On the Effect of Clock Frequency on Voltage and Electromagnetic Fault Injection. - Stefanos Koffas; Praveen Kumar Vadnala (ACNS Workshops, 2022)

More is Better (Mostly): On the Backdoor Attacks in Federated Graph Neural Networks. - Jing Xu 028; Rui Wang 070; Stefanos Koffas; Kaitai Liang; Stjepan Picek (ACSAC, 2022)

Dynamic Backdoors with Global Average Pooling. - Stefanos Koffas; Stjepan Picek; Mauro Conti (AICAS, 2022)

Can You Hear It?: Backdoor Attacks via Ultrasonic Triggers. - Stefanos Koffas; Jing Xu 028; Mauro Conti; Stjepan Picek (WiseML@WiSec, 2022)

Watermarking Graph Neural Networks based on Backdoor Attacks. - Jing Xu 028; Stefanos Koffas; Oguzhan Ersoy; Stjepan Picek (EuroS&P, 2023)

Going in Style: Audio Backdoors Through Stylistic Transformations. - Stefanos Koffas; Luca Pajola; Stjepan Picek; Mauro Conti (ICASSP, 2023)

A Systematic Evaluation of Backdoor Trigger Characteristics in Image Classification. - Gorka Abad; Jing Xu 028; Stefanos Koffas; Behrad Tajalli; Stjepan Picek (CoRR, 2023)

Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound. - Hanbo Cai; Pengcheng Zhang 001; Hai Dong; Yan Xiao 002; Stefanos Koffas; Yiming Li 004 (CoRR, 2023)

BlindSage: Label Inference Attacks against Node-level Vertical Federated Graph Neural Networks. - Marco Arazzi; Mauro Conti; Stefanos Koffas; Marina Krcek; Antonino Nocera; Stjepan Picek; Jing Xu 028 (CoRR, 2023)

Invisible Threats: Backdoor Attack in OCR Systems. - Mauro Conti; Nicola Farronato; Stefanos Koffas; Luca Pajola; Stjepan Picek (CoRR, 2023)

Tabdoor: Backdoor Vulnerabilities in Transformer-based Neural Networks for Tabular Data. - Bart Pleiter; Behrad Tajalli; Stefanos Koffas; Gorka Abad; Jing Xu 028; Martha A. Larson; Stjepan Picek (CoRR, 2023)

Dr. Jekyll and Mr. Hyde: Two Faces of LLMs. - Matteo Gioele Collu; Tom Janssen-Groesbeek; Stefanos Koffas; Mauro Conti; Stjepan Picek (CoRR, 2023)

Backdoor Pony: Evaluating backdoor attacks and defenses in different domains. - Arthur Mercier; Nikita Smolin; Oliver Sihlovec; Stefanos Koffas; Stjepan Picek (SoftwareX, 2023)

EmoBack: Backdoor Attacks Against Speaker Identification Using Emotional Prosody. - Coen Schoof; Stefanos Koffas; Mauro Conti; Stjepan Picek (AISec@CCS, 2024)

ELMs Under Siege: A Study on Backdoor Attacks on Extreme Learning Machines. - Behrad Tajalli; Stefanos Koffas; Gorka Abad; Stjepan Picek (AISec@CCS, 2024)

BAN: Detecting Backdoors Activated by Adversarial Neuron Noise. - Xiaoyun Xu; Zhuoran Liu 001; Stefanos Koffas; Shujian Yu; Stjepan Picek (NeurIPS, 2024)

Backdoors on Manifold Learning. - Christina Kreza; Stefanos Koffas; Behrad Tajalli; Mauro Conti; Stjepan Picek (WiseML@WiSec, 2024)

Beyond PhantomSponges: Enhancing Sponge Attack on Object Detection Models. - Coen Schoof; Stefanos Koffas; Mauro Conti; Stjepan Picek (WiseML@WiSec, 2024)

The SpongeNet Attack: Sponge Weight Poisoning of Deep Neural Networks. - Jona te Lintelo; Stefanos Koffas; Stjepan Picek (CoRR, 2024)

Let's Focus: Focused Backdoor Attack against Federated Transfer Learning. - Marco Arazzi; Stefanos Koffas; Antonino Nocera; Stjepan Picek (CoRR, 2024)

L2 · M = C2 Large Language Models as Covert Channels... a Systematic Analysis. - Simen Gaure; Stefanos Koffas; Stjepan Picek; Sondre Rønjom (CoRR, 2024)

Unveiling the Threat: Investigating Distributed and Centralized Backdoor Attacks in Federated Graph Neural Networks. - Jing Xu 028; Stefanos Koffas; Stjepan Picek (DTRAP, 2024)

Toward Stealthy Backdoor Attacks Against Speech Recognition via Elements of Sound. - Hanbo Cai; Pengcheng Zhang 001; Hai Dong; Yan Xiao 002; Stefanos Koffas; Yiming Li 004 (IEEE Trans. Inf. Forensics Secur., 2024)

L2 · M = C2 Large Language Models Are Covert Channels. - Simen Gaure; Stefanos Koffas; Stjepan Picek; Sondre Rønjom (ICASSP, 2025)

Towards Backdoor Stealthiness in Model Parameter Space. - Xiaoyun Xu; Zhuoran Liu 001; Stefanos Koffas; Stjepan Picek (CoRR, 2025)