@inproceedings{Damm2026PRADAProbability-Ratio-Based,

title = {PRADA: Probability-Ratio-Based Attribution and Detection of Autoregressive-Generated Images},

author = {Simon Damm and Jonas Ricker and Henning Petzka and Asja Fischer},

url = {https://openaccess.thecvf.com/content/CVPR2026F/html/Damm_PRADA_Probability-Ratio-Based_Attribution_and_Detection_of_Autoregressive-Generated_Images_CVPRF_2026_paper.html},

year  = {2026},

date = {2026-01-01},

booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) Findings},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Höltervennhoff2026Thatsanother,

title = {"That's another doom I haven't thought about": A User Study on AI Labels as a Safeguard Against Image-Based Misinformation},

author = {Sandra Höltervennhoff and Jonas Ricker and Maike M. Raphael and Charlotte Schwedes and Rebecca Weil and Asja Fischer and Thorsten Holz and Lea Schönherr and Sascha Fahl},

url = {https://doi.org/10.1145/3772318.3791006},

year  = {2026},

date = {2026-01-01},

booktitle = {CHI Conference on Human Factors in Computing Systems (CHI)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Lukovnikov2026ClusterMarkTowards,

title = {ClusterMark: Towards Robust Watermarking for Autoregressive Image Generators with Visual Token Clustering},

author = {Denis Lukovnikov and Andreas Müller and Erwin Quiring and Asja Fischer},

url = {https://openaccess.thecvf.com/content/CVPR2026/html/Lukovnikov_ClusterMark_Towards_Robust_Watermarking_for_Autoregressive_Image_Generators_with_Visual_CVPR_2026_paper.html},

year  = {2026},

date = {2026-01-01},

booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{nokey,

title = {Solving Concealed ILWE and its Application for Breaking Masked Dilithium},

author = {Simon Damm and Asja Fischer and Alexander May and Soundes Marzougui and Leander Schwarz and Henning Seidler and Jean-Pierre Seifert and Jonas Thietke and Vincent Quentin Ulitzsch},

url = {https://eprint.iacr.org/2025/1629.pdf, Paper},

year  = {2025},

date = {2025-12-01},

urldate = {2025-12-01},

booktitle = {Advances in Cryptology (ASIACRYPT 25)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Damm2025SolvingConcealed,

title = {Solving Concealed ILWE and Its Application for Breaking Masked Dilithium},

author = {Simon Damm and Asja Fischer and Alexander May and Soundes Marzougui and Leander Schwarz and Henning Seidler and Jean-Pierre Seifert and Jonas Thietke and Vincent Quentin Ulitzsch},

url = {https://doi.org/10.1007/978-981-95-5096-8_19},

year  = {2025},

date = {2025-01-01},

booktitle = {International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Damm2025AnomalyDINOBoosting,

title = {AnomalyDINO: Boosting Patch-based Few-shot Anomaly Detection with DINOv2},

author = {Simon Damm and Mike Laszkiewicz and Johannes Lederer and Asja Fischer},

url = {https://openaccess.thecvf.com/content/WACV2025/html/Damm_AnomalyDINO_Boosting_Patch-Based_Few-Shot_Anomaly_Detection_with_DINOv2_WACV_2025_paper.html},

year  = {2025},

date = {2025-01-01},

booktitle = {IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Dehghanighobadi2025CanLLMs,

title = {Can LLMs Explain Themselves Counterfactually?},

author = {Zahra Dehghanighobadi and Asja Fischer and Muhammad Bilal Zafar},

url = {https://doi.org/10.18653/v1/2025.emnlp-main.396},

year  = {2025},

date = {2025-01-01},

booktitle = {Conference on Empirical Methods in Natural Language Processing (EMNLP)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Däubener2025ELBORegularized,

title = {ELBO, Regularized Maximum Likelihood, and Their Common One-Sample Approximation for Training Stochastic Neural Networks},

