Battista Biggio
Publication record assembled from the DBLP archive of ranked conferences.
Papers indexed
50
Venues
20
Active years
2007–2026
Best venue rank
A*
Where they publish
Papers
50 indexed papers, newest first.
| Year | Venue | Title | Authors |
|---|---|---|---|
| 2026 | AAAI | SOM Directions Are Better than One: Multi-Directional Refusal Suppression in Language Models. | Giorgio Piras, Raffaele Mura, Fabio Brau, Luca Oneto, Fabio Roli, Battista Biggio |
| 2025 | AAAI | AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples. | Antonio Emanuele Cin, Jrme Rony, Maura Pintor, Luca Demetrio, Ambra Demontis, Battista Biggio, Ismail Ben Ayed, Fabio Roli |
| 2025 | ICLR | σ-zero: Gradient-based Optimization of ℓ0-norm Adversarial Examples. | Antonio Emanuele Cin, Francesco Villani, Maura Pintor, Lea Schnherr, Battista Biggio, Marcello Pelillo |
| 2024 | AAAI | When Your AI Becomes a Target: AI Security Incidents and Best Practices. | Kathrin Grosse, Lukas Bieringer, Tarek R. Besold, Battista Biggio, Alexandre Alahi |
| 2024 | DCAI | ModSec-Learn: Boosting ModSecurity with Machine Learning. | Christian Scano, Giuseppe Floris, Biagio Montaruli, Luca Demetrio, Andrea Valenza, Luca Compagna, Davide Ariu, Luca Piras, Davide Balzarotti, Battista Biggio |
| 2024 | ICMLC | LFPD: Local-Feature-Powered Defense Against Adaptive Backdoor Attacks. | Wei Guo, Ambra Demontis, Maura Pintor, Patrick P. K. Chan, Battista Biggio |
| 2024 | ICMLC | Data Drift in Android Malware Detection. | Luca Minnei, Hicham Eddoubi, Angelo Sotgiu, Maura Pintor, Ambra Demontis, Battista Biggio |
| 2023 | CCS | Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors. | Biagio Montaruli, Luca Demetrio, Maura Pintor, Luca Compagna, Davide Balzarotti, Battista Biggio |
| 2023 | ESANN | Towards Machine Learning Models that We Can Trust: Testing, Improving, and Explaining Robustness. | Maura Pintor, Ambra Demontis, Battista Biggio |
| 2023 | ESANN | Improving Fast Minimum-Norm Attacks with Hyperparameter Optimization. | Giorgio Piras, Giuseppe Floris, Raffaele Mura, Luca Scionis, Maura Pintor, Battista Biggio, Ambra Demontis |
| 2023 | ICIAP | Minimizing Energy Consumption of Deep Learning Models by Energy-Aware Training. | Dario Lazzaro, Antonio Emanuele Cin, Maura Pintor, Ambra Demontis, Battista Biggio, Fabio Roli, Marcello Pelillo |
| 2023 | ICMLC | Detecting Attacks Against Deep Reinforcement Learning for Autonomous Driving. | Maura Pintor, Luca Demetrio, Angelo Sotgiu, Hsiao-Ying Lin, Chengfang Fang, Ambra Demontis, Battista Biggio |
| 2023 | ICMLC | Samples on Thin Ice: Re-Evaluating Adversarial Pruning of Neural Networks. | Giorgio Piras, Maura Pintor, Ambra Demontis, Battista Biggio |
| 2023 | WACV | Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectors. | Avishag Shapira, Alon Zolfi, Luca Demetrio, Battista Biggio, Asaf Shabtai |
| 2022 | IJCAI | Tessellation-Filtering ReLU Neural Networks. | Bernhard Alois Moser, Michal Lewandowski, Somayeh Kargaran, Werner Zellinger, Battista Biggio, Christoph Koutschan |
| 2022 | SOUPS | Industrial practitioners' mental models of adversarial machine learning. | Lukas Bieringer, Kathrin Grosse, Michael Backes, Battista Biggio, Katharina Krombholz |
| 2021 | ESANN | Complex Data: Learning Trustworthily, Automatically, and with Guarantees. | Luca Oneto, Nicol Navarin, Battista Biggio, Federico Errica, Alessio Micheli, Franco Scarselli, Monica Bianchini, Alessandro Sperduti |
| 2021 | ESANN | Slope: A First-order Approach for Measuring Gradient Obfuscation. | Maura Pintor, Luca Demetrio, Giovanni Manca, Battista Biggio, Fabio Roli |
| 2021 | IJCNN | The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers? | Antonio Emanuele Cin, Sebastiano Vascon, Ambra Demontis, Battista Biggio, Fabio Roli, Marcello Pelillo |
| 2021 | SAC | Poisoning attacks on cyber attack detectors for industrial control systems. | Moshe Kravchik, Battista Biggio, Asaf Shabtai |
| 2019 | CCS | AISec'19: 12th ACM Workshop on Artificial Intelligence and Security. | Sadia Afroz, Battista Biggio, Nicholas Carlini, Yuval Elovici, Asaf Shabtai |
| 2019 | CCS | Poster: Attacking Malware Classifiers by Crafting Gradient-Attacks that Preserve Functionality. | Raphael Labaca Castro, Battista Biggio, Gabi Dreo Rodosek |
| 2019 | ESANN | Societal Issues in Machine Learning: When Learning from Data is Not Enough. | Davide Bacciu, Battista Biggio, Paulo Lisboa, Jos D. Martn, Luca Oneto, Alfredo Vellido |
| 2019 | ESANN | Detecting Black-box Adversarial Examples through Nonlinear Dimensionality Reduction. | Francesco Crecchi, Davide Bacciu, Battista Biggio |
| 2019 | SPLC | Towards quality assurance of software product lines with adversarial configurations. | Paul Temple, Mathieu Acher, Gilles Perrouin, Battista Biggio, Jean-Marc Jzquel, Fabio Roli |
| 2018 | CCS | 11th International Workshop on Artificial Intelligence and Security (AISec 2018). | Sadia Afroz, Battista Biggio, Yuval Elovici, David Freeman, Asaf Shabtai |
| 2018 | CCS | Session details: AI Security / Adversarial Machine Learning. | Battista Biggio |
| 2018 | CCS | Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning. | Battista Biggio, Fabio Roli |
| 2018 | SP | Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning. | Matthew Jagielski, Alina Oprea, Battista Biggio, Chang Liu, Cristina Nita-Rotaru, Bo Li |
| 2017 | CCS | 10th International Workshop on Artificial Intelligence and Security (AISec 2017). | Battista Biggio, David Freeman, Brad Miller, Arunesh Sinha |
| 2017 | CCS | Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization. | Luis Muoz-Gonzlez, Battista Biggio, Ambra Demontis, Andrea Paudice, Vasin Wongrassamee, Emil C. Lupu, Fabio Roli |
| 2017 | ESORICS | DeltaPhish: Detecting Phishing Webpages in Compromised Websites. | Igino Corona, Battista Biggio, Matteo Contini, Luca Piras, Roberto Corda, Mauro Mereu, Guido Mureddu, Davide Ariu, Fabio Roli |
| 2016 | CCS | Detecting Misuse of Google Cloud Messaging in Android Badware. | Mansour Ahmadi, Battista Biggio, Steven Arzt, Davide Ariu, Giorgio Giacinto |
| 2016 | CCS | Secure Kernel Machines against Evasion Attacks. | Paolo Russu, Ambra Demontis, Battista Biggio, Giorgio Fumera, Fabio Roli |
| 2016 | NDSS | