| DeepFool: a simple and accurate method to fool deep neural networks SM Moosavi-Dezfooli, A Fawzi, P Frossard Proceedings of the IEEE Conference on Computer Vision and Pattern …, 2016 | 5265 | 2016 |
| Universal adversarial perturbations SM Moosavi-Dezfooli, A Fawzi, O Fawzi, P Frossard Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2017 | 2754 | 2017 |
| Robustness of classifiers: from adversarial to random noise A Fawzi, SM Moosavi-Dezfooli, P Frossard Advances in neural information processing systems 29, 2016 | 384 | 2016 |
| Robustness via curvature regularization, and vice versa SM Moosavi-Dezfooli, A Fawzi, J Uesato, P Frossard IEEE Conference on Computer Vision and Pattern Recognition, 2019 | 298 | 2019 |
| Empirical study of the topology and geometry of deep networks A Fawzi, SM Moosavi-Dezfooli, P Frossard, S Soatto IEEE Conference on Computer Vision and Pattern Recognition, 2018 | 196* | 2018 |
| The robustness of deep networks: A geometrical perspective A Fawzi, SM Moosavi-Dezfooli, P Frossard IEEE Signal Processing Magazine 34 (6), 50-62, 2017 | 196* | 2017 |
| SparseFool: a few pixels make a big difference A Modas, SM Moosavi-Dezfooli, P Frossard IEEE Conference on Computer Vision and Pattern Recognition, 2019 | 174 | 2019 |
| Adaptive quantization for deep neural network Y Zhou, SM Moosavi-Dezfooli, NM Cheung, P Frossard Proceedings of the AAAI Conference on Artificial Intelligence 32 (1), 2018 | 166 | 2018 |
| Geometric robustness of deep networks: analysis and improvement C Kanbak, SM Moosavi-Dezfooli, P Frossard IEEE Conference on Computer Vision and Pattern Recognition, 2018 | 151 | 2018 |
| Universal Adversarial Attacks on Text Classifiers M Behjati, SM Moosavi-Dezfooli, M Soleymani Baghshah, P Frossard International Conference on Acoustics, Speech, and Signal Processing (ICASSP), 2019 | 113 | 2019 |
| GeoDA: a geometric framework for black-box adversarial attacks A Rahmati, SM Moosavi-Dezfooli, P Frossard, H Dai Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2020 | 96 | 2020 |
| Robustness of classifiers to universal perturbations: A geometric perspective SM Moosavi-Dezfooli, A Fawzi, O Fawzi, P Frossard, S Soatto International Conference on Learning Representations, 2018 | 61 | 2018 |
| Helper-based adversarial training: Reducing excessive margin to achieve a better accuracy vs. robustness trade-off R Rade, SM Moosavi-Dezfooli ICML 2021 Workshop on Adversarial Machine Learning, 2021 | 49 | 2021 |
| Divide, denoise, and defend against adversarial attacks SM Moosavi-Dezfooli, A Shrivastava, O Tuzel arXiv preprint arXiv:1802.06806, 2018 | 49 | 2018 |
| Optimism in the face of adversity: Understanding and improving deep learning through adversarial robustness G Ortiz-Jiménez, A Modas, SM Moosavi-Dezfooli, P Frossard Proceedings of the IEEE 109 (5), 635-659, 2021 | 48 | 2021 |
| Hold me tight! Influence of discriminative features on deep network boundaries G Ortiz-Jimenez, A Modas, SM Moosavi-Dezfooli, P Frossard Advances in Neural Information Processing Systems, 2020 | 46 | 2020 |
| A geometry-inspired decision-based attack Y Liu, SM Moosavi-Dezfooli, P Frossard Proceedings of the International Conference on Computer Vision, 2019 | 45 | 2019 |
| Reducing excessive margin to achieve a better accuracy vs. robustness trade-off R Rade, SM Moosavi-Dezfooli International Conference on Learning Representations, 2021 | 37 | 2021 |
| Vehicle trajectory prediction works, but not everywhere M Bahari, S Saadatnejad, A Rahimi, M Shaverdikondori, AH Shahidzadeh, ... Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern …, 2022 | 29 | 2022 |
| Are socially-aware trajectory prediction models really socially-aware? S Saadatnejad, M Bahari, P Khorsandi, M Saneian, SM Moosavi-Dezfooli, ... Transportation research part C: emerging technologies 141, 103705, 2022 | 27 | 2022 |
Pascal FrossardEcole Polytechnique Fédérale de Lausanne, EPFLVerified email at epfl.ch