author = {Sina Däubener and Simon Damm and Asja Fischer},

url = {https://openreview.net/forum?id=j4yFTNrdrO},

year  = {2025},

date = {2025-01-01},

booktitle = {Conference on Uncertainty in Artificial Intelligence (UAI)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Lam2025ExploringPotential,

title = {Exploring the Potential and Limitations of Machine Learning for Forecasting Groundwater Recharge from Meteorological Time Series},

author = {Florian Lam and Simon Damm and Asja Fischer and Thomas Heinze},

url = {https://agu.confex.com/agu/agu25/meetingapp.cgi/Paper/1900224},

year  = {2025},

date = {2025-01-01},

booktitle = {AGU Annual Meeting},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Lukovnikov2025EnablingControlNet,

title = {Enabling ControlNet to follow Localized Descriptions Using Cross-Attention Control},

author = {Denis Lukovnikov and Asja Fischer},

url = {https://doi.org/10.1007/978-3-032-05981-9_19},

year  = {2025},

date = {2025-01-01},

booktitle = {European Conference on Machine Learning and Principles and Practice of Knowledge Discovery in Databases (ECML PKDD)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Lukovnikov2025AreSemantic,

title = {Are Semantic Watermarks for Diffusion Models Resilient to Layout Control?},

author = {Denis Lukovnikov and Andreas Müller and Jonas Thietke and Erwin Quiring and Asja Fischer},

url = {https://openreview.net/forum?id=pFMNK403AH},

year  = {2025},

date = {2025-01-01},

booktitle = {International Conference on Learning Representations (ICLR) Workshops},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Müller2025Black-BoxForgery,

title = {Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models},

author = {Andreas Müller and Denis Lukovnikov and Jonas Thietke and Asja Fischer and Erwin Quiring},

url = {https://doi.org/10.1109/CVPR52734.2025.01950},

year  = {2025},

date = {2025-01-01},

booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Puttschneider2025TowardsOptimal,

title = {Towards the Optimal Control Perspective of ResNet Training},

author = {Jens Püttschneider and Simon Heilig and Asja Fischer and Timm Faulwasser},

url = {https://openreview.net/forum?id=xMXpVetlhj},

year  = {2025},

date = {2025-01-01},

booktitle = {International Conference on Machine Learning (ICML) Workshops},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Thietke2025TowardsCorrect,

title = {Towards a Correct Usage of Cryptography in Semantic Watermarks for Diffusion Models},

author = {Jonas Thietke and Andreas Müller and Denis Lukovnikov and Asja Fischer and Erwin Quiring},

url = {https://openreview.net/forum?id=yENK6DYuXv},

year  = {2025},

date = {2025-01-01},

booktitle = {International Conference on Learning Representations (ICLR) Workshops},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Adilova2024InformationPlane,

title = {Information Plane Analysis for Dropout Neural Networks},

author = {Linara Adilova and Bernhard C. Geiger and Asja Fischer},

url = {https://openreview.net/forum?id=bQB6qozaBw},

year  = {2024},

date = {2024-01-01},

booktitle = {International Conference on Learning Representations (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Frank2024RepresentativeStudy,

title = {A Representative Study on Human Detection of Artificially Generated Media Across Countries},

author = {Joel Frank and Franziska Herbert and Jonas Ricker and Lea Schönherr and Thorsten Eisenhofer and Asja Fischer and Markus Dürmuth and Thorsten Holz},

url = {https://doi.org/10.1109/SP54263.2024.00159},

year  = {2024},

date = {2024-01-01},

urldate = {2024-01-01},

booktitle = {IEEE Symposium on Security and Privacy (SP)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Laszkiewicz2024BenchmarkingFairness,

title = {Benchmarking the Fairness of Image Upsampling Methods},

author = {Mike Laszkiewicz and Imant Daunhawer and Julia E. Vogt and Asja Fischer and Johannes Lederer},

