Publications

@inproceedings{Damm2026PRADAProbability-Ratio-Based,

title = {PRADA: Probability-Ratio-Based Attribution and Detection of Autoregressive-Generated Images},

author = {Simon Damm and Jonas Ricker and Henning Petzka and Asja Fischer},

url = {https://arxiv.org/abs/2511.20068},

year  = {2026},

date = {2026-01-01},

booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) Findings},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Höltervennhoff2026Thatsanother,

title = {"That's another doom I haven't thought about": A User Study on AI Labels as a Safeguard Against Image-Based Misinformation},

author = {Sandra Höltervennhoff and Jonas Ricker and Maike M. Raphael and Charlotte Schwedes and Rebecca Weil and Asja Fischer and Thorsten Holz and Lea Schönherr and Sascha Fahl},

url = {https://arxiv.org/abs/2505.22845},

year  = {2026},

date = {2026-01-01},

booktitle = {CHI Conference on Human Factors in Computing Systems (CHI)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{nokey,

title = {Solving Concealed ILWE and its Application for Breaking Masked Dilithium},

author = {Simon Damm and Asja Fischer and Alexander May and Soundes Marzougui and Leander Schwarz and Henning Seidler and Jean-Pierre Seifert and Jonas Thietke and Vincent Quentin Ulitzsch},

url = {https://eprint.iacr.org/2025/1629.pdf, Paper},

year  = {2025},

date = {2025-12-01},

urldate = {2025-12-01},

booktitle = {Advances in Cryptology (ASIACRYPT 25)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{nokey,

title = {One Bit to Rule Them All - Imperfect Randomness Harms Lattice Signatures},

author = {Simon Damm and Nicolai Kraus and Alexander May and Julian Nowakowski and Jonas Thietke},

url = {https://eprint.iacr.org/2025/820.pdf, Paper

https://iacr.org/submit/files/slides/2025/pkc/pkc2025/144/144_slides.pdf, Slides

https://link.springer.com/chapter/10.1007/978-3-031-91820-9_10, DOI},

year  = {2025},

date = {2025-05-01},

urldate = {2025-05-01},

booktitle = {Public Key Cryptography (PKC '25)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Damm2025SolvingConcealed,

title = {Solving Concealed ILWE and Its Application for Breaking Masked Dilithium},

author = {Simon Damm and Asja Fischer and Alexander May and Soundes Marzougui and Leander Schwarz and Henning Seidler and Jean-Pierre Seifert and Jonas Thietke and Vincent Quentin Ulitzsch},

url = {https://doi.org/10.1007/978-981-95-5096-8_19},

year  = {2025},

date = {2025-01-01},

booktitle = {International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Damm2025AnomalyDINOBoosting,

title = {AnomalyDINO: Boosting Patch-based Few-shot Anomaly Detection with DINOv2},

author = {Simon Damm and Mike Laszkiewicz and Johannes Lederer and Asja Fischer},

url = {https://openaccess.thecvf.com/content/WACV2025/html/Damm_AnomalyDINO_Boosting_Patch-Based_Few-Shot_Anomaly_Detection_with_DINOv2_WACV_2025_paper.html},

year  = {2025},

date = {2025-01-01},

booktitle = {IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Dehghanighobadi2025CanLLMs,

title = {Can LLMs Explain Themselves Counterfactually?},

author = {Zahra Dehghanighobadi and Asja Fischer and Muhammad Bilal Zafar},

url = {https://doi.org/10.18653/v1/2025.emnlp-main.396},

year  = {2025},

date = {2025-01-01},

booktitle = {Conference on Empirical Methods in Natural Language Processing (EMNLP)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Däubener2025ELBORegularized,

title = {ELBO, Regularized Maximum Likelihood, and Their Common One-Sample Approximation for Training Stochastic Neural Networks},

author = {Sina Däubener and Simon Damm and Asja Fischer},

url = {https://openreview.net/forum?id=j4yFTNrdrO},

year  = {2025},

date = {2025-01-01},

booktitle = {Conference on Uncertainty in Artificial Intelligence (UAI)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Lam2025ExploringPotential,

title = {Exploring the Potential and Limitations of Machine Learning for Forecasting Groundwater Recharge from Meteorological Time Series},

author = {Florian Lam and Simon Damm and Asja Fischer and Thomas Heinze},

url = {https://agu.confex.com/agu/agu25/meetingapp.cgi/Paper/1900224},

year  = {2025},

date = {2025-01-01},

booktitle = {AGU Annual Meeting},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Lukovnikov2025EnablingControlNet,

title = {Enabling ControlNet to follow Localized Descriptions Using Cross-Attention Control},

