article/view/32734

https://ojs.aaai.org/index.php/AAAI/article/view/32734/34889

},

year  = {2025},

date = {2025-02-25},

urldate = {2025-02-25},

booktitle = {Association for the Advancement of Artificial Intelligence (AAAI)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wang24neurips,

title = {Language Models as Zero-shot Lossless Gradient Compressors: Towards General Neural Parameter Prior Models},

author = {Hui-Po Wang and Mario Fritz},

url = {https://arxiv.org/abs/2409.17836

https://arxiv.org/pdf/2409.17836},

year  = {2024},

date = {2024-12-10},

booktitle = {Neural Information Processing Systems (NeurIPS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abdelnabi24neurips,

title = {Cooperation, Competition, and Maliciousness: LLM-Stakeholders Interactive Negotiation},

author = {Sahar Abdelnabi and Amr Gomaa and Sarath Sivaprasad andLea Schönherr and Mario Fritz},

url = {https://arxiv.org/abs/2309.17234

https://arxiv.org/pdf/2309.17234},

year  = {2024},

date = {2024-12-10},

booktitle = {Neural Information Processing Systems (NeurIPS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{llmctf24neurips,

title = {Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition},

author = {Edoardo Debenedetti and Javier Rando and Daniel Paleka and Silaghi Fineas Florin and Dragos Albastroiu and Niv Cohen and Yuval Lemberg and Reshmi Ghosh and Rui Wen and Ahmed Salem and Giovanni Cherubin and Santiago Zanella-Beguelin and Robin Schmid and Victor Klemm and Takahiro Miki and Chenhao Li and Stefan Kraft and Mario Fritz and Florian Tramèr and Sahar Abdelnabi and Lea Schönherr},

url = {https://arxiv.org/abs/2406.07954

https://arxiv.org/pdf/2406.07954},

year  = {2024},

date = {2024-12-10},

booktitle = {Neural Information Processing Systems (NeurIPS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{strobel24neurips,

title = {LLM2Swarm: Robot Swarms that Responsively Reason, Plan, and Collaborate through LLMs},

author = {Volker Strobel and Marco Dorigo and Mario Fritz},

url = {https://arxiv.org/abs/2410.11387

https://arxiv.org/pdf/2410.11387},

year  = {2024},

date = {2024-12-09},

urldate = {2024-12-11},

booktitle = {NeurIPS Workshop on Open-World Agents (NeurIPS-W) },

howpublished = {Open-World Agents Workshop (NeurIPS-W) },

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sheth24neuripsw1,

title = {Hypothesizing Missing Causal Variables with LLMs},

author = {Ivaxi Sheth and Sahar Abdelnabi and Mario Fritz},

url = {https://arxiv.org/abs/2409.02604

https://arxiv.org/pdf/2409.02604},

year  = {2024},

date = {2024-12-09},

booktitle = {NeurIPS Workshop on CaLM: Causality and Large Models (NeurIPS-W)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sheth24neuripsw2,

title = {CausalGraph2LLM: Evaluating LLMs for Causal Queries},

author = {Ivaxi Sheth and Bahare Fatemi and Mario Fritz},

url = {https://arxiv.org/abs/2410.15939

https://arxiv.org/pdf/2410.15939},

year  = {2024},

date = {2024-12-09},

booktitle = {NeurIPS Workshop on CaLM: Causality and Large Models (NeurIPS-W)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{gupta-etal-2024-llm,

title = {LLM Task Interference: An Initial Study on the Impact of Task-Switch in Conversational History},

author = {Akash Gupta and Ivaxi Sheth and Vyas Raina and Mark Gales and Mario Fritz},

editor = {Yaser Al-Onaizan and Mohit Bansal and Yun-Nung Chen},

url = {https://aclanthology.org/2024.emnlp-main.811

https://aclanthology.org/2024.emnlp-main.811.pdf},

year  = {2024},

date = {2024-11-01},

urldate = {2024-11-01},

booktitle = {Proceedings of the 2024 Conference on Empirical Methods in Natural Language Processing (EMNLP)},

pages = {14633–14652},

publisher = {Association for Computational Linguistics},

address = {Miami, Florida, USA},

abstract = {With the recent emergence of powerful instruction-tuned large language models (LLMs), various helpful conversational Artificial Intelligence (AI) systems have been deployed across many applications. When prompted by users, these AI systems successfully perform a wide range of tasks as part of a conversation. To provide some sort of memory and context, such approaches typically condition their output on the entire conversational history. Although this sensitivity to the conversational history can often lead to improved performance on subsequent tasks, we find that performance can in fact also be negatively impacted, if there is a _task-switch_. To the best of our knowledge, our work makes the first attempt to formalize the study of such vulnerabilities and interference of tasks in conversational LLMs caused by task-switches in the conversational history. Our experiments across 5 datasets with 15 task switches using popular LLMs reveal that many of the task-switches can lead to significant performance degradation.},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{xin24ecai,

title = {Inside the Black Box: Detecting Data Leakage in Pre-trained Language Encoders},

author = {Yuan Xin and Zheng Li and Ning Yu and Dingfan Chen and Mario Fritz and Michael Backes and Yang Zhang},

url = {https://arxiv.org/abs/2408.11046

https://arxiv.org/pdf/2408.11046},

year  = {2024},

date = {2024-10-19},

urldate = {2024-10-19},

booktitle = {European Conference on Artificial Intelligence (ECAI)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{lorenz24gcpr,

title = {FullCert: Deterministic End-to-End Certification for Training and Inference of Neural Networks},

author = {Tobias Lorenz and Marta Kwiatkowska and Mario Fritz},

url = {https://arxiv.org/abs/2406.11522

https://arxiv.org/pdf/2406.11522},

year  = {2024},

date = {2024-09-10},

urldate = {2024-09-10},

booktitle = {German Conference on Pattern Recognition (GCPR) },

note = {to appear},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{tito24icdar,

title = {Privacy-Aware Document Visual Question Answering},

author = {Rubèn Pérez Tito and Khanh Nguyen and Marlon Tobaben and Raouf Kerkouche and Mohamed Ali Souibgui and Gangsoo Jung and Joonas Jälkö and Vincent Poulain D'Andecy and Aurelie Joseph and Lei Kang and Ernest Valveny and Antti Honkela and Mario Fritz and Dimosthenis Karatzas},

url = {https://arxiv.org/pdf/2312.10108},

year  = {2024},

date = {2024-08-30},

booktitle = {International Conference on Document Analysis and Recognition (ICDAR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{boyang24usenix,

title = {SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models},

author = {Boyang Zhang and Zheng Li and Ziqing Yang and Xinlei He and Michael Backes and Mario Fritz and Yang Zhang},

url = {https://arxiv.org/abs/2310.12665

https://arxiv.org/pdf/2310.12665.pdf},

year  = {2024},

date = {2024-08-24},

booktitle = {USENIX Security Symposium (USENIX)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{zhuang24icml,

title = {Stealthy Imitation: Reward-guided Environment-free Policy Stealing},

author = {Zhixiong Zhuang and Maria-Irina Nicolae and Mario Fritz},

url = {https://arxiv.org/abs/2405.07004

https://arxiv.org/pdf/2405.07004},

year  = {2024},

date = {2024-07-21},

urldate = {2024-07-21},

booktitle = {International Conference on Machine Learning (ICML)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{anani24icml,

title = {Adaptive Hierarchical Certification for Segmentation using Randomized Smoothing},

author = {Alaa Anani and Tobias Lorenz and Bernt Schiele and Mario Fritz},

url = {https://arxiv.org/abs/2402.08400

https://arxiv.org/pdf/2402.08400},

year  = {2024},

date = {2024-07-21},

booktitle = {International Conference on Machine Learning (ICML)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{zhou24icml,

title = {MultiMax: Sparse and Multi-Modal Attention Learning},

author = {Yuxuan Zhou and Mario Fritz and Margret Keuper},

url = {https://arxiv.org/abs/2406.01189

https://arxiv.org/pdf/2406.01189},

year  = {2024},

date = {2024-07-21},

urldate = {2024-07-21},

booktitle = {International Conference on Machine Learning (ICML)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{chen24pets,

title = {Towards Biologically Plausible and Private Gene Expression Data Generation},

author = {Dingfan Chen and Marie Oestreich and Tejumade Afonja and Raouf Kerkouche and Matthias Becker and Mario Fritz},

url = {https://arxiv.org/abs/2402.04912

https://arxiv.org/pdf/2402.04912.pdf},

year  = {2024},

date = {2024-07-15},

urldate = {2024-07-15},

booktitle = {The 24th Privacy Enhancing Technologies Symposium (PETS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wang24pets,

title = {FedLAP-DP: Federated Learning by Sharing Differentially Private Loss Approximations},

author = {Hui-Po Wang and Dingfan Chen and Raouf Kerkouche and Mario Fritz},

url = {https://arxiv.org/abs/2302.01068

https://arxiv.org/pdf/2302.01068},

year  = {2024},

date = {2024-07-15},

booktitle = {The 24th Privacy Enhancing Technologies Symposium (PETS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{weil24stast,

title = {Tell me what you like and I know what you will share: Topical interest influences behavior toward news from high and low credible sources},

author = {Rebecca Weil and Sahar Abdelnabi and Mario Fritz and Rakibul Hasan	},

url = {https://www.computer.org/csdl/proceedings-article/eurospw/2024/672900a504/1ZyWJ8iwiys},

year  = {2024},

date = {2024-07-02},

urldate = {2024-07-02},

booktitle = {4th International Workshop on Socio-Technical Aspects in Security},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{hajipour24naacl,

title = {SimSCOOD: Systematic Analysis of Out-of-Distribution Generalization in Fine-tuned Source Code Models},

author = {Hossein Hajipour and Ning Yu and Cristian-Alexandru Staicu and Mario Fritz},

url = {https://arxiv.org/abs/2210.04802

https://arxiv.org/pdf/2210.04802},

year  = {2024},

date = {2024-06-16},

urldate = {2024-06-16},

booktitle = {Findings of the Association for Computational Linguistics: NAACL 2024},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{zhu14naacl,

title = {PoLLMgraph: Unraveling Hallucinations in Large Language Models via State Transition Dynamics},

author = {Derui Zhu and Dingfan Chen and Qing Li and Zongxiong Chen and Lei Ma and Jens Grossklags and Mario Fritz},

url = {https://arxiv.org/abs/2404.04722

https://arxiv.org/pdf/2404.04722},

year  = {2024},

date = {2024-06-16},

urldate = {2024-06-16},

booktitle = {Findings of the Association for Computational Linguistics: NAACL 2024},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{zverev24setllm,

title = {Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?},

author = { Egor Zverev and Sahar Abdelnabi and Mario Fritz and Christoph H. Lampert},

url = {https://arxiv.org/abs/2403.06833

https://arxiv.org/pdf/2403.06833},

year  = {2024},

date = {2024-05-11},

urldate = {2024-05-11},

booktitle = {Workshop on Secure and Trustworthy Large Language Models at ICLR},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abdelnabi24agents,

title = {LLM-Deliberation: Evaluating LLMs with Interactive Multi-Agent Negotiation Games},

author = {Sahar Abdelnabi and Amr Gomaa and Sarath Sivaprasad and  Lea Schönherr  and Mario Fritz},

url = {https://arxiv.org/pdf/2309.17234},

year  = {2024},

date = {2024-05-11},

urldate = {2024-05-11},

booktitle = {ICLR 2024 Workshop on LLM Agents},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{losch24iclr,

title = {On Adversarial Training without Perturbing All Examples},

author = {Max Losch and Mohamed Omran and David Stutz and Mario Fritz and Bernt Schiele},

url = {https://openreview.net/forum?id=aS2Yl8s5OG

https://openreview.net/pdf?id=aS2Yl8s5OG},

year  = {2024},

date = {2024-05-07},

urldate = {2024-05-07},

booktitle = {The Twelfth International Conference on Learning Representations (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{hajipour24satml,

title = {CodeLMSec Benchmark: Systematically Evaluating and Finding Security Vulnerabilities in Black-Box Code Language Models},

author = {Hossein Hajipour and Keno Hassler and Thorsten Holz and Lea Schönherr and Mario Fritz},

url = {https://arxiv.org/abs/2302.04012

https://arxiv.org/pdf/2302.04012.pdf},

year  = {2024},

date = {2024-04-09},

urldate = {2024-04-09},

booktitle = {2nd IEEE Conference on Secure and Trustworthy Machine Learning (SATML)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{greshake23aisec,

title = {Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection},

author = {Kai Greshake and Sahar Abdelnabi and Shailesh Mishra and Christoph Endres and Thorsten Holz and Mario Fritz},

url = {https://arxiv.org/abs/2302.12173

https://arxiv.org/pdf/2302.12173.pdf},

year  = {2023},

date = {2023-11-30},

booktitle = {16th ACM Workshop on Artificial Intelligence and Security (AISec)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{lorenz23aisec,

title = {Certifiers Make Neural Networks Vulnerable to Availability Attacks},

author = {Tobias Lorenz, Marta Kwiatkowska, Mario Fritz},

url = {https://arxiv.org/abs/2108.11299

https://arxiv.org/pdf/2108.11299.pdf},

year  = {2023},

date = {2023-11-30},

urldate = {2024-11-30},

booktitle = {16th ACM Workshop on Artificial Intelligence and Security (AISec)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{losch23gcpr,

title = {Certified Robust Models with Slack Control and Large Lipschitz Constants},

author = {Max Losch and David Stutz and Bernt Schiele and Mario Fritz },

url = {https://arxiv.org/abs/2309.06166

https://arxiv.org/pdf/2309.06166.pdf},

year  = {2023},

date = {2023-09-19},

urldate = {2024-09-19},

booktitle = {DAGM German Conference on Pattern Recognition (GCPR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abdelnabi23usenix,

title = {Fact-Saboteurs: A Taxonomy of Evidence Manipulation Attacks against Fact-Verification Systems},

author = {Sahar Abdelnabi and Mario Fritz},

url = {https://arxiv.org/abs/2209.03755

https://arxiv.org/pdf/2209.03755.pdf},

year  = {2023},

date = {2023-08-09},

booktitle = {USENIX Security Symposium (USENIX Security)}},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{nokey,

title = {Compromising LLMs: The Advent of AI Malware },

author = {Kai Greshake and Sahar Abdelnabi and Shailesh Mishra and Christoph Endres and Thorsten Holz and Mario Fritz},

url = {https://i.blackhat.com/BH-US-23/Presentations/US-23-Greshake-Compromising-LLMS.pdf},

year  = {2023},

date = {2023-08-09},

booktitle = {BlackHat},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{li23usenix,

title = {UnGANable: Defending Against GAN-based Face Manipulation},

author = {Zheng Li and Ning Yu and Ahmed Salem and Michael Backes and Mario Fritz and Yang Zhang},

url = {https://arxiv.org/abs/2210.00957

https://arxiv.org/pdf/2210.00957.pdf},

year  = {2023},

date = {2023-08-09},

booktitle = {USENIX Security Symposium (USENIX Security)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{DBLP:conf/acsac/StivalaAMGFP23,

title = {From Attachments to SEO: Click Here to Learn More about Clickbait  PDFs!},

author = {Giada Stivala and Sahar Abdelnabi and Andrea Mengascini and Mariano Graziano and Mario Fritz and Giancarlo Pellegrino},

url = {https://doi.org/10.1145/3627106.3627172},

doi = {10.1145/3627106.3627172},

year  = {2023},

date = {2023-01-01},

urldate = {2023-01-01},

booktitle = {Annual Computer Security Applications Conference, ACSAC 2023, Austin, 

