Towards High-Frequency SSVEP-Based Target Discrimination with an Extended Alphanumeric Keyboard. - Sahar Abdelnabi; Michael Xuelin Huang; Andreas Bulling (SMC, 2019)

WhiteNet: Phishing Website Detection by Visual Whitelists. - Sahar Abdelnabi; Katharina Krombholz; Mario Fritz (CoRR, 2019)

VisualPhishNet: Zero-Day Phishing Website Detection by Visual Similarity. - Sahar Abdelnabi; Katharina Krombholz; Mario Fritz (CCS, 2020)

Black-Box Watermarking for Generative Adversarial Networks. - Vladislav Skripniuk; Ning Yu 006; Sahar Abdelnabi; Mario Fritz (CoRR, 2020)

What's in the box: Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models. - Sahar Abdelnabi; Mario Fritz (MTD@CCS, 2021)

Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Data. - Ning Yu 006; Vladislav Skripniuk; Sahar Abdelnabi; Mario Fritz (ICCV, 2021)

Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hiding. - Sahar Abdelnabi; Mario Fritz (SP, 2021)

Open-Domain, Content-based, Multi-modal Fact-checking of Out-of-Context Images via Online Resources. - Sahar Abdelnabi; Rakibul Hasan 001; Mario Fritz (CVPR, 2022)

From Attachments to SEO: Click Here to Learn More about Clickbait PDFs! - Giada Stivala; Sahar Abdelnabi; Andrea Mengascini; Mariano Graziano; Mario Fritz; Giancarlo Pellegrino (ACSAC, 2023)

Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection. - Sahar Abdelnabi; Kai Greshake; Shailesh Mishra; Christoph Endres; Thorsten Holz; Mario Fritz (AISec@CCS, 2023)

Fact-Saboteurs: A Taxonomy of Evidence Manipulation Attacks against Fact-Verification Systems. - Sahar Abdelnabi; Mario Fritz (USENIX Security Symposium, 2023)

More than you've asked for: A Comprehensive Analysis of Novel Prompt Injection Threats to Application-Integrated Large Language Models. - Kai Greshake; Sahar Abdelnabi; Shailesh Mishra; Christoph Endres; Thorsten Holz; Mario Fritz (CoRR, 2023)

From Bad to Worse: Using Private Data to Propagate Disinformation on Online Platforms with a Greater Efficiency. - Protik Bose Pranto; Waqar Hassan Khan; Sahar Abdelnabi; Rebecca Weil; Mario Fritz; Rakibul Hasan 001 (CoRR, 2023)

A Large-Scale Study of Phishing PDF Documents. - Giada Stivala; Sahar Abdelnabi; Andrea Mengascini; Mariano Graziano; Mario Fritz; Giancarlo Pellegrino (CoRR, 2023)

LLM-Deliberation: Evaluating LLMs with Interactive Multi-Agent Negotiation Games. - Sahar Abdelnabi; Amr Gomaa; Sarath Sivaprasad; Lea Schönherr; Mario Fritz (CoRR, 2023)

Tell Me What You Like and I Know What You Will Share: Topical Interest Influences Behavior Toward News From High and Low Credible Sources. - Rebecca Weil; Sahar Abdelnabi; Mario Fritz; Rakibul Hasan 001 (EuroS&P Workshops, 2024)

Cooperation, Competition, and Maliciousness: LLM-Stakeholders Interactive Negotiation. - Sahar Abdelnabi; Amr Gomaa; Sarath Sivaprasad; Lea Schönherr; Mario Fritz (NeurIPS, 2024)

Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition. - Edoardo Debenedetti; Javier Rando; Daniel Paleka; Silaghi Fineas Florin; Dragos Albastroiu; Niv Cohen; Yuval Lemberg; Reshmi Ghosh; Rui Wen 002; Ahmed Salem 001; Giovanni Cherubin; Santiago Zanella-Béguelin; et al. (NeurIPS, 2024)

Exploring Value Biases: How LLMs Deviate Towards the Ideal. - Sarath Sivaprasad; Pramod Kaushik; Sahar Abdelnabi; Mario Fritz (CoRR, 2024)

Can LLMs Separate Instructions From Data? And What Do We Even Mean By That? - Egor Zverev; Sahar Abdelnabi; Mario Fritz; Christoph H. Lampert (CoRR, 2024)

Are you still on track!? Catching LLM Task Drift with Activations. - Sahar Abdelnabi; Aideen Fay; Giovanni Cherubin; Ahmed Salem 001; Mario Fritz; Andrew Paverd (CoRR, 2024)

Hypothesizing Missing Causal Variables with LLMs. - Ivaxi Sheth; Sahar Abdelnabi; Mario Fritz (CoRR, 2024)

A Theory of Response Sampling in LLMs: Part Descriptive and Part Prescriptive. - Sarath Sivaprasad; Pramod Kaushik; Sahar Abdelnabi; Mario Fritz (ACL (1), 2025)

Can LLMs Separate Instructions From Data? And What Do We Even Mean By That? - Egor Zverev; Sahar Abdelnabi; Soroush Tabesh; Mario Fritz; Christoph H. Lampert (ICLR, 2025)

Get My Drift? Catching LLM Task Drift with Activation Deltas. - Sahar Abdelnabi; Aideen Fay; Giovanni Cherubin; Ahmed Salem 001; Mario Fritz; Andrew Paverd (SaTML, 2025)

Firewalls to Secure Dynamic LLM Agentic Networks. - Sahar Abdelnabi; Amr Gomaa; Eugene Bagdasarian; Per Ola Kristensson; Reza Shokri (CoRR, 2025)

Safety is Essential for Responsible Open-Ended Systems. - Ivaxi Sheth; Jan Wehner; Sahar Abdelnabi; Ruta Binkyte; Mario Fritz (CoRR, 2025)

Taxonomy, Opportunities, and Challenges of Representation Engineering for Large Language Models. - Jan Wehner; Sahar Abdelnabi; Daniel Tan; David Krueger 001; Mario Fritz (CoRR, 2025)

Linear Control of Test Awareness Reveals Differential Compliance in Reasoning Models. - Sahar Abdelnabi; Ahmed Salem 001 (CoRR, 2025)

Contextual Integrity in LLMs via Reasoning and Reinforcement Learning. - Guangchen Lan; Huseyin A. Inan; Sahar Abdelnabi; Janardhan Kulkarni; Lukas Wutschitz; Reza Shokri; Christopher G. Brinton; Robert Sim (CoRR, 2025)

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge. - Sahar Abdelnabi; Aideen Fay; Ahmed Salem 001; Egor Zverev; Kai-Chieh Liao; Chi-Huang Liu; Chun-Chih Kuo; Jannis Weigend; Danyael Manlangit; Alex Apostolov; Haris Umair; João Donato; et al. (CoRR, 2025)