Influence-Directed Explanations for Deep Convolutional Networks. - Klas Leino; Shayak Sen; Anupam Datta; Matt Fredrikson; Linyi Li (ITC, 2018)

Feature-Wise Bias Amplification. - Klas Leino; Emily Black; Matt Fredrikson; Shayak Sen; Anupam Datta (ICLR (Poster), 2019)

Influence Paths for Characterizing Subject-Verb Number Agreement in LSTM Language Models. - Kaiji Lu; Piotr Mardziel; Klas Leino; Matt Fredrikson; Anupam Datta (ACL, 2020)

Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inference. - Klas Leino; Matt Fredrikson (USENIX Security Symposium, 2020)

Fast Geometric Projections for Local Robustness Certification. - Aymeric Fromherz; Klas Leino; Matt Fredrikson; Bryan Parno; Corina S. Pasareanu (ICLR, 2021)

Globally-Robust Neural Networks. - Klas Leino; Zifan Wang 001; Matt Fredrikson (ICML, 2021)

Machine Learning Explainability and Robustness: Connected at the Hip. - Anupam Datta; Matt Fredrikson; Klas Leino; Kaiji Lu; Shayak Sen; Zifan Wang 001 (KDD, 2021)

Exploring Conceptual Soundness with TruLens. - Anupam Datta; Matt Fredrikson; Klas Leino; Kaiji Lu; Shayak Sen; Ricardo Shih; Zifan Wang 001 (NeurIPS (Competition and Demos), 2021)

Relaxing Local Robustness. - Klas Leino; Matt Fredrikson (NeurIPS, 2021)

Self-Repairing Neural Networks: Provable Safety for Deep Networks via Dynamic Repair. - Klas Leino; Aymeric Fromherz; Ravi Mangal; Matt Fredrikson; Bryan Parno; Corina S. Pasareanu (CoRR, 2021)

Self-correcting Neural Networks for Safe Classification. - Klas Leino; Aymeric Fromherz; Ravi Mangal; Matt Fredrikson; Bryan Parno; Corina S. Pasareanu (NSV/FoMLAS@CAV, 2022)

Selective Ensembles for Consistent Predictions. - Emily Black; Klas Leino; Matt Fredrikson (ICLR, 2022)

Degradation Attacks on Certifiably Robust Neural Networks. - Klas Leino; Chi Zhang; Ravi Mangal; Matt Fredrikson; Bryan Parno; Corina S. Pasareanu (Trans. Mach. Learn. Res., 2022)

Identifying, Analyzing, and Addressing Weaknesses in Deep Networks: Foundations for Conceptually Sound Neural Networks - Klas Leino (2022)

On the Perils of Cascading Robust Classifiers. - Ravi Mangal; Zifan Wang 001; Chi Zhang; Klas Leino; Corina S. Pasareanu; Matt Fredrikson (ICLR, 2023)

Unlocking Deterministic Robustness Certification on ImageNet. - Kai Hu; Andy Zou; Zifan Wang 001; Klas Leino; Matt Fredrikson (NeurIPS, 2023)

Limitations of Piecewise Linearity for Efficient Robustness Certification. - Klas Leino (CoRR, 2023)

Scaling in Depth: Unlocking Robustness Certification on ImageNet. - Kai Hu; Andy Zou; Zifan Wang 001; Klas Leino; Matt Fredrikson (CoRR, 2023)

A Recipe for Improved Certifiable Robustness: Capacity and Data. - Kai Hu; Klas Leino; Zifan Wang 001; Matt Fredrikson (CoRR, 2023)

Is Certifying 𝓁p Robustness Still Worthwhile? - Ravi Mangal; Klas Leino; Zifan Wang 001; Kai Hu; Weicheng Yu; Corina S. Pasareanu; Anupam Datta; Matt Fredrikson (CoRR, 2023)

A Recipe for Improved Certifiable Robustness. - Kai Hu; Klas Leino; Zifan Wang 001; Matt Fredrikson (ICLR, 2024)