author = {Denis Lukovnikov and Asja Fischer},

url = {https://doi.org/10.1007/978-3-032-05981-9_19},

year  = {2025},

date = {2025-01-01},

booktitle = {European Conference on Machine Learning and Principles and Practice of Knowledge Discovery in Databases (ECML PKDD)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Lukovnikov2025AreSemantic,

title = {Are Semantic Watermarks for Diffusion Models Resilient to Layout Control?},

author = {Denis Lukovnikov and Andreas Müller and Jonas Thietke and Erwin Quiring and Asja Fischer},

url = {https://openreview.net/forum?id=pFMNK403AH},

year  = {2025},

date = {2025-01-01},

booktitle = {International Conference on Learning Representations (ICLR) Workshops},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Müller2025Black-BoxForgery,

title = {Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models},

author = {Andreas Müller and Denis Lukovnikov and Jonas Thietke and Asja Fischer and Erwin Quiring},

url = {https://arxiv.org/abs/2412.03283},

year  = {2025},

date = {2025-01-01},

booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Puttschneider2025TowardsOptimal,

title = {Towards the Optimal Control Perspective of ResNet Training},

author = {Jens Püttschneider and Simon Heilig and Asja Fischer and Timm Faulwasser},

url = {https://openreview.net/forum?id=xMXpVetlhj},

year  = {2025},

date = {2025-01-01},

booktitle = {International Conference on Machine Learning (ICML) Workshops},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Thietke2025TowardsCorrect,

title = {Towards a Correct Usage of Cryptography in Semantic Watermarks for Diffusion Models},

author = {Jonas Thietke and Andreas Müller and Denis Lukovnikov and Asja Fischer and Erwin Quiring},

url = {https://openreview.net/forum?id=yENK6DYuXv},

year  = {2025},

date = {2025-01-01},

booktitle = {International Conference on Learning Representations (ICLR) Workshops},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Heilig2025Port-HamiltonianArchitectural,

title = {Port-Hamiltonian Architectural Bias for Long-Range Propagation in Deep Graph Networks},

author = {Simon Heilig and Alessio Gravina and Alessandro Trenta and Claudio Gallicchio and Davide Bacciu},

url = {https://openreview.net/forum?id=03EkqSCKuO},

year  = {2025},

date = {2025-01-01},

booktitle = {International Conference on Learning Representations (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Frank2024RepresentativeStudy,

title = {A Representative Study on Human Detection of Artificially Generated Media Across Countries},

author = {Joel Frank and Franziska Herbert and Jonas Ricker and Lea Schönherr and Thorsten Eisenhofer and Asja Fischer and Markus Dürmuth and Thorsten Holz},

url = {https://doi.org/10.1109/SP54263.2024.00159},

year  = {2024},

date = {2024-01-01},

urldate = {2024-01-01},

booktitle = {IEEE Symposium on Security and Privacy (SP)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Laszkiewicz2024Single-ModelAttribution,

title = {Single-Model Attribution of Generative Models Through Final-Layer Inversion},

author = {Mike Laszkiewicz and Jonas Ricker and Johannes Lederer and Asja Fischer},

url = {https://proceedings.mlr.press/v235/laszkiewicz24a.html},

year  = {2024},

date = {2024-01-01},

urldate = {2024-01-01},

booktitle = {International Conference on Machine Learning (ICML)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Ricker2024AI-GeneratedFaces,

title = {AI-Generated Faces in the Real World: A Large-Scale Case Study of Twitter Profile Images},

author = {Jonas Ricker and Dennis Assenmacher and Thorsten Holz and Asja Fischer and Erwin Quiring},

url = {https://doi.org/10.1145/3678890.3678922},

year  = {2024},

date = {2024-01-01},

urldate = {2024-01-01},

booktitle = {International Symposium on Research in Attacks, Intrusions and Defenses (RAID)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Ricker2024TowardsDetection,

title = {Towards the Detection of Diffusion Model Deepfakes},

author = {Jonas Ricker and Simon Damm and Thorsten Holz and Asja Fischer},

url = {https://doi.org/10.5220/0012422000003660},

year  = {2024},

date = {2024-01-01},

booktitle = {International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications (VISIGRAPP)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Ricker2024AEROBLADETraining-Free,

title = {AEROBLADE: Training-Free Detection of Latent Diffusion Images Using Autoencoder Reconstruction Error},

author = {Jonas Ricker and Denis Lukovnikov and Asja Fischer},

url = {https://doi.org/10.1109/CVPR52733.2024.00872},

year  = {2024},

date = {2024-01-01},

urldate = {2024-01-01},

booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Adilova2024InformationPlane,

title = {Information Plane Analysis for Dropout Neural Networks},

author = {Linara Adilova and Bernhard C. Geiger and Asja Fischer},

url = {https://openreview.net/forum?id=bQB6qozaBw},

year  = {2024},

date = {2024-01-01},

booktitle = {International Conference on Learning Representations (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Laszkiewicz2024BenchmarkingFairness,

