| Score-CAM: Score-weighted visual explanations for convolutional neural networks H Wang, Z Wang, M Du, F Yang, Z Zhang, S Ding, P Mardziel, X Hu Proceedings of the IEEE/CVF conference on computer vision and pattern …, 2020 | 1240 | 2020 |
| Universal and transferable adversarial attacks on aligned language models A Zou, Z Wang, N Carlini, M Nasr, JZ Kolter, M Fredrikson arXiv preprint arXiv:2307.15043, 2023 | 1006 | 2023 |
| Representation engineering: A top-down approach to ai transparency A Zou, L Phan, S Chen, J Campbell, P Guo, R Ren, A Pan, X Yin, ... arXiv preprint arXiv:2310.01405, 2023 | 266 | 2023 |
| Globally-Robust Neural Networks K Leino, Z Wang, M Fredrikson Proceedings of ICML 2021, 2021 | 155 | 2021 |
| Harmbench: A standardized evaluation framework for automated red teaming and robust refusal M Mazeika, L Phan, X Yin, A Zou, Z Wang, N Mu, E Sakhaee, N Li, ... arXiv preprint arXiv:2402.04249, 2024 | 147 | 2024 |
| The wmdp benchmark: Measuring and reducing malicious use with unlearning N Li, A Pan, A Gopal, S Yue, D Berrios, A Gatti, JD Li, AK Dombrowski, ... arXiv preprint arXiv:2403.03218, 2024 | 82 | 2024 |
| Smoothed Geometry for Robust Attribution Z Wang, H Wang, S Ramkumar, M Fredrikson, P Mardziel, A Datta Proceedings of NeurIPS 2020, 2020 | 55 | 2020 |
| Towards frequency-based explanation for robust cnn Z Wang, Y Yang, A Shrivastava, V Rawal, Z Ding arXiv preprint arXiv:2005.03141, 2020 | 54 | 2020 |
| Consistent counterfactuals for deep models E Black, Z Wang, M Fredrikson, A Datta ICLR 2022, 2021 | 51 | 2021 |
| Robust models are more interpretable because attributions look normal Z Wang, M Fredrikson, A Datta arXiv preprint arXiv:2103.11257, 2021 | 24 | 2021 |
| Can LLMs Follow Simple Rules? N Mu, S Chen, Z Wang, S Chen, D Karamardian, L Aljeraisy, B Alomair, ... arXiv preprint arXiv:2311.04235, 2023 | 22 | 2023 |
| Llm defenses are not robust to multi-turn human jailbreaks yet N Li, Z Han, I Steneker, W Primack, R Goodside, H Zhang, Z Wang, ... arXiv preprint arXiv:2408.15221, 2024 | 20 | 2024 |
| Interpreting interpretations: Organizing attribution methods by criteria Z Wang, P Mardziel, A Datta, M Fredrikson Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern …, 2020 | 20 | 2020 |
| Influence Patterns for Explaining Information Flow in BERT K Lu, Z Wang, P Mardziel, A Datta arXiv preprint arXiv:2011.00740, 2020 | 16 | 2020 |
| Machine learning explainability and robustness: connected at the hip A Datta, M Fredrikson, K Leino, K Lu, S Sen, Z Wang Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery & Data …, 2021 | 15 | 2021 |
| Unlocking deterministic robustness certification on imagenet K Hu, A Zou, Z Wang, K Leino, M Fredrikson Advances in Neural Information Processing Systems 36, 2024 | 8 | 2024 |
| A recipe for improved certifiable robustness: Capacity and data K Hu, K Leino, Z Wang, M Fredrikson ICLR 2024, 2023 | 8 | 2023 |
| Improving robust generalization by direct pac-bayesian bound minimization Z Wang, N Ding, T Levinboim, X Chen, R Soricut Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern …, 2023 | 7 | 2023 |
| Learning modulo theories M Fredrikson, K Lu, S Vijayakumar, S Jha, V Ganesh, Z Wang arXiv preprint arXiv:2301.11435, 2023 | 6 | 2023 |
| Reconstructing Actions To Explain Deep Reinforcement Learning X Chen, Z Wang, Y Fan, B Jin, P Mardziel, C Joe-Wong, A Datta arXiv preprint arXiv:2009.08507, 2020 | 5* | 2020 |
