Feature Generating Networks for Zero-Shot Learning. - Yongqin Xian; Tobias Lorenz 002; Bernt Schiele; Zeynep Akata (CVPR, 2018)

Robustness Certification for Point Cloud Models. - Tobias Lorenz 002; Anian Ruoss; Mislav Balunovic; Gagandeep Singh 001; Martin T. Vechev (ICCV, 2021)

Backdoor Attacks on Network Certification via Data Poisoning. - Tobias Lorenz 002; Marta Kwiatkowska; Mario Fritz (CoRR, 2021)

Certifiers Make Neural Networks Vulnerable to Availability Attacks. - Tobias Lorenz 002; Marta Kwiatkowska; Mario Fritz (AISec@CCS, 2023)

FullCert: Deterministic End-to-End Certification for Training and Inference of Neural Networks. - Tobias Lorenz 002; Marta Kwiatkowska; Mario Fritz (GCPR (1), 2024)

Adaptive Hierarchical Certification for Segmentation using Randomized Smoothing. - Alaa Anani; Tobias Lorenz 002; Bernt Schiele; Mario Fritz (ICML, 2024)

BiCert: A Bilinear Mixed Integer Programming Formulation for Precise Certified Bounds Against Data Poisoning Attacks. - Tobias Lorenz 002; Marta Kwiatkowska; Mario Fritz (CoRR, 2024)

Pixel-level Certified Explanations via Randomized Smoothing. - Alaa Anani; Tobias Lorenz 002; Mario Fritz; Bernt Schiele (CoRR, 2025)