Certifying Geometric Robustness of Neural Networks. - Mislav Balunovic; Maximilian Baader; Gagandeep Singh 001; Timon Gehr; Martin T. Vechev (NeurIPS, 2019)

Universal Approximation with Certified Networks. - Maximilian Baader; Matthew Mirman; Martin T. Vechev (ICLR, 2020)

Certified Defense to Image Transformations via Randomized Smoothing. - Marc Fischer 002; Maximilian Baader; Martin T. Vechev (NeurIPS, 2020)

Silq: a high-level quantum language with safe uncomputation and intuitive semantics. - Benjamin Bichsel; Maximilian Baader; Timon Gehr; Martin T. Vechev (PLDI, 2020)

Certification of Semantic Perturbations via Randomized Smoothing. - Marc Fischer 002; Maximilian Baader; Martin T. Vechev (CoRR, 2020)

Efficient Certification of Spatial Robustness. - Anian Ruoss; Maximilian Baader; Mislav Balunovic; Martin T. Vechev (AAAI, 2021)

Scalable Certified Segmentation via Randomized Smoothing. - Marc Fischer 002; Maximilian Baader; Martin T. Vechev (ICML, 2021)

Fast and precise certification of transformers. - Gregory Bonaert; Dimitar I. Dimitrov; Maximilian Baader; Martin T. Vechev (PLDI, 2021)

Certified Defenses: Why Tighter Relaxations May Hurt Training? - Nikola Jovanovic 001; Mislav Balunovic; Maximilian Baader; Martin T. Vechev (CoRR, 2021)

The Fundamental Limits of Interval Arithmetic for Neural Networks. - Matthew Mirman; Maximilian Baader; Martin T. Vechev (CoRR, 2021)

Latent Space Smoothing for Individually Fair Representations. - Momchil Peychev; Anian Ruoss; Mislav Balunovic; Maximilian Baader; Martin T. Vechev (ECCV (13), 2022)

On the Paradox of Certified Training. - Nikola Jovanovic 001; Mislav Balunovic; Maximilian Baader; Martin T. Vechev (Trans. Mach. Learn. Res., 2022)

The Fundamental Limits of Neural Networks for Interval Certified Robustness. - Matthew Mirman; Maximilian Baader; Martin T. Vechev (Trans. Mach. Learn. Res., 2022)

Abstraqt: Analysis of Quantum Circuits via Abstract Stabilizer Simulation. - Benjamin Bichsel; Anouk Paradis; Maximilian Baader; Martin T. Vechev (Quantum, 2023)

Expressivity of ReLU-Networks under Convex Relaxations. - Maximilian Baader; Mark Niklas Müller; Yuhao Mao; Martin T. Vechev (ICLR, 2024)

SPEAR: Exact Gradient Inversion of Batches in Federated Learning. - Dimitar I. Dimitrov; Maximilian Baader; Mark Niklas Müller; Martin T. Vechev (NeurIPS, 2024)

DAGER: Exact Gradient Inversion for Large Language Models. - Ivo Petrov; Dimitar I. Dimitrov; Maximilian Baader; Mark Niklas Müller; Martin T. Vechev (NeurIPS, 2024)

Evading Data Contamination Detection for Language Models is (too) Easy. - Jasper Dekoninck; Mark Niklas Müller; Maximilian Baader; Marc Fischer 002; Martin T. Vechev (CoRR, 2024)

Overcoming the Paradox of Certified Training with Gaussian Smoothing. - Stefan Balauca; Mark Niklas Müller; Yuhao Mao; Maximilian Baader; Marc Fischer 002; Martin T. Vechev (CoRR, 2024)

Certified Robustness to Data Poisoning in Gradient-Based Training. - Philip Sosnin; Mark Niklas Müller; Maximilian Baader; Calvin Tsay; Matthew Wicker (CoRR, 2024)

A Unified Approach to Routing and Cascading for LLMs. - Jasper Dekoninck; Maximilian Baader; Martin T. Vechev (CoRR, 2024)

Expressivity of Certified Neural Networks. - Maximilian Baader (2024)

Ward: Provable RAG Dataset Inference via LLM Watermarks. - Nikola Jovanovic 001; Robin Staab; Maximilian Baader; Martin T. Vechev (ICLR, 2025)

Polyrating: A Cost-Effective and Bias-Aware Rating System for LLM Evaluation. - Jasper Dekoninck; Maximilian Baader; Martin T. Vechev (ICLR, 2025)

GRAIN: Exact Graph Reconstruction from Gradients. - Maria Drencheva; Ivo Petrov; Maximilian Baader; Dimitar Iliev Dimitrov; Martin T. Vechev (ICLR, 2025)

Gaussian Loss Smoothing Enables Certified Training with Tight Convex Relaxations. - Stefan Balauca; Mark Niklas Müller; Yuhao Mao; Maximilian Baader; Marc Fischer 002; Martin T. Vechev (Trans. Mach. Learn. Res., 2025)

BaxBench: Can LLMs Generate Correct and Secure Backends? - Mark Vero; Niels Mündler; Victor Chibotaru; Veselin Raychev; Maximilian Baader; Nikola Jovanovic 001; Jingxuan He; Martin T. Vechev (CoRR, 2025)

ToolFuzz - Automated Agent Tool Testing. - Ivan Milev; Mislav Balunovic; Maximilian Baader; Martin T. Vechev (CoRR, 2025)