PRADA: Protecting against DNN Model Stealing Attacks. - Mika Juuti; Sebastian Szyller; Alexey Dmitrenko; Samuel Marchal; N. Asokan (CoRR, 2018)

Detecting organized eCommerce fraud using scalable categorical clustering. - Samuel Marchal; Sebastian Szyller (ACSAC, 2019)

PRADA: Protecting Against DNN Model Stealing Attacks. - Mika Juuti; Sebastian Szyller; Samuel Marchal; N. Asokan (EuroS&P, 2019)

Extraction of Complex DNN Models: Real Threat or Boogeyman? - Buse Gul Atli; Sebastian Szyller; Mika Juuti; Samuel Marchal; N. Asokan (CoRR, 2019)

DAWN: Dynamic Adversarial Watermarking of Neural Networks. - Sebastian Szyller; Buse Gul Atli; Samuel Marchal; N. Asokan (ACM Multimedia, 2021)

Good Artists Copy, Great Artists Steal: Model Extraction Attacks Against Image Translation Generative Adversarial Networks. - Sebastian Szyller; Vasisht Duddu; Tommi Gröndahl; N. Asokan (CoRR, 2021)

SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning. - Vasisht Duddu; Sebastian Szyller; N. Asokan (CoRR, 2021)

Conflicting Interactions Among Protections Mechanisms for Machine Learning Models. - Sebastian Szyller; N. Asokan (CoRR, 2022)

Conflicting Interactions among Protection Mechanisms for Machine Learning Models. - Sebastian Szyller; N. Asokan (AAAI, 2023)

On the Robustness of Dataset Inference. - Sebastian Szyller; Rui Zhang; Jian Liu 012; N. Asokan (Trans. Mach. Learn. Res., 2023)

Ownership and Confidentiality in Machine Learning. - Sebastian Szyller (2023)

LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked. - Mansi Phute; Alec Helbling; Matthew Hull; Shengyun Peng; Sebastian Szyller; Cory Cornelius; Duen Horng Chau (Tiny Papers @ ICLR, 2024)

SoK: Unintended Interactions among Machine Learning Defenses and Risks. - Vasisht Duddu; Sebastian Szyller; N. Asokan (SP, 2024)

False Claims against Model Ownership Resolution. - Jian Liu 012; Rui Zhang; Sebastian Szyller; Kui Ren 001; N. Asokan (USENIX Security Symposium, 2024)

Imperceptible Adversarial Examples in the Physical World. - Weilin Xu; Sebastian Szyller; Cory Cornelius; Luis Murillo Rojas; Marius Arvinte; Alvaro Velasquez; Jason Martin; Nageen Himayat (CoRR, 2024)

Soft Token Attacks Cannot Reliably Audit Unlearning in Large Language Models. - Haokun Chen; Sebastian Szyller; Weilin Xu; Nageen Himayat (CoRR, 2025)

Atlas: A Framework for ML Lifecycle Provenance & Transparency. - Marcin Spoczynski; Marcela S. Melara; Sebastian Szyller (CoRR, 2025)