| Robust physical-world attacks on deep learning visual classification K Eykholt, I Evtimov, E Fernandes, B Li, A Rahmati, C Xiao, A Prakash, ... Proceedings of the IEEE Conference on Computer Vision and Pattern …, 2018 | 974* | 2018 |
| Physical adversarial examples for object detectors D Song, K Eykholt, I Evtimov, E Fernandes, B Li, A Rahmati, F Tramer, ... 12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18), 2018 | 108 | 2018 |
| Note on attacking object detectors with adversarial stickers K Eykholt, I Evtimov, E Fernandes, B Li, D Song, T Kohno, A Rahmati, ... arXiv preprint arXiv:1712.08062, 2017 | 23 | 2017 |
| Robust physical-world attacks on deep learning models (2017) K Eykholt, I Evtimov, E Fernandes, B Li, A Rahmati, C Xiao, A Prakash, ... arXiv preprint arXiv:1707.08945 1, 2018 | 7 | 2018 |
| Security and Machine Learning in the Real World I Evtimov, W Cui, E Kamar, E Kiciman, T Kohno, J Li arXiv preprint arXiv:2007.07205, 2020 | | 2020 |
| Is Tricking a Robot Hacking I Evtimov, D O'Hair, E Fernandes, R Calo, T Kobno Berkeley Tech. LJ 34, 891, 2019 | | 2019 |
| Is Tricking a Robot Hacking? R Calo, I Evtimov, E Fernandes, T Kohno, D O'Hair University of Washington School of Law Research Paper, 2018 | | 2018 |
