Cortellazzi, J., Quiring, E., Arp, D., Pendlebury, F., Pierazzi, F., & Cavallaro, L. (2025). Intriguing Properties of Adversarial ML Attacks in the Problem Space [Extended Version]. ACM Transactions on Privacy and Security, 28(4), 1–37. https://doi.org/10.1145/3742895 ( reposiTUm)

Weißberg, F., Hilgefort, J. M., Grogorick, S., Arp, D., Eisenhofer, T., Eisemann, M., & Rieck, K. (2025). Seeing through: analyzing and attacking virtual backgrounds in video calls. In SEC ’25: Proceedings of the 34th USENIX Conference on Security Symposium (pp. 6561–6580). Association for Computing Machinery. ( reposiTUm)