| Robust physical-world attacks on deep learning visual classification K Eykholt, I Evtimov, E Fernandes, B Li, A Rahmati, C Xiao, A Prakash, ... Proceedings of the IEEE Conference on Computer Vision and Pattern …, 2018 | 1200* | 2018 |
| Physical adversarial examples for object detectors D Song, K Eykholt, I Evtimov, E Fernandes, B Li, A Rahmati, F Tramer, ... 12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18), 2018 | 165* | 2018 |
| Is Tricking a Robot Hacking? I Evtimov, D O'Hair, E Fernandes, R Calo, T Kobno Berkeley Tech. LJ 34, 891, 2019 | 2* | 2019 |
| FoggySight: A Scheme for Facial Lookup Privacy I Evtimov, P Sturmfels, T Kohno arXiv preprint arXiv:2012.08588, 2020 | | 2020 |
| Adversarial Evaluation of Multimodal Models under Realistic Gray Box Assumption I Evtimov, R Howes, B Dolhansky, H Firooz, C Canton arXiv preprint arXiv:2011.12902, 2020 | | 2020 |
| Security and Machine Learning in the Real World I Evtimov, W Cui, E Kamar, E Kiciman, T Kohno, J Li arXiv preprint arXiv:2007.07205, 2020 | | 2020 |
