Interpolation can hurt robust generalization even when there is no noise. - Konstantin Donhauser; Alexandru Tifrea; Michael Aerni; Reinhard Heckel; Fanny Yang (NeurIPS, 2021)

Strong inductive biases provably prevent harmless interpolation. - Michael Aerni; Marco Milanta; Konstantin Donhauser; Fanny Yang (ICLR, 2023)

Evaluations of Machine Learning Privacy Defenses are Misleading. - Michael Aerni; Jie Zhang 107; Florian Tramèr (CCS, 2024)

Measuring Non-Adversarial Reproduction of Training Data in Large Language Models. - Michael Aerni; Javier Rando; Edoardo Debenedetti; Nicholas Carlini; Daphne Ippolito; Florian Tramèr (ICLR, 2025)

Membership Inference Attacks on Sequence Models. - Lorenzo Rossi; Michael Aerni; Jie Zhang 107; Florian Tramèr (SP (Workshops), 2025)