INTEGRAL Mission Control System (IMCS): Technology and Integrated Solutions for Supporting a Complex Scientific Mission. - Gianpiero Di Girolamo; Paolo Maldari; Francesco Croce; Michela Alberti (EUROMICRO, 2001)

A Randomized Gradient-Free Attack on ReLU Networks. - Francesco Croce; Matthias Hein 001 (GCPR, 2018)

Provable Robustness of ReLU networks via Maximization of Linear Regions. - Francesco Croce; Maksym Andriushchenko; Matthias Hein 001 (AISTATS, 2019)

Sparse and Imperceivable Adversarial Attacks. - Francesco Croce; Matthias Hein 001 (ICCV, 2019)

Provable robustness against all adversarial lp-perturbations for p≥1. - Francesco Croce; Matthias Hein 001 (CoRR, 2019)

Square Attack: A Query-Efficient Black-Box Adversarial Attack via Random Search. - Maksym Andriushchenko; Francesco Croce; Nicolas Flammarion; Matthias Hein 001 (ECCV (23), 2020)

Provable robustness against all adversarial $l_p$-perturbations for $p geq 1$. - Francesco Croce; Matthias Hein 001 (ICLR, 2020)

Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack. - Francesco Croce; Matthias Hein 001 (ICML, 2020)

Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. - Francesco Croce; Matthias Hein 001 (ICML, 2020)

RobustBench: a standardized adversarial robustness benchmark. - Francesco Croce; Maksym Andriushchenko; Vikash Sehwag; Nicolas Flammarion; Mung Chiang; Prateek Mittal; Matthias Hein 001 (CoRR, 2020)

Scaling up the Randomized Gradient-Free Adversarial Attack Reveals Overestimation of Robustness Using Established Attacks. - Francesco Croce; Jonas Rauber; Matthias Hein 001 (Int. J. Comput. Vis., 2020)

Mind the Box: l1-APGD for Sparse Adversarial Attacks on Image Classifiers. - Francesco Croce; Matthias Hein 001 (ICML, 2021)

RobustBench: a standardized adversarial robustness benchmark. - Francesco Croce; Maksym Andriushchenko; Vikash Sehwag; Edoardo Debenedetti; Nicolas Flammarion; Mung Chiang; Prateek Mittal; Matthias Hein 001 (NeurIPS Datasets and Benchmarks, 2021)

Adversarial robustness against multiple lp-threat models at the price of one and how to quickly fine-tune robust models to another threat model. - Francesco Croce; Matthias Hein 001 (CoRR, 2021)

Sparse-RS: A Versatile Framework for Query-Efficient Sparse Black-Box Adversarial Attacks. - Francesco Croce; Maksym Andriushchenko; Naman D. Singh; Nicolas Flammarion; Matthias Hein 001 (AAAI, 2022)

Sparse Visual Counterfactual Explanations in Image Space. - Valentyn Boreiko; Maximilian Augustin; Francesco Croce; Philipp Berens; Matthias Hein 001 (GCPR, 2022)

Adversarial Robustness against Multiple and Single lp-Threat Models via Quick Fine-Tuning of Robust Classifiers. - Francesco Croce; Matthias Hein 001 (ICML, 2022)

Evaluating the Adversarial Robustness of Adaptive Test-time Defenses. - Francesco Croce; Sven Gowal; Thomas Brunner; Evan Shelhamer; Matthias Hein 001; A. Taylan Cemgil (ICML, 2022)

Diffusion Visual Counterfactual Explanations. - Maximilian Augustin; Valentyn Boreiko; Francesco Croce; Matthias Hein 001 (NeurIPS, 2022)

On the interplay of adversarial robustness and architecture components: patches, convolution and attention. - Francesco Croce; Matthias Hein 001 (CoRR, 2022)

Seasoning Model Soups for Robustness to Adversarial and Natural Distribution Shifts. - Francesco Croce; Sylvestre-Alvise Rebuffi; Evan Shelhamer; Sven Gowal (CVPR, 2023)

