| The limitations of deep learning in adversarial settings N Papernot, P McDaniel, S Jha, M Fredrikson, ZB Celik, A Swami 2016 IEEE European symposium on security and privacy (EuroS&P), 372-387, 2016 | 3758 | 2016 |
| Model inversion attacks that exploit confidence information and basic countermeasures M Fredrikson, S Jha, T Ristenpart Proceedings of the 22nd ACM SIGSAC conference on computer and communications …, 2015 | 2115 | 2015 |
| Privacy in Pharmacogenetics: An End-to-End Case Study of Personalized Warfarin Dosing M Fredrikson, E Lantz, S Jha, S Lin, D Page, T Ristenpart USENIX Security Symposium, 17-32, 2014 | 789 | 2014 |
| Privacy risk in machine learning: Analyzing the connection to overfitting S Yeom, I Giacomelli, M Fredrikson, S Jha 2018 IEEE 31st Computer Security Foundations Symposium (CSF), 2018 | 656 | 2018 |
| Synthesizing near-optimal malware specifications from suspicious behaviors M Fredrikson, S Jha, M Christodorescu, R Sailer, X Yan 2010 IEEE Symposium on Security and Privacy, 45-60, 2010 | 277 | 2010 |
| Cyber SA: Situational awareness for cyber defense P Barford, M Dacier, TG Dietterich, M Fredrikson, J Giffin, S Jajodia, S Jha, ... Cyber Situational Awareness: Issues and Research, 3-13, 2010 | 173 | 2010 |
| A layered architecture for detecting malicious behaviors L Martignoni, E Stinson, M Fredrikson, S Jha, JC Mitchell International Symposium on Recent Advances in Intrusion Detection, 78-97, 2008 | 171 | 2008 |
| On the Practical Exploitability of Dual EC DRBG in TLS Implementations S Checkoway, M Fredrikson, R Niederhagen, M Green, T Lange, ... USENIX Security Symposium, 319-335, 2014 | 168* | 2014 |
| Repriv: Re-imagining content personalization and in-browser privacy M Fredrikson, B Livshits 2011 IEEE Symposium on Security and Privacy, 131-146, 2011 | 165* | 2011 |
| Verified security for browser extensions A Guha, M Fredrikson, B Livshits, N Swamy 2011 IEEE symposium on security and privacy, 115-130, 2011 | 159 | 2011 |
| Stolen memories: Leveraging model memorization for calibrated white-box membership inference K Leino, M Fredrikson 29th USENIX Security Symposium, 2020 | 151 | 2020 |
| A methodology for formalizing model-inversion attacks X Wu, M Fredrikson, S Jha, JF Naughton 2016 IEEE 29th Computer Security Foundations Symposium (CSF), 355-370, 2016 | 143 | 2016 |
| Mining graph patterns efficiently via randomized summaries C Chen, CX Lin, M Fredrikson, M Christodorescu, X Yan, J Han Proceedings of the VLDB Endowment 2 (1), 742-753, 2009 | 91 | 2009 |
| Influence-directed explanations for deep convolutional networks K Leino, S Sen, A Datta, M Fredrikson, L Li 2018 IEEE international test conference (ITC), 1-8, 2018 | 67 | 2018 |
| Fliptest: fairness testing via optimal transport E Black, S Yeom, M Fredrikson Proceedings of the 2020 Conference on Fairness, Accountability, and …, 2020 | 64 | 2020 |
| Proxy non-discrimination in data-driven systems A Datta, M Fredrikson, G Ko, P Mardziel, S Sen arXiv preprint arXiv:1707.08120, 2017 | 58 | 2017 |
| Surreptitiously weakening cryptographic systems B Schneier, M Fredrikson, T Kohno, T Ristenpart Cryptology ePrint Archive, 2015 | 58 | 2015 |
| Globally-robust neural networks K Leino, Z Wang, M Fredrikson International Conference on Machine Learning, 6212-6222, 2021 | 56 | 2021 |
| Verifying and synthesizing constant-resource implementations with types M Dehesa-Azuara, M Fredrikson, J Hoffmann 2017 IEEE Symposium on Security and Privacy (SP), 710-728, 2017 | 54 | 2017 |
| Automatic Generation of Remediation Procedures for Malware Infections. R Paleari, L Martignoni, E Passerini, D Davidson, M Fredrikson, JT Giffin, ... USENIX Security Symposium, 419-434, 2010 | 52 | 2010 |
Somesh JhaLubar Chair of Computer Science, University of WisconsinVerified email at cs.wisc.edu
