Query-Efficient Black-box Adversarial Examples. - Andrew Ilyas; Logan Engstrom; Anish Athalye; Jessy Lin (CoRR, 2017)

Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples. - Anish Athalye; Nicholas Carlini; David A. Wagner 001 (ICML, 2018)

Synthesizing Robust Adversarial Examples. - Anish Athalye; Logan Engstrom; Andrew Ilyas; Kevin Kwok (ICML, 2018)

Black-box Adversarial Attacks with Limited Queries and Information. - Andrew Ilyas; Logan Engstrom; Anish Athalye; Jessy Lin (ICML, 2018)

On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses. - Anish Athalye; Nicholas Carlini (CoRR, 2018)

Evaluating and Understanding the Robustness of Adversarial Logit Pairing. - Logan Engstrom; Andrew Ilyas; Anish Athalye (CoRR, 2018)

On Evaluating Adversarial Robustness. - Nicholas Carlini; Anish Athalye; Nicolas Papernot; Wieland Brendel; Jonas Rauber; Dimitris Tsipras; Ian J. Goodfellow; Aleksander Madry; Alexey Kurakin (CoRR, 2019)

Notary: A Device for Secure Transaction Approval. - Anish Athalye; Adam Belay; M. Frans Kaashoek; Robert Morris 005; Nickolai Zeldovich (login Usenix Mag., 2020)

Pervasive Label Errors in Test Sets Destabilize Machine Learning Benchmarks. - Curtis G. Northcutt; Anish Athalye; Jonas Mueller 001 (NeurIPS Datasets and Benchmarks, 2021)

Verifying Hardware Security Modules with Information-Preserving Refinement. - Anish Athalye; M. Frans Kaashoek; Nickolai Zeldovich (OSDI, 2022)

The K2 Architecture for Trustworthy Hardware Security Modules. - Anish Athalye; M. Frans Kaashoek; Nickolai Zeldovich; Joseph Tassarotti (KISV@SOSP, 2023)

Modular Verification of Secure and Leakage-Free Systems: From Application Specification to Circuit-Level Implementation. - Anish Athalye; Henry Corrigan-Gibbs; M. Frans Kaashoek; Joseph Tassarotti; Nickolai Zeldovich (SOSP, 2024)