Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural Networks. - Mahyar Fazlyab; Alexander Robey; Hamed Hassani; Manfred Morari; George J. Pappas (NeurIPS, 2019)

Learning Control Barrier Functions from Expert Demonstrations. - Alexander Robey; Haimin Hu; Lars Lindemann; Hanwen Zhang; Dimos V. Dimarogonas; Stephen Tu; Nikolai Matni (CDC, 2020)

Learning Hybrid Control Barrier Functions from Data. - Lars Lindemann; Haimin Hu; Alexander Robey; Hanwen Zhang; Dimos V. Dimarogonas; Stephen Tu; Nikolai Matni (CoRL, 2020)

Model-Based Robust Deep Learning. - Alexander Robey; Hamed Hassani; George J. Pappas (CoRR, 2020)

Learning Robust Hybrid Control Barrier Functions for Uncertain Systems. - Alexander Robey; Lars Lindemann; Stephen Tu; Nikolai Matni (ADHS, 2021)

Optimal Algorithms for Submodular Maximization with Distributed Constraints. - Alexander Robey; Arman Adibi; Brent Schlotfeldt; Hamed Hassani; George J. Pappas (L4DC, 2021)

Adversarial Robustness with Semi-Infinite Constrained Learning. - Alexander Robey; Luiz F. O. Chamon; George J. Pappas; Hamed Hassani; Alejandro Ribeiro (NeurIPS, 2021)

Model-Based Domain Generalization. - Alexander Robey; George J. Pappas; Hamed Hassani (NeurIPS, 2021)

Closing the Closed-Loop Distribution Shift in Safe Imitation Learning. - Stephen Tu; Alexander Robey; Nikolai Matni (CoRR, 2021)

Learning Robust Output Control Barrier Functions from Safe Expert Demonstrations. - Lars Lindemann; Alexander Robey; Lejun Jiang; Stephen Tu; Nikolai Matni (CoRR, 2021)

Chordal Sparsity for Lipschitz Constant Estimation of Deep Neural Networks. - Anton Xue; Lars Lindemann; Alexander Robey; Hamed Hassani; George J. Pappas; Rajeev Alur (CDC, 2022)

Do deep networks transfer invariances across classes? - Allan Zhou; Fahim Tajwar; Alexander Robey; Tom Knowles; George J. Pappas; Hamed Hassani; Chelsea Finn (ICLR, 2022)

Probabilistically Robust Learning: Balancing Average and Worst-case Performance. - Alexander Robey; Luiz F. O. Chamon; George J. Pappas; Hamed Hassani (ICML, 2022)

On the Sample Complexity of Stability Constrained Imitation Learning. - Stephen Tu; Alexander Robey; Tingnan Zhang; Nikolai Matni (L4DC, 2022)

Probable Domain Generalization via Quantile Risk Minimization. - Cian Eastwood; Alexander Robey; Shashank Singh 011; Julius von Kügelgen; Hamed Hassani; George J. Pappas; Bernhard Schölkopf (NeurIPS, 2022)

Toward Certified Robustness Against Real-World Distribution Shifts. - Haoze Wu 001; Teruhiro Tagomori; Alexander Robey; Fengjun Yang; Nikolai Matni; George J. Pappas; Hamed Hassani; Corina S. Pasareanu; Clark W. Barrett (SaTML, 2023)

Data-Driven Modeling and Verification of Perception-Based Autonomous Systems. - Thomas Waite; Alexander Robey; Hamed Hassani; George J. Pappas; Radoslav Ivanov (CoRR, 2023)

Provable Tradeoffs in Adversarially Robust Classification. - Edgar Dobriban; Hamed Hassani; David Hong; Alexander Robey (IEEE Trans. Inf. Theory, 2023)

Adversarial Training Should Be Cast as a Non-Zero-Sum Game. - Alexander Robey; Fabian Latorre; George J. Pappas; Hamed Hassani; Volkan Cevher (ICLR, 2024)

Position: A Safe Harbor for AI Evaluation and Red Teaming. - Shayne Longpre; Sayash Kapoor; Kevin Klyman; Ashwin Ramaswami; Rishi Bommasani; Borhane Blili-Hamelin; Yangsibo Huang; Aviya Skowron; Zheng Xin Yong; Suhas Kotha; Yi Zeng 005; Weiyan Shi; et al. (ICML, 2024)

JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models. - Patrick Chao; Edoardo Debenedetti; Alexander Robey; Maksym Andriushchenko; Francesco Croce; Vikash Sehwag; Edgar Dobriban; Nicolas Flammarion; George J. Pappas; Florian Tramèr; Hamed Hassani; Eric Wong 001 (NeurIPS, 2024)

Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing. - Jiabao Ji; Bairu Hou; Alexander Robey; George J. Pappas; Hamed Hassani; Yang Zhang 001; Eric Wong 001; Shiyu Chang (CoRR, 2024)

A Safe Harbor for AI Evaluation and Red Teaming. - Shayne Longpre; Sayash Kapoor; Kevin Klyman; Ashwin Ramaswami; Rishi Bommasani; Borhane Blili-Hamelin; Yangsibo Huang; Aviya Skowron; Zheng Xin Yong; Suhas Kotha; Yi Zeng 005; Weiyan Shi; et al. (CoRR, 2024)

Jailbreaking LLM-Controlled Robots. - Alexander Robey; Zachary Ravichandran; Vijay Kumar 001; Hamed Hassani; George J. Pappas (CoRR, 2024)

Jailbreaking Black Box Large Language Models in Twenty Queries. - Patrick Chao; Alexander Robey; Edgar Dobriban; Hamed Hassani; George J. Pappas; Eric Wong 001 (SaTML, 2025)

Automated Black-box Prompt Engineering for Personalized Text-to-Image Generation. - Yutong He; Alexander Robey; Naoki Murata; Yiding Jiang; Joshua Nathaniel Williams; George J. Pappas; Hamed Hassani; Yuki Mitsufuji; Ruslan Salakhutdinov; J. Zico Kolter (Trans. Mach. Learn. Res., 2025)

SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks. - Alexander Robey; Eric Wong 001; Hamed Hassani; George J. Pappas (Trans. Mach. Learn. Res., 2025)

Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks. - Hanjiang Hu; Alexander Robey; Changliu Liu (CoRR, 2025)

Safety Guardrails for LLM-Enabled Robots. - Zachary Ravichandran; Alexander Robey; Vijay Kumar 001; George J. Pappas; Hamed Hassani (CoRR, 2025)

Antidistillation Sampling. - Yash Savani; Asher Trockman; Zhili Feng; Avi Schwarzschild; Alexander Robey; Marc Finzi; J. Zico Kolter (CoRR, 2025)

Safety Pretraining: Toward the Next Generation of Safe AI. - Pratyush Maini; Sachin Goyal; Dylan Sam; Alexander Robey; Yash Savani; Yiding Jiang; Andy Zou; Zacharcy C. Lipton; J. Zico Kolter (CoRR, 2025)

Transferable Adversarial Attacks on Black-Box Vision-Language Models. - Kai Hu; Weichen Yu; Li Zhang; Alexander Robey; Andy Zou; Chengming Xu 004; Haoqi Hu; Matt Fredrikson (CoRR, 2025)

Existing Large Language Model Unlearning Evaluations Are Inconclusive. - Zhili Feng; Yixuan Even Xu; Alexander Robey; Robert Kirk; Xander Davies; Yarin Gal; Avi Schwarzschild; J. Zico Kolter (CoRR, 2025)

Adversarial Attacks on Robotic Vision Language Action Models. - Eliot Krzysztof Jones; Alexander Robey; Andy Zou; Zachary Ravichandran; George J. Pappas; Hamed Hassani; Matt Fredrikson; J. Zico Kolter (CoRR, 2025)

Benchmarking Misuse Mitigation Against Covert Adversaries. - Davis Brown; Mahdi Sabbaghi; Luze Sun; Alexander Robey; George J. Pappas; Eric Wong 001; Hamed Hassani (CoRR, 2025)

Command-V: Pasting LLM Behaviors via Activation Profiles. - Barry Wang; Avi Schwarzschild; Alexander Robey; Ali Payani; Charles Fleming; Mingjie Sun; Daphne Ippolito (CoRR, 2025)