| Robust physical-world attacks on deep learning visual classification K Eykholt, I Evtimov, E Fernandes, B Li, A Rahmati, C Xiao, A Prakash, ... Proceedings of the IEEE conference on computer vision and pattern …, 2018 | 2616* | 2018 |
| Physical adversarial examples for object detectors D Song, K Eykholt, I Evtimov, E Fernandes, B Li, A Rahmati, F Tramer, ... 12th USENIX workshop on offensive technologies (WOOT 18), 2018 | 452 | 2018 |
| Is tricking a robot hacking? I Evtimov, D O’Hair, E Fernandes, R Calo, T Kohno Berkeley Technology Law Journal 34 (3), 891-918, 2019 | 28* | 2019 |
| FoggySight: A Scheme for Facial Lookup Privacy I Evtimov, P Sturmfels, T Kohno Proceedings on Privacy Enhancing Technologies 2021 (3), 204-226, 2021 | 21 | 2021 |
| Imagenet-x: Understanding model mistakes with factor of variation annotations BY Idrissi, D Bouchacourt, R Balestriero, I Evtimov, C Hazirbas, N Ballas, ... arXiv preprint arXiv:2211.01866, 2022 | 17 | 2022 |
| Robust physical-world attacks on deep learning visual classification K Eykholt, I Evtimov, E Fernandes, B Li, A Rahmati, C Xiao, A Prakash, ... | 15 | 2020 |
| Security and machine learning in the real world I Evtimov, W Cui, E Kamar, E Kiciman, T Kohno, J Li arXiv preprint arXiv:2007.07205, 2020 | 13 | 2020 |
| A whac-a-mole dilemma: Shortcuts come in multiples where mitigating one amplifies others Z Li, I Evtimov, A Gordo, C Hazirbas, T Hassner, CC Ferrer, C Xu, ... Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern …, 2023 | 10 | 2023 |
| Adversarial evaluation of multimodal models under realistic gray box assumption I Evtimov, R Howes, B Dolhansky, H Firooz, CC Ferrer arXiv preprint arXiv:2011.12902, 2020 | 8 | 2020 |
| Disrupting model training with adversarial shortcuts I Evtimov, I Covert, A Kusupati, T Kohno arXiv preprint arXiv:2106.06654, 2021 | 7 | 2021 |
| You only need a good embeddings extractor to fix spurious correlations R Mehta, V Albiero, L Chen, I Evtimov, T Glaser, Z Li, T Hassner arXiv preprint arXiv:2212.06254, 2022 | 3 | 2022 |
| Adversarial Text Normalization J Bitton, M Pavlova, I Evtimov arXiv preprint arXiv:2206.04137, 2022 | 1 | 2022 |
| VPA: Fully Test-Time Visual Prompt Adaptation J Sun, M Ibrahim, M Hall, I Evtimov, ZM Mao, CC Ferrer, C Hazirbas arXiv preprint arXiv:2309.15251, 2023 | | 2023 |
| ImageNet-X: Understanding Model Mistakes with Factor of Variation Annotations B Youbi Idrissi, D Bouchacourt, R Balestriero, I Evtimov, C Hazirbas, ... arXiv e-prints, arXiv: 2211.01866, 2022 | | 2022 |
| Disrupting Machine Learning: Emerging Threats and Applications for Privacy and Dataset Ownership I Evtimov University of Washington, 2021 | | 2021 |
