CD-UAP: Class Discriminative Universal Adversarial Perturbation. - Chaoning Zhang; Philipp Benz; Tooba Imtiaz; In-So Kweon (AAAI, 2020)

Double Targeted Universal Adversarial Perturbations. - Philipp Benz; Chaoning Zhang; Tooba Imtiaz; In So Kweon (ACCV (4), 2020)

Understanding Adversarial Examples From the Mutual Influence of Images and Perturbations. - Chaoning Zhang; Philipp Benz; Tooba Imtiaz; In So Kweon (CVPR, 2020)

Data from Model: Extracting Data from Non-robust and Robust Models. - Philipp Benz; Chaoning Zhang; Tooba Imtiaz; In-So Kweon (CoRR, 2020)

Volumetric Propagation Network: Stereo-LiDAR Fusion for Long-Range Depth Estimation. - Jaesung Choe; Kyungdon Joo; Tooba Imtiaz; In So Kweon (IEEE Robotics Autom. Lett., 2021)

SAIF: Sparse Adversarial and Interpretable Attack Framework. - Tooba Imtiaz; Morgan Kohler; Jared Miller; Zifeng Wang 002; Mario Sznaier; Octavia I. Camps; Jennifer G. Dy (CoRR, 2022)

STAR: Stability-Inducing Weight Perturbation for Continual Learning. - Masih Eskandar; Tooba Imtiaz; Davin Hill; Zifeng Wang 002; Jennifer G. Dy (ICLR, 2025)

ADAPT to Robustify Prompt Tuning Vision Transformers. - Masih Eskandar; Tooba Imtiaz; Zifeng Wang 002; Jennifer G. Dy (Trans. Mach. Learn. Res., 2025)

SAIF: Sparse Adversarial and Imperceptible Attack Framework. - Tooba Imtiaz; Morgan Kohler; Jared Miller; Zifeng Wang 002; Masih Eskandar; Mario Sznaier; Octavia I. Camps; Jennifer G. Dy (Trans. Mach. Learn. Res., 2025)