| Formal guarantees on the robustness of a classifier against adversarial manipulation M Hein, M Andriushchenko NeurIPS 2017, 2017 | 410 | 2017 |
| Square attack: a query-efficient black-box adversarial attack via random search M Andriushchenko, F Croce, N Flammarion, M Hein ECCV 2020, 2020 | 297 | 2020 |
| Why ReLU networks yield high-confidence predictions far away from the training data and how to mitigate the problem M Hein, M Andriushchenko, J Bitterwolf CVPR 2019 (oral), 2019 | 284 | 2019 |
| On the Stability of Fine-tuning BERT: Misconceptions, Explanations, and Strong Baselines M Mosbach, M Andriushchenko, D Klakow ICLR 2021, 2021 | 154 | 2021 |
| RobustBench: a standardized adversarial robustness benchmark F Croce*, M Andriushchenko*, V Sehwag*, E Debenedetti*, N Flammarion, ... NeurIPS 2021 Datasets and Benchmarks Track, Best Paper Honorable Mention …, 2021 | 139 | 2021 |
| Provable Robustness of ReLU Networks via Maximization of Linear Regions F Croce*, M Andriushchenko*, M Hein AISTATS 2019, 2019 | 126 | 2019 |
| Understanding and Improving Fast Adversarial Training M Andriushchenko, N Flammarion NeurIPS 2020, 2020 | 98 | 2020 |
| Logit Pairing Methods Can Fool Gradient-Based Attacks M Mosbach*, M Andriushchenko*, T Trost, M Hein, D Klakow NeurIPS 2018 Workshop on Security in Machine Learning, 2018 | 53 | 2018 |
| Provably Robust Boosted Decision Stumps and Trees against Adversarial Attacks M Andriushchenko, M Hein NeurIPS 2019, 2019 | 44 | 2019 |
| On the effectiveness of adversarial training against common corruptions K Kireev*, M Andriushchenko*, N Flammarion UAI 2022, 2022 | 26 | 2022 |
| Sparse-RS: a versatile framework for query-efficient sparse black-box adversarial attacks F Croce, M Andriushchenko, ND Singh, N Flammarion, M Hein AAAI 2022, 2022 | 26 | 2022 |
| #ScienceForUkraine: an Initiative to Support the Ukrainian Academic Community. “3 Months Since Russia’s Invasion in Ukraine”, February 26 – May 31, 2022 M Rose, S Reinsone, M Andriushchenko, M Bartosiak, A Bobak, L Drury, ... Available at SSRN: https://ssrn.com/abstract=4139263, 2022 | 1 | 2022 |
| Towards Understanding Sharpness-Aware Minimization M Andriushchenko, N Flammarion ICML 2022, 2022 | 1 | 2022 |
| ARIA: Adversarially Robust Image Attribution for Content Provenance M Andriushchenko, XR Li, G Oxholm, T Gittings, T Bui, N Flammarion, ... CVPR 2022 Workshop on Media Forensics, 2022 | | 2022 |
| Beacon-aug: A cross-library image augmentation toolbox XR Li, Y Hold-Geoffroy, G Oxholm, KK Singh, Z Zhang, R Zhang, ... https://github.com/adobe-research/beacon-aug, 2021 | | 2021 |
Matthias HeinProfessor of Computer Science, University of TübingenVerified email at uni-tuebingen.de