url = {https://doi.org/10.1145/3630106.3658921},

year  = {2024},

date = {2024-01-01},

booktitle = {ACM Conference on Fairness, Accountability, and Transparency (FaccT)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Laszkiewicz2024Single-ModelAttribution,

title = {Single-Model Attribution of Generative Models Through Final-Layer Inversion},

author = {Mike Laszkiewicz and Jonas Ricker and Johannes Lederer and Asja Fischer},

url = {https://proceedings.mlr.press/v235/laszkiewicz24a.html},

year  = {2024},

date = {2024-01-01},

urldate = {2024-01-01},

booktitle = {International Conference on Machine Learning (ICML)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Maag2024Uncertainty-WeightedLoss,

title = {Uncertainty-Weighted Loss Functions for Improved Adversarial Attacks on Semantic Segmentation},

author = {Kira Maag and Asja Fischer},

url = {https://doi.org/10.1109/WACV57701.2024.00386},

year  = {2024},

date = {2024-01-01},

booktitle = {IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Maag2024Uncertainty-BasedDetection,

title = {Uncertainty-Based Detection of Adversarial Attacks in Semantic Segmentation},

author = {Kira Maag and Asja Fischer},

url = {https://doi.org/10.5220/0012303500003660},

year  = {2024},

date = {2024-01-01},

booktitle = {International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications (VISIGRAPP)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Maag2024DetectingAdversarial,

title = {Detecting Adversarial Attacks in Semantic Segmentation via Uncertainty Estimation: A Deep Analysis},

author = {Kira Maag and Roman Resner and Asja Fischer},

url = {https://doi.org/10.1007/978-3-032-07623-6_11},

year  = {2024},

date = {2024-01-01},

booktitle = {International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications (VISIGRAPP)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Pizarro2024DistriBlockIdentifying,

title = {DistriBlock: Identifying Adversarial Audio Samples by Leveraging Characteristics of the Output Distribution},

author = {Matías Pizarro and Dorothea Kolossa and Asja Fischer},

url = {https://proceedings.mlr.press/v244/pizarro24a.html},

year  = {2024},

date = {2024-01-01},

urldate = {2024-01-01},

booktitle = {Conference on Uncertainty in Artificial Intelligence (UAI)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Pizzi2024ReassessingNoise,

title = {Reassessing Noise Augmentation Methods in the Context of Adversarial Speech},

author = {Karla Pizzi and Matías Pizarro and Asja Fischer},

url = {https://doi.org/10.21437/SPSC.2024-5},

year  = {2024},

date = {2024-01-01},

booktitle = {Symposium on Security and Privacy in Speech Communication (SPSC)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Ricker2024AI-GeneratedFaces,

title = {AI-Generated Faces in the Real World: A Large-Scale Case Study of Twitter Profile Images},

author = {Jonas Ricker and Dennis Assenmacher and Thorsten Holz and Asja Fischer and Erwin Quiring},

url = {https://doi.org/10.1145/3678890.3678922},

year  = {2024},

date = {2024-01-01},

urldate = {2024-01-01},

booktitle = {International Symposium on Research in Attacks, Intrusions and Defenses (RAID)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Ricker2024TowardsDetection,

title = {Towards the Detection of Diffusion Model Deepfakes},

author = {Jonas Ricker and Simon Damm and Thorsten Holz and Asja Fischer},

url = {https://doi.org/10.5220/0012422000003660},

year  = {2024},

date = {2024-01-01},

booktitle = {International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications (VISIGRAPP)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Ricker2024AEROBLADETraining-Free,

title = {AEROBLADE: Training-Free Detection of Latent Diffusion Images Using Autoencoder Reconstruction Error},

author = {Jonas Ricker and Denis Lukovnikov and Asja Fischer},

url = {https://doi.org/10.1109/CVPR52733.2024.00872},

year  = {2024},

date = {2024-01-01},

urldate = {2024-01-01},

booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Sun2024ExploitingInternal,

title = {Exploiting Internal Randomness for Privacy in Vertical Federated Learning},