 TX, USA, December 4-8, 2023},

pages = {14–28},

publisher = {ACM},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{DBLP:conf/wpes/KerkoucheAF23,

title = {Client-specific Property Inference against Secure Aggregation in Federated  Learning},

author = {Raouf Kerkouche and Gergely Ács and Mario Fritz},

url = {https://doi.org/10.1145/3603216.3624964

https://arxiv.org/abs/2303.03908},

year  = {2023},

date = {2023-01-01},

urldate = {2023-01-01},

booktitle = {Proceedings of the 22nd Workshop on Privacy in the Electronic Society (WPES)},

publisher = {ACM},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{chen22neurips,

title = {Private Set Generation with Discriminative Information},

author = {Dingfan Chen and Raouf Kerkouche and Mario Fritz},

url = {https://arxiv.org/abs/2211.04446

https://arxiv.org/pdf/2211.04446.pdf},

year  = {2022},

date = {2022-12-01},

booktitle = {Neural Information Processing Systems (NeurIPS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{usenix22liu,

title = {ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models},

author = {Yugeng Liu and Rui Wen and Xinlei He and Ahmed Salem and Zhikun Zhang and Michael Backes and Emiliano De Cristofaro and Mario Fritz and Yang Zhang},

url = {https://arxiv.org/abs/2102.02551

https://arxiv.org/pdf/2102.02551.pdf},

year  = {2022},

date = {2022-08-22},

urldate = {2022-08-22},

booktitle = {USENIX Security Symposium (USENIX Security)},

keywords = {2022},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wang2022progfed,

title = {ProgFed: Effective, Communication, and Computation Efficient Federated Learning by Progressive Training},

author = {Hui-Po Wang and Sebastian Stich and Yang He and Mario Fritz},

url = {https://proceedings.mlr.press/v162/wang22y/wang22y.pdf

https://github.com/a514514772/ProgFed},

year  = {2022},

date = {2022-07-18},

urldate = {2022-01-01},

booktitle = {International Conference on Machine Learning (ICML)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{boehle22cvpr,

title = {B-cos Networks: Alignment is All We Need for Interpretability},

author = {Moritz Böhle and Mario Fritz and Bernt Schiele},

url = {https://openaccess.thecvf.com/content/CVPR2022/papers/Bohle_B-Cos_Networks_Alignment_Is_All_We_Need_for_Interpretability_CVPR_2022_paper.pdf

https://github.com/moboehle/B-cos},

year  = {2022},

date = {2022-06-19},

urldate = {2022-06-19},

booktitle = {Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abdelnabi22cvpr,

title = {Open-Domain, Content-based, Multi-modal Fact-checking of Out-of-Context Images via Online Resources},

author = {Sahar Abdelnabi and Rakibul Hasan and Mario Fritz},

url = {https://arxiv.org/abs/2112.00061

https://arxiv.org/pdf/2112.00061.pdf},

year  = {2022},

date = {2022-06-19},

urldate = {2022-06-19},

booktitle = {Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yu22iclr,

title = {Responsible Disclosure of Generative Models Using Scalable Fingerprinting},

author = {Ning Yu and Vladislav Skripniuk and Dingfan Chen and Larry S. Davi and Mario Fritz},

url = {https://arxiv.org/abs/2012.08726

https://arxiv.org/pdf/2012.08726.pdf},

year  = {2022},

date = {2022-04-25},

urldate = {2022-04-25},

booktitle = {International Conference on Representation Learning (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{chen22iclr,

title = {RelaxLoss: Defending Membership Inference Attacks without Losing Utility},

author = {Dingfan Chen and Ning Yu and Mario Fritz},

year  = {2022},

date = {2022-04-25},

urldate = {2022-04-25},

booktitle = {International Conference on Representation Learning (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Rahimian22chil,

title = {Practical Challenges in Differentially-Private Federated Survival Analysis of Medical Data},

author = {Shadi Rahimian and Raouf Kerkouche and Ina Kurth and Mario Fritz},

url = {https://arxiv.org/abs/2202.03758

https://arxiv.org/pdf/2202.03758.pdf

},

year  = {2022},

date = {2022-04-07},

urldate = {2022-04-07},

booktitle = {Conference on Health, Inference, and Learning (CHIL)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{ning21iccv1,

title = {Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Data},

author = {Ning Yu and Vladislav Skripniuk and Sahar Abdelnabi and Mario Fritz},

url = {preliminary version:

https://arxiv.org/abs/2007.08457

https://arxiv.org/pdf/2007.08457.pdf},

year  = {2021},

date = {2021-10-12},

booktitle = {International Conference on Computer Vision (ICCV)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{ning21iccv2,

title = {Dual Contrastive Loss and Attention for GANs},

author = {Ning Yu and Guilin Liu and Aysegul Dundar and Andrew Tao and Bryan Catanzaro and Larry Davis and Mario Fritz },

url = {preliminary version:

https://arxiv.org/abs/2103.16748

https://arxiv.org/pdf/2103.16748.pdf},

year  = {2021},

date = {2021-10-11},

booktitle = {International Conference on Computer Vision (ICCV)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{he21ijcai,

title = {Beyond the Spectrum: Detecting Deepfakes via Re-Synthesis},

author = {Yang He and Ning Yu and Margret Keuper and Mario Fritz},

url = {https://cispa.saarland/group/fritz/wp-content/blogs.dir/13/files/2021/05/ijcai21.pdf},

