@inproceedings {287220,
	author = {Sahar Abdelnabi and Mario Fritz},
	title = {{Fact-Saboteurs}: A Taxonomy of Evidence Manipulation Attacks against {Fact-Verification} Systems},
	booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
	year = {2023},
	isbn = {978-1-939133-37-3},
	address = {Anaheim, CA},
	pages = {6719--6736},
	url = {https://www.usenix.org/conference/usenixsecurity23/presentation/abdelnabi},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {285407,
	author = {Zheng Li and Ning Yu and Ahmed Salem and Michael Backes and Mario Fritz and Yang Zhang},
	title = {{UnGANable}: Defending Against {GAN-based} Face Manipulation},
	booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
	year = {2023},
	isbn = {978-1-939133-37-3},
	address = {Anaheim, CA},
	pages = {7213--7230},
	url = {https://www.usenix.org/conference/usenixsecurity23/presentation/li-zheng},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {277098,
	author = {Yugeng Liu and Rui Wen and Xinlei He and Ahmed Salem and Zhikun Zhang and Michael Backes and Emiliano De Cristofaro and Mario Fritz and Yang Zhang},
	title = {{ML-Doctor}: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models},
	booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
	year = {2022},
	isbn = {978-1-939133-31-1},
	address = {Boston, MA},
	pages = {4525--4542},
	url = {https://www.usenix.org/conference/usenixsecurity22/presentation/liu-yugeng},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {247690,
	author = {Ahmed Salem and Apratim Bhattacharya and Michael Backes and Mario Fritz and Yang Zhang},
	title = {{Updates-Leak}: Data Set Inference and Reconstruction Attacks in Online Learning},
	booktitle = {29th USENIX Security Symposium (USENIX Security 20)},
	year = {2020},
	isbn = {978-1-939133-17-5},
	pages = {1291-1308},
	url = {https://www.usenix.org/conference/usenixsecurity20/presentation/salem},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {217499,
	author = {Rakshith Shetty and Bernt Schiele and Mario Fritz},
	title = {{A4NT}: Author Attribute Anonymity by Adversarial Training of Neural Machine Translation},
	booktitle = {27th USENIX Security Symposium (USENIX Security 18)},
	year = {2018},
	isbn = {978-1-939133-04-5},
	address = {Baltimore, MD},
	pages = {1633--1650},
	url = {https://www.usenix.org/conference/usenixsecurity18/presentation/shetty},
	publisher = {USENIX Association},
	month = aug
}