title = {Benchmarking the Fairness of Image Upsampling Methods},

author = {Mike Laszkiewicz and Imant Daunhawer and Julia E. Vogt and Asja Fischer and Johannes Lederer},

url = {https://doi.org/10.1145/3630106.3658921},

year  = {2024},

date = {2024-01-01},

booktitle = {ACM Conference on Fairness, Accountability, and Transparency (FaccT)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Maag2024Uncertainty-WeightedLoss,

title = {Uncertainty-Weighted Loss Functions for Improved Adversarial Attacks on Semantic Segmentation},

author = {Kira Maag and Asja Fischer},

url = {https://doi.org/10.1109/WACV57701.2024.00386},

year  = {2024},

date = {2024-01-01},

booktitle = {IEEE/CVF Winter Conference on Applications of Computer Vision (WACV)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Maag2024Uncertainty-BasedDetection,

title = {Uncertainty-Based Detection of Adversarial Attacks in Semantic Segmentation},

author = {Kira Maag and Asja Fischer},

url = {https://doi.org/10.5220/0012303500003660},

year  = {2024},

date = {2024-01-01},

booktitle = {International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications (VISIGRAPP)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Maag2024DetectingAdversarial,

title = {Detecting Adversarial Attacks in Semantic Segmentation via Uncertainty Estimation: A Deep Analysis},

author = {Kira Maag and Roman Resner and Asja Fischer},

url = {https://doi.org/10.1007/978-3-032-07623-6_11},

year  = {2024},

date = {2024-01-01},

booktitle = {International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications (VISIGRAPP)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Pizarro2024DistriBlockIdentifying,

title = {DistriBlock: Identifying Adversarial Audio Samples by Leveraging Characteristics of the Output Distribution},

author = {Matías Pizarro and Dorothea Kolossa and Asja Fischer},

url = {https://proceedings.mlr.press/v244/pizarro24a.html},

year  = {2024},

date = {2024-01-01},

urldate = {2024-01-01},

booktitle = {Conference on Uncertainty in Artificial Intelligence (UAI)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Pizzi2024ReassessingNoise,

title = {Reassessing Noise Augmentation Methods in the Context of Adversarial Speech},

author = {Karla Pizzi and Matías Pizarro and Asja Fischer},

url = {https://doi.org/10.21437/SPSC.2024-5},

year  = {2024},

date = {2024-01-01},

booktitle = {Symposium on Security and Privacy in Speech Communication (SPSC)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Sun2024ExploitingInternal,

title = {Exploiting Internal Randomness for Privacy in Vertical Federated Learning},

author = {Yulian Sun and Li Duan and Ricardo Mendes and Derui Zhu and Yue Xia and Yong Li and Asja Fischer},

url = {https://doi.org/10.1007/978-3-031-70890-9_20},

year  = {2024},

date = {2024-01-01},

booktitle = {European Symposium on Research in Computer Security (ESORICS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Velychko2024Learningsparse,

title = {Learning sparse codes with entropy-based ELBOs},

author = {Dmytro Velychko and Simon Damm and Asja Fischer and Jörg Lücke},

url = {https://proceedings.mlr.press/v238/velychko24a.html},

year  = {2024},

date = {2024-01-01},

booktitle = {International Conference on Artificial Intelligence and Statistics (AISTATS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Adilova2023Layer-wiseLinear,

title = {Layer-wise Linear Mode Connectivity},

author = {Linara Adilova and Maksym Andriushchenko and Michael Kamp and Asja Fischer and Martin Jaggi},

url = {https://openreview.net/forum?id=LfmZh91tDI},

year  = {2023},

date = {2023-01-01},

booktitle = {International Conference on Learning Representations (ICLR)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Damm2023ELBOof,

title = {The ELBO of Variational Autoencoders Converges to a Sum of Entropies},

author = {Simon Damm and Dennis Forster and Dmytro Velychko and Zhenwen Dai and Asja Fischer and Jörg Lücke},

url = {https://proceedings.mlr.press/v206/damm23a.html},

year  = {2023},

date = {2023-01-01},

booktitle = {International Conference on Artificial Intelligence and Statistics (AISTATS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{Adilova2023FAMRelative,

title = {FAM: Relative Flatness Aware Minimization},

author = {Linara Adilova and Amr Abourayya and Jianning Li and Amin Dada and Henning Petzka and Jan Egger and Jens Kleesiek and Michael Kamp},

url = {https://proceedings.mlr.press/v221/adilova23a.html},

year  = {2023},

date = {2023-01-01},

booktitle = {International Conference on Machine Learning (ICML) Workshops},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}