year  = {2021},

date = {2021-08-21},

booktitle = {30th International Joint Conference on Artificial Intelligence (IJCAI)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{moritz21cvpr,

title = {Convolutional Dynamic Alignment Networks for Interpretable Classifications},

author = {Moritz Bohle, Mario Fritz, Bernt Schiele},

url = {https://openaccess.thecvf.com/content/CVPR2021/papers/Bohle_Convolutional_Dynamic_Alignment_Networks_for_Interpretable_Classifications_CVPR_2021_paper.pdf},

year  = {2021},

date = {2021-06-22},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{apratim21cvpr,

title = {Euro-PVI: Pedestrian Vehicle Interactions in Dense Urban Centers},

author = {Apratim Bhattacharyya and Daniel Olmeda Reino and Mario Fritz and Bernt Schiele},

url = {https://openaccess.thecvf.com/content/CVPR2021/papers/Bhattacharyya_Euro-PVI_Pedestrian_Vehicle_Interactions_in_Dense_Urban_Centers_CVPR_2021_paper.pdf

https://www.mpi-inf.mpg.de/departments/computer-vision-and-machine-learning/research/euro-pvi-dataset},

year  = {2021},

date = {2021-06-21},

urldate = {2021-06-21},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wang21cvpr,

title = {Hijack-GAN: Unintended-Use of Pretrained, Black-Box GANs},

author = {Hui-Po Wang and Ning Yu and Mario Fritz},

url = {https://arxiv.org/abs/2011.14107

https://arxiv.org/pdf/2011.14107.pdf},

year  = {2021},

date = {2021-06-19},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abdelnabi21oakland,

title = {Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hiding},

author = {Sahar Abdelnabi and Mario Fritz},

url = {https://arxiv.org/abs/2009.03015

https://arxiv.org/pdf/2009.03015.pdf

https://github.com/S-Abdelnabi/awt

short video: https://www.youtube.com/watch?v=_Wc2OLVfD7Q

long video: https://www.youtube.com/watch?v=3wvgds9bYg4},

year  = {2021},

date = {2021-05-21},

booktitle = {IEEE Symposium on Security and Privacy (S&P)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wacv21ke,

title = {Future Moment Assessment for Action Query},

author = {Qiuhong Ke and Mario Fritz and Bernt Schiele},

url = {https://openaccess.thecvf.com/content/WACV2021/html/Ke_Future_Moment_Assessment_for_Action_Query_WACV_2021_paper.html

https://openaccess.thecvf.com/content/WACV2021/papers/Ke_Future_Moment_Assessment_for_Action_Query_WACV_2021_paper.pdf},

year  = {2021},

date = {2021-01-05},

booktitle = {IEEE Winter Conference on Applications of Computer Vision (WACV ’20)},

keywords = {2021},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{neurips20chen,

title = {GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generators},

author = {Dingfan Chen and Tribhuvanesh Orekondy and Mario Fritz},

url = {https://arxiv.org/abs/2006.08265

https://arxiv.org/pdf/2006.08265.pdf},

year  = {2020},

date = {2020-12-06},

booktitle = {Neural Information Processing Systems (NeurIPS)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{chen20ccs,

title = {GAN-Leaks: A Taxonomy of Membership Inference Attacks against GANs},

author = {Dingfan Chen and Ning Yu and Yang Zhang and Mario Fritz},

url = {https://arxiv.org/abs/1909.03935

https://arxiv.org/pdf/1909.03935.pdf},

year  = {2020},

date = {2020-11-09},

booktitle = {ACM Conference on Computer and Communications Security (CCS) },

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abdelnabi20ccs,

title = {VisualPhishNet: Zero-Day Phishing Website Detection by Visual Similarity},

author = {Sahar Abdelnabi and Katharina Krombholz and Mario Fritz},

url = {https://arxiv.org/abs/1909.00300

https://arxiv.org/pdf/1909.00300.pdf},

year  = {2020},

date = {2020-11-09},

booktitle = {ACM Conference on Computer and Communications Security (CCS) },

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{gcpr20bhattacharyya,

title = {Haar Wavelet based Block Autoregressive Flows for Trajectories},

author = {Apratim Bhattacharyya and Christoph-Nikolas Straehle and Mario Fritz and Bernt Schiele},

url = {https://unitc-my.sharepoint.com/personal/iigaf01_cloud_uni-tuebingen_de/Documents/gcpr_vmv_vcbm/gcpr/preprints/Apratim_Bhattacharyy_gcpr_0067_v01.pdf?originalPath=aHR0cHM6Ly91bml0Yy1teS5zaGFyZXBvaW50LmNvbS86YjovZy9wZXJzb25hbC9paWdhZjAxX2Nsb3VkX3VuaS10dWViaW5nZW5fZGUvRVpsOHdqUWRjdXhBa2VpTEo3NmNET3dCd2FQZjZpY2xUSTUxNkJ6VjdmbUV1dz9ydGltZT03YzZyZUgxbzJFZw

https://arxiv.org/abs/2009.09878

https://arxiv.org/pdf/2009.09878.pdf},

year  = {2020},

date = {2020-09-30},

booktitle = {German Conference on Pattern Recognition (GCPR)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{gcpr20sharma,

