DeepFool: A Simple and Accurate Method to Fool Deep Neural Networks. - Seyed-Mohsen Moosavi-Dezfooli; Alhussein Fawzi; Pascal Frossard (CVPR, 2016)

Simultaneous Acoustic Localization of Multiple Smartphones with Euclidean Distance Matrices. - Seyed-Mohsen Moosavi-Dezfooli; Yvonne-Anne Pignolet; Dacfey Dzung (EWSN, 2016)

Robustness of classifiers: from adversarial to random noise. - Alhussein Fawzi; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard (NIPS, 2016)

Universal Adversarial Perturbations. - Seyed-Mohsen Moosavi-Dezfooli; Alhussein Fawzi; Omar Fawzi; Pascal Frossard (CVPR, 2017)

Classification regions of deep neural networks. - Alhussein Fawzi; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard; Stefano Soatto (CoRR, 2017)

Analysis of universal adversarial perturbations. - Seyed-Mohsen Moosavi-Dezfooli; Alhussein Fawzi; Omar Fawzi; Pascal Frossard; Stefano Soatto (CoRR, 2017)

The Robustness of Deep Networks: A Geometrical Perspective. - Alhussein Fawzi; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard (IEEE Signal Process. Mag., 2017)

Adaptive Quantization for Deep Neural Network. - Yiren Zhou; Seyed-Mohsen Moosavi-Dezfooli; Ngai-Man Cheung; Pascal Frossard (AAAI, 2018)

Empirical Study of the Topology and Geometry of Deep Networks. - Alhussein Fawzi; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard; Stefano Soatto (CVPR, 2018)

Geometric Robustness of Deep Networks: Analysis and Improvement. - Can Kanbak; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard (CVPR, 2018)

Robustness of Classifiers to Universal Perturbations: A Geometric Perspective. - Seyed-Mohsen Moosavi-Dezfooli; Alhussein Fawzi; Omar Fawzi; Pascal Frossard; Stefano Soatto (ICLR (Poster), 2018)

Divide, Denoise, and Defend against Adversarial Attacks. - Seyed-Mohsen Moosavi-Dezfooli; Ashish Shrivastava 001; Oncel Tuzel (CoRR, 2018)

SparseFool: A Few Pixels Make a Big Difference. - Apostolos Modas; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard (CVPR, 2019)

Robustness via Curvature Regularization, and Vice Versa. - Seyed-Mohsen Moosavi-Dezfooli; Alhussein Fawzi; Jonathan Uesato; Pascal Frossard (CVPR, 2019)

Universal Adversarial Attacks on Text Classifiers. - Melika Behjati; Seyed-Mohsen Moosavi-Dezfooli; Mahdieh Soleymani Baghshah; Pascal Frossard (ICASSP, 2019)

A Geometry-Inspired Decision-Based Attack. - Yujia Liu; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard (ICCV, 2019)

Geometry of adversarial robustness of deep networks: methods and applications. - Seyed-Mohsen Moosavi-Dezfooli (2019)

GeoDA: A Geometric Framework for Black-Box Adversarial Attacks. - Ali Rahmati; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard; Huaiyu Dai (CVPR, 2020)

Hold me tight! Influence of discriminative features on deep network boundaries. - Guillermo Ortiz-Jiménez; Apostolos Modas; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard (NeurIPS, 2020)

Neural Anisotropy Directions. - Guillermo Ortiz-Jiménez; Apostolos Modas; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard (NeurIPS, 2020)

Uniform Convergence, Adversarial Spheres and a Simple Remedy. - Gregor Bachmann; Seyed-Mohsen Moosavi-Dezfooli; Thomas Hofmann 001 (ICML, 2021)

What can linearized neural networks actually say about generalization? - Guillermo Ortiz-Jiménez; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard (NeurIPS, 2021)

A neural anisotropic view of underspecification in deep learning. - Guillermo Ortiz-Jiménez; Itamar Franco Salazar-Reque; Apostolos Modas; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard (CoRR, 2021)

Understanding Catastrophic Overfitting in Adversarial Training. - Peilin Kang; Seyed-Mohsen Moosavi-Dezfooli (CoRR, 2021)

Adversarial training may be a double-edged sword. - Ali Rahmati; Seyed-Mohsen Moosavi-Dezfooli; Huaiyu Dai (CoRR, 2021)