author = {Yulian Sun and Li Duan and Ricardo Mendes and Derui Zhu and Yue Xia and Yong Li and Asja Fischer},

url = {https://doi.org/10.1007/978-3-031-70890-9_20},

year  = {2024},

date = {2024-01-01},

booktitle = {European Symposium on Research in Computer Security (ESORICS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Velychko2024Learningsparse,

title = {Learning sparse codes with entropy-based ELBOs},

author = {Dmytro Velychko and Simon Damm and Asja Fischer and Jörg Lücke},

url = {https://proceedings.mlr.press/v238/velychko24a.html},

year  = {2024},

date = {2024-01-01},

booktitle = {International Conference on Artificial Intelligence and Statistics (AISTATS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Adilova2023Layer-wiseLinear,

title = {Layer-wise Linear Mode Connectivity},

author = {Linara Adilova and Maksym Andriushchenko and Michael Kamp and Asja Fischer and Martin Jaggi},

url = {https://openreview.net/forum?id=LfmZh91tDI},

year  = {2023},

date = {2023-01-01},

booktitle = {International Conference on Learning Representations (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Adilova2023InformationPlane,

title = {Information Plane Analysis for Dropout Neural Networks},

author = {Linara Adilova and Bernhard C. Geiger and Asja Fischer},

url = {https://openreview.net/forum?id=bQB6qozaBw},

year  = {2023},

date = {2023-01-01},

booktitle = {International Conference on Learning Representations (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Damm2023ELBOof,

title = {The ELBO of Variational Autoencoders Converges to a Sum of Entropies},

author = {Simon Damm and Dennis Forster and Dmytro Velychko and Zhenwen Dai and Asja Fischer and Jörg Lücke},

url = {https://proceedings.mlr.press/v206/damm23a.html},

year  = {2023},

date = {2023-01-01},

booktitle = {International Conference on Artificial Intelligence and Statistics (AISTATS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Däubener2022HowSampling,

title = {How Sampling Impacts the Robustness of Stochastic Neural Networks},

author = {Sina Däubener and Asja Fischer},

url = {https://proceedings.neurips.cc/paper_files/paper/2022/hash/429d69979c22b06d6baa65caf3ab1e10-Abstract-Conference.html},

year  = {2022},

date = {2022-01-01},

booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Laszkiewicz2022MarginalTail-Adaptive,

title = {Marginal Tail-Adaptive Normalizing Flows},

author = {Mike Laszkiewicz and Johannes Lederer and Asja Fischer},

url = {https://proceedings.mlr.press/v162/laszkiewicz22a.html},

year  = {2022},

date = {2022-01-01},

booktitle = {International Conference on Machine Learning (ICML)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Brugge2021Onconvergence,

title = {On the convergence of the Metropolis algorithm with fixed-order updates for multivariate binary probability distributions},

author = {Kai Brügge and Asja Fischer and Christian Igel},

url = {https://proceedings.mlr.press/v130/brugge21a.html},

year  = {2021},

date = {2021-01-01},

booktitle = {International Conference on Artificial Intelligence and Statistics (AISTATS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Esteves2021HORUS-NERMultimodal,

title = {HORUS-NER: A Multimodal Named Entity Recognition Framework for Noisy Data},

author = {Diego Esteves and José Marcelino and Piyush Chawla and Asja Fischer and Jens Lehmann},

url = {https://doi.org/10.1007/978-3-030-74251-5_8},

year  = {2021},

date = {2021-01-01},

booktitle = {Advances in Intelligent Data Analysis (IDA)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Laszkiewicz2021ThresholdedAdaptive,

title = {Thresholded Adaptive Validation: Tuning the Graphical Lasso for Graph Recovery},

author = {Mike Laszkiewicz and Asja Fischer and Johannes Lederer},

url = {https://proceedings.mlr.press/v130/laszkiewicz21a.html},

year  = {2021},

date = {2021-01-01},

booktitle = {International Conference on Artificial Intelligence and Statistics (AISTATS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}