Revisiting adapters with adversarial training. - Sylvestre-Alvise Rebuffi; Francesco Croce; Sven Gowal (ICLR, 2023)

A Modern Look at the Relationship between Sharpness and Generalization. - Maksym Andriushchenko; Francesco Croce; Maximilian Müller; Matthias Hein 001; Nicolas Flammarion (ICML, 2023)

Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models. - Naman Deep Singh; Francesco Croce; Matthias Hein 001 (NeurIPS, 2023)

Robust Semantic Segmentation: Strong Adversarial Attacks and Fast Training of Robust Models. - Francesco Croce; Naman D. Singh; Matthias Hein 001 (CoRR, 2023)

Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Models. - Francesco Croce; Naman D. Singh; Matthias Hein 001 (ECCV (79), 2024)

Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models. - Christian Schlarmann; Naman Deep Singh; Francesco Croce; Matthias Hein 001 (ICML, 2024)

Long Is More for Alignment: A Simple but Tough-to-Beat Baseline for Instruction Fine-Tuning. - Hao Zhao; Maksym Andriushchenko; Francesco Croce; Nicolas Flammarion (ICML, 2024)

JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models. - Patrick Chao; Edoardo Debenedetti; Alexander Robey; Maksym Andriushchenko; Francesco Croce; Vikash Sehwag; Edgar Dobriban; Nicolas Flammarion; George J. Pappas; Florian Tramèr; Hamed Hassani; Eric Wong 001 (NeurIPS, 2024)

Segment (Almost) Nothing: Prompt-Agnostic Adversarial Attacks on Segmentation Models. - Francesco Croce; Matthias Hein 001 (SaTML, 2024)

Competition Report: Finding Universal Jailbreak Backdoors in Aligned LLMs. - Javier Rando; Francesco Croce; Krystof Mitka; Stepan Shabalin; Maksym Andriushchenko; Nicolas Flammarion; Florian Tramèr (CoRR, 2024)

Perturb and Recover: Fine-tuning for Effective Backdoor Removal from CLIP. - Naman Deep Singh; Francesco Croce; Matthias Hein 001 (CoRR, 2024)

Towards Unified Benchmark and Models for Multi-Modal Perceptual Metrics. - Sara Ghazanfari; Siddharth Garg; Nicolas Flammarion; Prashanth Krishnamurthy; Farshad Khorrami; Francesco Croce (CoRR, 2024)

Evaluating and Improving the Robustness of Image Classifiers against Adversarial Attacks. - Francesco Croce (2024)

Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks. - Maksym Andriushchenko; Francesco Croce; Nicolas Flammarion (ICLR, 2025)

Selective induction Heads: How Transformers Select Causal Structures in Context. - Francesco D'Angelo; Francesco Croce; Nicolas Flammarion (ICLR, 2025)

Is In-Context Learning Sufficient for Instruction Following in LLMs? - Hao Zhao; Maksym Andriushchenko; Francesco Croce; Nicolas Flammarion (ICLR, 2025)

Adversarially Robust CLIP Models Can Induce Better (Robust) Perceptual Metrics. - Francesco Croce; Christian Schlarmann; Naman Deep Singh; Matthias Hein 001 (SaTML, 2025)

Chain-of-Frames: Advancing Video Understanding in Multimodal LLMs via Frame-Aware Reasoning. - Sara Ghazanfari; Francesco Croce; Nicolas Flammarion; Prashanth Krishnamurthy; Farshad Khorrami; Siddharth Garg (CoRR, 2025)

FuseLIP: Multimodal Embeddings via Early Fusion of Discrete Tokens. - Christian Schlarmann; Francesco Croce; Nicolas Flammarion; Matthias Hein 001 (CoRR, 2025)

OS-Harm: A Benchmark for Measuring Safety of Computer Use Agents. - Thomas Kuntz; Agatha Duzan; Hao Zhao; Francesco Croce; Zico Kolter; Nicolas Flammarion; Maksym Andriushchenko (CoRR, 2025)