Smooth adversarial examples. - Hanwei Zhang 001; Yannis Avrithis; Teddy Furon; Laurent Amsaleg (EURASIP J. Inf. Secur., 2020)

Patch Replacement: A Transformation-based Method to Improve Robustness against Adversarial Attacks. - Hanwei Zhang 001; Yannis Avrithis; Teddy Furon; Laurent Amsaleg (Trustworthy AI @ ACM Multimedia, 2021)

Ensemble Defense with Data Diversity: Weak Correlation Implies Strong Robustness. - Renjue Li; Hanwei Zhang 001; Pengfei Yang 002; Cheng-Chao Huang; Aimin Zhou; Bai Xue 001; Lijun Zhang 001 (CoRR, 2021)

Walking on the Edge: Fast, Low-Distortion Adversarial Examples. - Hanwei Zhang 001; Yannis Avrithis; Teddy Furon; Laurent Amsaleg (IEEE Trans. Inf. Forensics Secur., 2021)

Deep Learning in Adversarial Context. (Apprentissage profond dans un contexte adversaire). - Hanwei Zhang 001 (2021)

Towards Good Practices in Evaluating Transfer Adversarial Attacks. - Zhengyu Zhao 001; Hanwei Zhang 001; Renjue Li; Ronan Sicre; Laurent Amsaleg; Michael Backes 001 (CoRR, 2022)

DP-Net: Learning Discriminative Parts for Image Recognition. - Ronan Sicre; Hanwei Zhang 001; Julien Dejasmin; Chiheb Daaloul; Stéphane Ayache; Thierry Artières (ICIP, 2023)

Revisiting Transferable Adversarial Image Examples: Attack Categorization, Evaluation Guidelines, and New Insights. - Zhengyu Zhao 001; Hanwei Zhang 001; Renjue Li; Ronan Sicre; Laurent Amsaleg; Michael Backes 001; Qi Li 002; Chao Shen 001 (CoRR, 2023)

NeRFail: Neural Radiance Fields-Based Multiview Adversarial Attack. - Wenxiang Jiang 002; Hanwei Zhang 001; Xi Wang 002; Zhongwen Guo; Hao Wang 003 (AAAI, 2024)

Saliency Maps Give a False Sense of Explanability to Image Classifiers: An Empirical Evaluation across Methods and Metrics. - Hanwei Zhang 001; Felipe Torres Figueroa; Holger Hermanns (ACML, 2024)

IPA-NeRF: Illusory Poisoning Attack Against Neural Radiance Fields. - Wenxiang Jiang 002; Hanwei Zhang 001; Shuo Zhao; Zhongwen Guo; Hao Wang 003 (ECAI, 2024)

Traceability and Accountability by Construction. - Julius Wenzel; Maximilian A. Köhl; Sarah Sterz; Hanwei Zhang 001; Andreas Schmidt 003; Christof Fetzer; Holger Hermanns (ISoLA (4), 2024)

Eidos: Efficient, Imperceptible Adversarial 3D Point Clouds. - Hanwei Zhang 001; Luo Cheng; Qisong He; Wei Huang 035; Renjue Li; Ronan Sicre; Xiaowei Huang 001; Holger Hermanns; Lijun Zhang 001 (SETTA, 2024)

AI Act for the Working Programmer. - Holger Hermanns; Anne Lauber-Rönsberg; Philip Meinel; Sarah Sterz; Hanwei Zhang 001 (AISoLA, 2024)

A Learning Paradigm for Interpretable Gradients. - Felipe Torres; Hanwei Zhang 001; Ronan Sicre; Yannis Avrithis; Stéphane Ayache (VISIGRAPP (3): VISAPP, 2024)

CA-Stream: Attention-based Pooling for Interpretable Image Recognition. - Felipe Torres; Hanwei Zhang 001; Ronan Sicre; Stéphane Ayache; Yannis Avrithis (XAI4CV, 2024)

P-Mamba: Marrying Perona Malik Diffusion with Mamba for Efficient Pediatric Echocardiographic Left Ventricular Segmentation. - Zi Ye; Tianxiang Chen; Fangyijie Wang; Hanwei Zhang 001; Guanxi Li; Lijun Zhang 001 (CoRR, 2024)

A Survey on Visual Mamba. - Hanwei Zhang 001; Ying Zhu; Dan Wang; Lijun Zhang 001; Tianxiang Chen; Zi Ye (CoRR, 2024)

Enhancing robustness of data-driven SHM models: adversarial training with circle loss. - Xiangli Yang; Xijie Deng; Hanwei Zhang 001; Yang Zou; Jianxi Yang (CoRR, 2024)

Opti-CAM: Optimizing saliency maps for interpretability. - Hanwei Zhang 001; Felipe Torres; Ronan Sicre; Yannis Avrithis; Stéphane Ayache (Comput. Vis. Image Underst., 2024)

MPAM-3DGS: Multi-Parametric Adversarial Manipulation for 3D Gaussian Splatting. - Wenxiang Jiang 002; Hanwei Zhang 001; Weigang Wang; Zhongwen Guo; Tianao Zhang; Hao Wang 003 (ICASSP, 2025)

HFE-RWKV: High-Frequency Enhanced RWKV Model for Efficient Left Ventricle Segmentation in Pediatric Echocardiograms. - Zi Ye; Tianxiang Chen; Ziyang Wang; Hanwei Zhang 001; Lijun Zhang 001 (ICASSP, 2025)

A Novel Robustness-Enhancing Adversarial Defense Approach to AI-Powered Sea State Estimation for Autonomous Marine Vessels. - Shuxin Li; Xu Cheng 003; Fan Shi 001; Hanwei Zhang 001; Hongning Dai; Houxiang Zhang; Shengyong Chen (IEEE Trans. Syst. Man Cybern. Syst., 2025)

Revisiting Physically Realizable Adversarial Object Attack against LiDAR-based Detection: Clarifying Problem Formulation and Experimental Protocols. - Luo Cheng; Hanwei Zhang 001; Lijun Zhang 001; Holger Hermanns (CoRR, 2025)