Are socially-aware trajectory prediction models really socially-aware? - Saeed Saadatnejad; Mohammadhossein Bahari; Pedram Khorsandi; Mohammad Saneian; Seyed-Mohsen Moosavi-Dezfooli; Alexandre Alahi (CoRR, 2021)

Vehicle trajectory prediction works, but not everywhere. - Mohammadhossein Bahari; Saeed Saadatnejad; Ahmad Rahimi; Mohammad Shaverdikondori; Mohammad Shahidzadeh; Seyed-Mohsen Moosavi-Dezfooli; Alexandre Alahi (CoRR, 2021)

Optimism in the Face of Adversity: Understanding and Improving Deep Learning Through Adversarial Robustness. - Guillermo Ortiz-Jiménez; Apostolos Modas; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard (Proc. IEEE, 2021)

On Smoothed Explanations: Quality and Robustness. - Ahmad Ajalloeian; Seyed-Mohsen Moosavi-Dezfooli; Michalis Vlachos; Pascal Frossard (CIKM, 2022)

Vehicle trajectory prediction works, but not everywhere. - Mohammadhossein Bahari; Saeed Saadatnejad; Ahmad Rahimi; Mohammad Shaverdikondori; Amir Hossein Shahidzadeh; Seyed-Mohsen Moosavi-Dezfooli; Alexandre Alahi (CVPR, 2022)

PRIME: A Few Primitives Can Boost Robustness to Common Corruptions. - Apostolos Modas; Rahul Rade; Guillermo Ortiz-Jiménez; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard (ECCV (25), 2022)

Reducing Excessive Margin to Achieve a Better Accuracy vs. Robustness Trade-off. - Rahul Rade; Seyed-Mohsen Moosavi-Dezfooli (ICLR, 2022)

The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Training. - Junhao Dong 001; Seyed-Mohsen Moosavi-Dezfooli; Jianhuang Lai; Xiaohua Xie (CVPR, 2023)

How to choose your best allies for a transferable attack? - Thibault Maho; Seyed-Mohsen Moosavi-Dezfooli; Teddy Furon (ICCV, 2023)

Sparse Attacks for Manipulating Explanations in Deep Neural Network Models. - Ahmad Ajalloeian; Seyed-Mohsen Moosavi-Dezfooli; Michalis Vlachos; Pascal Frossard (ICDM, 2023)

Revisiting DeepFool: generalization and improvement. - Alireza Abdollahpourrostam; Mahed Abroshan; Seyed-Mohsen Moosavi-Dezfooli (CoRR, 2023)

SuperDeepFool: a new fast and accurate minimal adversarial attack. - Alireza Abdollahpour; Mahed Abroshan; Seyed-Mohsen Moosavi-Dezfooli (NeurIPS, 2024)

Certified Human Trajectory Prediction. - Mohammadhossein Bahari; Saeed Saadatnejad; Amirhossein Asgari-Farsangi; Seyed-Mohsen Moosavi-Dezfooli; Alexandre Alahi (CoRR, 2024)

Tracing the Roots: Leveraging Temporal Dynamics in Diffusion Trajectories for Origin Attribution. - Andreas Floros 002; Seyed-Mohsen Moosavi-Dezfooli; Pier Luigi Dragotti (CoRR, 2024)

Certified Human Trajectory Prediction. - Mohammadhossein Bahari; Saeed Saadatnejad; Amirhossein Askari-Farsangi; Seyed-Mohsen Moosavi-Dezfooli; Alexandre Alahi (CVPR, 2025)

Geometric Inductive Biases of Deep Networks: The Role of Data and Architecture. - Sajad Movahedi; Antonio Orvieto; Seyed-Mohsen Moosavi-Dezfooli (ICLR, 2025)

Trustworthy Image Super-Resolution via Generative Pseudoinverse. - Andreas Floros 002; Seyed-Mohsen Moosavi-Dezfooli; Pier Luigi Dragotti (CoRR, 2025)

LORE: Lagrangian-Optimized Robust Embeddings for Visual Encoders. - Borna Khodabandeh; Amirabbas Afzali; Amirhossein Afsharrad; Seyed Shahabeddin Mousavi; Sanjay Lall; Sajjad Amini; Seyed-Mohsen Moosavi-Dezfooli (CoRR, 2025)

Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry. - Mahdi Salmani; Alireza Abdollahpoorrostam; Seyed-Mohsen Moosavi-Dezfooli (CoRR, 2025)