title = {Long-Tailed Recognition Using Class-Balanced Experts},

author = {Saurabh Sharma and Ning Yu and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/2004.03706

https://arxiv.org/pdf/2004.03706.pdf},

year  = {2020},

date = {2020-09-29},

booktitle = {German Conference on Pattern Recognition (GCPR)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{gcpr20losch,

title = {Semantic Bottlenecks: Quantifying & Improving Inspectability of Deep Representations},

author = {Max Losch and Mario Fritz and Bernt Schiele},

url = {https://unitc-my.sharepoint.com/personal/iigaf01_cloud_uni-tuebingen_de/Documents/gcpr_vmv_vcbm/gcpr/preprints/gcpr_0028_v01.pdf?originalPath=aHR0cHM6Ly91bml0Yy1teS5zaGFyZXBvaW50LmNvbS86YjovZy9wZXJzb25hbC9paWdhZjAxX2Nsb3VkX3VuaS10dWViaW5nZW5fZGUvRVhYM0ZsVEczS2RGaDZ3aDc4T1FBQWNCSGE5VmJwNWFFeDFZUURiSmZER21rdz9ydGltZT1WR052OUgxbzJFZw},

year  = {2020},

date = {2020-09-29},

booktitle = {German Conference on Patter Recognition (GCPR)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{shetty20eccv,

title = {Towards Automated Testing and Robustification by Semantic Adversarial Data Generation},

author = {Rakshith Shetty and Mario Fritz and Bernt Schiele},

url = {https://www.ecva.net/papers/eccv_2020/papers_ECCV/papers/123470477.pdf},

year  = {2020},

date = {2020-08-23},

booktitle = {European Conference on Computer Vision (ECCV)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yu20eccv,

title = {Inclusive GAN: Improving Data and Minority Coverage in Generative Models},

author = {Ning Yu and Ke Li and Peng Zhou and Jitendra Malik and Larry S. Davis and Mario Fritz},

url = {https://arxiv.org/abs/2004.03355

https://arxiv.org/pdf/2004.03355.pdf},

year  = {2020},

date = {2020-08-23},

booktitle = {European Conference on Computer Vision (ECCV)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{he20eccv,

title = {Segmentations-Leak: Membership Inference Attacks and Defenses in Semantic Image Segmentation},

author = {Yang He and Shadi Rahimian and Bernt Schiele and Mario Fritz},

url = {https://github.com/SSAW14/segmentation_membership_inference

https://arxiv.org/abs/1912.09685

https://arxiv.org/pdf/1912.09685.pdf},

year  = {2020},

date = {2020-08-23},

booktitle = {European Conference on Computer Vision (ECCV)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{salem20usenix,

title = {Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning},

author = {Ahmed Salem and Apratim Bhattacharyya and Michael Backes and Mario Fritz and Yang Zhang},

url = {preliminary version:

https://arxiv.org/abs/1904.01067

https://arxiv.org/pdf/1904.01067.pdf},

year  = {2020},

date = {2020-08-12},

booktitle = {USENIX Security Symposium (USENIX Security 20)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{agarwal20cvpr,

title = {Towards Causal VQA: Revealing and Reducing Spurious Correlations by Invariant and Covariant Semantic Editing},

author = {Vedika Agarwal and Rakshith Shetty and Mario Fritz

},

url = {preliminary version:

https://arxiv.org/abs/1912.07538

https://arxiv.org/pdf/1912.07538.pdf

https://rakshithshetty.github.io/CausalVQA/},

year  = {2020},

date = {2020-06-15},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{apratim20cvpr,

title = {Normalizing Flows with Multi-scale Autoregressive Priors},

author = {Apratim Bhattacharyya and Shweta Mahajan and Mario Fritz and Bernt Schiele and Stefan Roth},

url = {https://arxiv.org/abs/2004.03891

https://arxiv.org/pdf/2004.03891.pdf

https://github.com/visinf/mar-scf},

year  = {2020},

date = {2020-06-14},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{hasan20sp,

title = {Automatically Detecting Bystanders in Photos to Reduce Privacy Risks},

author = {Rakibul Hasan and David Crandall and Mario Fritz and Apu Kapadia},

url = {https://homes.luddy.indiana.edu/kapadia/papers/hasan-oakland-20-preprint.pdf

https://www.youtube.com/watch?v=TDupeMj0bXg

https://www.youtube.com/watch?v=uwKM_S8RpTQ

},

year  = {2020},

date = {2020-05-18},

booktitle = {IEEE Symposium on Security and Privacy (S&P)},

keywords = {2020},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{orekondy20iclr,

title = {Prediction Poisoning: Utility-Constrained Defenses Against Model Stealing Attacks},

author = {Tribhuvanesh Orekondy and Bernt Schiele and Mario Fritz},

url = {https://arxiv.org/abs/1906.10908

https://arxiv.org/pdf/1906.10908.pdf},

year  = {2020},

date = {2020-04-30},

urldate = {2020-04-30},

booktitle = {International Conference on Representation Learning (ICLR)},

type = {arXiv:1906.10908 },

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{yu19iccv,

title = {Attributing Fake Images to GANs: Learning and Analyzing GAN Fingerprints},

