Skip to content
conftrace_

Battista Biggio

11 papers · 2011–2026 · 7 venues · across top CS/AI venues

Authors are matched by name, so researchers who share a name ("Yang Liu", "Wei Wang") appear as a single profile and their paper counts, venues and achievements are combined. How identity is handled.

Achievements

Jump to papers ↓
+7 more ↓ πŸ—ΊοΈ Taxonomy Completionist (19) 🌍 Conference Polyglot Β· Silver πŸƒ Academic Marathon Β· Full πŸŒ‰ Interdisciplinary Bridge Β· Bronze 🐣 Hot Topic Early Bird
πŸ† Grand Slam 🧭 Keyword Pioneer 🧬 Topic Evolution ❓ The Questioner πŸ”₯ Unstoppable Β· Bronze πŸ’Ž Century Club Β· Bronze πŸ“ˆ Trend Setter

Venues

AAAI (3) ACML (2) NeurIPS (2) ICLR (1) ICML (1) IJCAI (1) WACV (1)

Top co-authors

Fabio Roli (5) Maura Pintor (4) Luca Demetrio (3) Pavel Laskov (2) Blaine Nelson (2) Ambra Demontis (2) Antonio Emanuele CinΓ  (2) Avishag Shapira (1) Raffaele Mura (1) Lukas Bieringer (1)

Research topics

Machine Learning (8) Learning Types Β· Machine Learning (7) Artificial Intelligence (5) Core AI (5) Optimization & Theory (4) Core Methods (3) Computer Science (2) Deep Learning (2) Applications (2) Application Areas (1) Architectures (1) Learning Types Β· Deep Learning (1)

Keywords

gradient-based attack (3) adversarial attack (2) adversarial example (2) adversarial robustness (2) support vector machine (2) adversarial learning (2) kernel methods (2) robustness evaluation (2) norm constraint (2) adversarial machine learning (1) malware detection (1) model robustness (1) kernel matrix (1) kernel classifier (1) adversarial classification (1) gradient-based optimization (1) mechanistic interpretability (1) label noise (1) decision boundary (1) best practice (1)

Papers

SOM Directions Are Better than One: Multi-Directional Refusal Suppression in Language Models AAAI 2026 Οƒ-zero: Gradient-based Optimization of β„“_0-norm Adversarial Examples ICLR 2025 AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples AAAI 2025 When Your AI Becomes a Target: AI Security Incidents and Best Practices AAAI 2024 Phantom Sponges: Exploiting Non-Maximum Suppression To Attack Deep Object Detectors WACV 2023 Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples NeurIPS 2022 Tessellation-Filtering ReLU Neural Networks IJCAI 2022 Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints NeurIPS 2021 Is Feature Selection Secure against Training Data Poisoning? ICML 2015 Microbagging Estimators: An Ensemble Approach to Distance-weighted Classifiers ACML 2011 Support Vector Machines Under Adversarial Label Noise ACML 2011