Imperio: Robust Over-the-Air Adversarial Examples for Automatic Speech Recognition Systems. - Lea Schönherr; Thorsten Eisenhofer; Steffen Zeiler; Thorsten Holz; Dorothea Kolossa (ACSAC, 2020)

Leveraging Frequency Analysis for Deep Fake Image Recognition. - Joel Frank; Thorsten Eisenhofer; Lea Schönherr; Asja Fischer; Dorothea Kolossa; Thorsten Holz (ICML, 2020)

Unacceptable, where is my privacy? Exploring Accidental Triggers of Smart Speakers. - Lea Schönherr; Maximilian Golla; Thorsten Eisenhofer; Jan Wiele; Dorothea Kolossa; Thorsten Holz (CoRR, 2020)

VENOMAVE: Clean-Label Poisoning Against Speech Recognition. - Hojjat Aghakhani; Thorsten Eisenhofer; Lea Schönherr; Dorothea Kolossa; Thorsten Holz; Christopher Kruegel; Giovanni Vigna (CoRR, 2020)

Dompteur: Taming Audio Adversarial Examples. - Thorsten Eisenhofer; Lea Schönherr; Joel Frank; Lars Speckemeier; Dorothea Kolossa; Thorsten Holz (USENIX Security Symposium, 2021)

Learned Systems Security. - Roei Schuster; Jin Peng Zhou; Thorsten Eisenhofer; Paul Grubbs; Nicolas Papernot (CoRR, 2022)

Exploring accidental triggers of smart speakers. - Lea Schönherr; Maximilian Golla; Thorsten Eisenhofer; Jan Wiele; Dorothea Kolossa; Thorsten Holz (Comput. Speech Lang., 2022)

Password-Authenticated Key Exchange from Group Actions. - Michel Abdalla; Thorsten Eisenhofer; Eike Kiltz; Sabrina Kunzweiler; Doreen Riepel (IACR Cryptol. ePrint Arch., 2022)

On the Limitations of Model Stealing with Uncertainty Quantification Models. - David Pape; Sina Däubener; Thorsten Eisenhofer; Antonio Emanuele Cinà; Lea Schönherr (ESANN, 2023)

Drone Security and the Mysterious Case of DJI's DroneID. - Nico Schiller; Merlin Chlosta; Moritz Schloegel; Nils Bars; Thorsten Eisenhofer; Tobias Scharnowski; Felix Domke; Lea Schönherr; Thorsten Holz (NDSS, 2023)

Venomave: Targeted Poisoning Against Speech Recognition. - Hojjat Aghakhani; Lea Schönherr; Thorsten Eisenhofer; Dorothea Kolossa; Thorsten Holz; Christopher Kruegel; Giovanni Vigna (SaTML, 2023)

No more Reviewer #2: Subverting Automatic Paper-Reviewer Assignment using Adversarial Learning. - Thorsten Eisenhofer; Erwin Quiring; Jonas Möller; Doreen Riepel; Thorsten Holz; Konrad Rieck (USENIX Security Symposium, 2023)

Security of machine learning systems. - Thorsten Eisenhofer (2023)

Cross-Language Differential Testing of JSON Parsers. - Jonas Möller; Felix Weißberg; Lukas Pirch; Thorsten Eisenhofer; Konrad Rieck (AsiaCCS, 2024)

SoK: Where to Fuzz? Assessing Target Selection Methods in Directed Fuzzing. - Felix Weissberg; Jonas Möller; Tom Ganz; Erik Imgrund; Lukas Pirch; Lukas Seidel; Moritz Schloegel; Thorsten Eisenhofer; Konrad Rieck (AsiaCCS, 2024)

A Representative Study on Human Detection of Artificially Generated Media Across Countries. - Joel Frank; Franziska Herbert; Jonas Ricker; Lea Schönherr; Thorsten Eisenhofer; Asja Fischer; Markus Dürmuth; Thorsten Holz (SP, 2024)

Whispers in the Machine: Confidentiality in LLM-integrated Systems. - Jonathan Evertz; Merlin Chlosta; Lea Schönherr; Thorsten Eisenhofer (CoRR, 2024)

Prompt Obfuscation for Large Language Models. - David Pape; Thorsten Eisenhofer; Lea Schönherr (CoRR, 2024)

Exploring the Potential of LLMs for Code Deobfuscation. - David Beste; Grégoire Menguy; Hossein Hajipour; Mario Fritz; Antonio Emanuele Cinà; Sébastien Bardin; Thorsten Holz; Thorsten Eisenhofer; Lea Schönherr (DIMVA (1), 2025)

Verifiable and Provably Secure Machine Unlearning. - Thorsten Eisenhofer; Doreen Riepel; Varun Chandrasekaran; Esha Ghosh; Olga Ohrimenko; Nicolas Papernot (SaTML, 2025)

Learned-Database Systems Security. - Roei Schuster; Jin Peng Zhou; Thorsten Eisenhofer; Paul Grubbs; Nicolas Papernot (Trans. Mach. Learn. Res., 2025)

Adversarial Observations in Weather Forecasting. - Erik Imgrund; Thorsten Eisenhofer; Konrad Rieck (CoRR, 2025)