author = {Ning Yu and Larry Davis and Mario Fritz},

url = {//arxiv.org/abs/1811.08180

//arxiv.org/pdf/1811.08180.pdf

},

year  = {2019},

date = {2019-10-30},

urldate = {2019-10-30},

booktitle = {International Conference on Computer Vision (ICCV)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{maximov19iccv,

title = {Deep Appearance Maps},

author = {Maxim Maximov and Tobias Ritschel and Laura Leal-Taixe and Mario Fritz},

url = {//arxiv.org/abs/1804.00863

//arxiv.org/pdf/1804.00863.pdf},

year  = {2019},

date = {2019-10-29},

urldate = {2019-10-29},

booktitle = {International Conference on Computer Vision (ICCV)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{orekondy19cvpr,

title = {Knockoff Nets: Stealing Functionality of Black-Box Models },

author = {Tribhuvanesh Orekondy and Bernt Schiele and Mario Fritz},

url = {preliminary version:

https://arxiv.org/abs/1812.02766

https://arxiv.org/pdf/1812.02766},

year  = {2019},

date = {2019-06-18},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{shetty19cvpr,

title = {Not Using the Car to See the Sidewalk: Quantifying and Controlling the Effects of Context in Classification and Segmentation},

author = {Rakshith Shetty and Bernt Schiele and Mario Fritz},

url = {preliminary version:

https://arxiv.org/abs/1812.06707

https://arxiv.org/pdf/1812.06707.pdf},

year  = {2019},

date = {2019-06-17},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{ke19cvpr,

title = {Time-Conditioned Action Anticipation in One Shot},

author = {Qiuhong Ke and Mario Fritz and Bernt Schiele},

year  = {2019},

date = {2019-06-16},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{apratim19iclr,

title = {Bayesian Prediction of Future Street Scenes using Synthetic Likelihoods},

author = {Apratim Bhattacharyya and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/1810.00746

https://arxiv.org/pdf/1810.00746.pdf},

year  = {2019},

date = {2019-05-06},

booktitle = {International Conference on Representation Learning (ICLR)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{ndss19salem,

title = {ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models},

author = {Ahmed Salem and Yang Zhang and Mathias Humbert and Mario Fritz and Michael Backes},

url = {preliminary:

https://arxiv.org/abs/1806.01246

https://arxiv.org/pdf/1806.01246.pdf

},

year  = {2019},

date = {2019-02-24},

urldate = {2019-02-24},

booktitle = {Annual Network and Distributed System Security Symposium (NDSS)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sattar19wacv,

title = {Fashion is Taking Shape: Understanding Clothing Preference Based on Body Shape From Online Sources },

author = {Hosnieh Sattar and Gerard Pons-Moll and Mario Fritz},

url = {preliminary:

//arxiv.org/abs/1807.03235

//arxiv.org/pdf/1807.03235.pdf},

year  = {2019},

date = {2019-01-08},

urldate = {2019-01-08},

booktitle = {IEEE Winter Conference on Applications of Computer Vision (WACV)},

keywords = {2019},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{shetty18nips,

title = {Adversarial Scene Editing: Automatic Object Removal from Weak Supervision },

author = {Rakshith Shetty and Mario Fritz and Bernt Schiele},

url = {preliminary:

https://arxiv.org/abs/1806.01911

https://arxiv.org/pdf/1806.01911.pdf},

year  = {2018},

date = {2018-12-03},

booktitle = {Neural Information Processing Systems (NIPS)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{he18eccv,

title = {Diverse Conditional Image Generation by Stochastic Regression with Latent Drop-Out Codes},

author = {Yang He and Bernt Schiele and Mario Fritz},

url = {http://openaccess.thecvf.com/content_ECCV_2018/papers/Yang_He_Diverse_Conditional_Image_ECCV_2018_paper.pdf},

year  = {2018},

date = {2018-09-12},

booktitle = {European Conference on Computer Vision (ECCV)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sun18eccv,

title = {A Hybrid Model for Identity Obfuscation by Face Replacement},

author = {Qianru Sun and Ayush Tewari and Weipeng Xu and Mario Fritz and Christian Theobalt and Bernt Schiele},

url = {https://arxiv.org/abs/1804.04779

https://arxiv.org/pdf/1804.04779.pdf},

year  = {2018},

date = {2018-09-09},

booktitle = {European Conference on Computer Vision},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wagner18eccvw,

title = {Answering Visual What-If Questions: From Actions to Predicted Scene Descriptions},

author = {Misha Wagner and Hector Basevi and Rakshith Shetty and Wenbin Li and Mateusz Malinowski and Mario Fritz and Ales Leonardis},

url = {https://arxiv.org/abs/1809.03707

https://arxiv.org/pdf/1809.03707.pdf},

year  = {2018},

date = {2018-09-08},

booktitle = {Visual Learning and Embodied Agents in Simulation Environments Workshop at European Conference on Computer Vision},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{edgar18cscs,

title = {Sequential Attacks on Agents for Long-Term Adversarial Goals},

author = {Edgar Tretschk and Seong Joon Oh and Mario Fritz}},

year  = {2018},

date = {2018-09-01},

booktitle = {2. ACM Computer Science in Cars Symposium -- Future Challenges in Artificial Intelligence & Security for Autonomous Vehicles},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{usenix18rakshith,

title = {A4NT: Author Attribute Anonymity by Adversarial Training of Neural Machine Translation},

author = {Rakshith Shetty and Bernt Schiele and Mario Fritz},

url = {preliminary version:

https://arxiv.org/abs/1711.01921

https://arxiv.org/pdf/1711.01921.pdf

},

year  = {2018},

date = {2018-08-17},

urldate = {2018-08-17},

booktitle = {27th USENIX Security Symposium (USENIX Security 18)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{apratim18cvprb,

title = {Accurate and Diverse Sampling of Sequences based on a “Best of Many” Sample Objective},

author = {Apratim Bhattacharyya and Bernt Schiele and Mario Fritz},

url = {http://openaccess.thecvf.com/content_cvpr_2018/CameraReady/3890.pdf},

year  = {2018},

date = {2018-06-22},

urldate = {2018-06-22},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{tribhu18cvpr,

title = {Connecting Pixels to Privacy and Utility: Automatic Redaction of Private Information in Images},

author = {Tribhuvanesh Orekondy and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/1712.01066

https://arxiv.org/pdf/1712.01066.pdf},

year  = {2018},

date = {2018-06-18},

urldate = {2018-06-18},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sun18cvpr,

title = {Natural and Effective Obfuscation by Head Inpainting},

author = {Qianru Sun and Liqian Ma and Seong Joon Oh and Luc Van Gool and Bernt Schiele and Mario Fritz},

url = {https://arxiv.org/abs/1711.09001

https://arxiv.org/pdf/1711.09001.pdf},

year  = {2018},

date = {2018-06-18},

urldate = {2018-06-18},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{ma18cvpr,

title = {Disentangled Person Image Generation },

author = {Liqian Ma and Qianru Sun and Stamatios Georgoulis and Luc Van Gool and Bernt Schiele and Mario Fritz},

url = {https://arxiv.org/abs/1712.02621

https://arxiv.org/pdf/1712.02621.pdf},

year  = {2018},

date = {2018-06-18},

urldate = {2018-06-18},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{apratim18cvpr,

title = {Long-Term On-Board Prediction of People in Traffic Scenes under Uncertainty},

author = {Apratim Bhattacharyya and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/1711.09026

https://arxiv.org/pdf/1711.09026.pdf},

year  = {2018},

date = {2018-06-18},

urldate = {2018-06-18},

booktitle = {IEEE Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{joon18icrl,

title = {Towards Reverse-Engineering Black-Box Neural Networks},

author = {Seong Joon Oh and Max Augustin and Bernt Schiele and Mario Fritz},

url = {https://github.com/coallaoh/WhitenBlackBox

https://arxiv.org/abs/1711.01768

https://arxiv.org/pdf/1711.01768.pdf},

year  = {2018},

date = {2018-04-30},

urldate = {2018-04-30},

booktitle = {Internation Conference on Representation Learning (ICLR)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{apratim18aaai,

title = {Long-Term Image Boundary Prediction},

author = {Apratim Bhattacharyya and Mateusz Malinowski and Bernt Schiele and Mario Fritz},

url = {https://www.aaai.org/ocs/index.php/AAAI/AAAI18/paper/viewFile/17280/16540},

year  = {2018},

date = {2018-02-02},

urldate = {2018-02-02},

booktitle = {Association for the Advancement of Artificial Intelligence (AAAI)},

keywords = {2018},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{sattar17iccvw,

title = {Predicting the Category and Attributes of Visual Search Targets Using Deep Gaze Pooling},

author = {Hosnieh Sattar and Andreas Bulling and Mario Fritz},

url = {https://arxiv.org/abs/1611.10162

https://arxiv.org/pdf/1611.10162.pdf

https://www.youtube.com/watch?v=wPeyK5jkjUU},

year  = {2017},

date = {2017-10-30},

urldate = {2017-10-30},

booktitle = {Mutual Benefits of Cognitive and Computer Vision Workshop at International Conference on Computer Vision (ICCV-W)},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{orekondy17iccv,

title = {Towards a Visual Privacy Advisor: Understanding and Predicting Privacy Risks in Images},

author = {Tribhuvanesh Orekondy and Bernt Schiele and Mario Fritz},

url = {https://arxiv.org/abs/1703.10660

https://arxiv.org/pdf/1703.10660.pdf

https://tribhuvanesh.github.io/vpa/},

year  = {2017},

date = {2017-10-29},

urldate = {2017-10-29},

booktitle = {IEEE International Conference on Computer Vision (ICCV)},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{rakshith17iccv,

title = {Speaking the Same Language: Matching Machine to Human Captions by Adversarial Training},

author = {Rakshith Shetty and Marcus Rohrbach and Lisa Anne Hendricks and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/1703.10476

https://arxiv.org/pdf/1703.10476.pdf},

year  = {2017},

date = {2017-10-28},

urldate = {2017-10-28},

booktitle = {IEEE International Conference on Computer Vision (ICCV)},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{oh17iccv,

title = {Adversarial Image Perturbation for Privacy Protection -- A Game Theory Perspective},

author = {Seong Joon Oh and Mario Fritz and Bernt Schiele},

url = {https://arxiv.org/abs/1703.09471

https://arxiv.org/pdf/1703.09471.pdf},

year  = {2017},

date = {2017-10-27},

urldate = {2017-10-27},

booktitle = {IEEE International Conference on Computer Vision (ICCV), 2017},

keywords = {2017},

pubstate = {published},

tppubtype = {inproceedings}

}