Towards Deep Learning Models Resistant to Adversarial Attacks. - Aleksander Madry; Aleksandar Makelov; Ludwig Schmidt; Dimitris Tsipras; Adrian Vladu (ICLR (Poster), 2018)

Towards machine learning models robust to adversarial examples and backdoor attacks - Aleksandar Makelov (2022)

Rethinking Backdoor Attacks. - Alaa Khaddaj; Guillaume Leclerc; Aleksandar Makelov; Kristian Georgiev; Hadi Salman; Andrew Ilyas; Aleksander Madry (ICML, 2023)

Is This the Subspace You Are Looking for? An Interpretability Illusion for Subspace Activation Patching. - Aleksandar Makelov; Georg Lange; Neel Nanda (CoRR, 2023)

Is This the Subspace You Are Looking for? An Interpretability Illusion for Subspace Activation Patching. - Aleksandar Makelov; Georg Lange; Atticus Geiger; Neel Nanda (ICLR, 2024)

Towards Principled Evaluations of Sparse Autoencoders for Interpretability and Control. - Aleksandar Makelov; Georg Lange; Neel Nanda (ICLR, 2025)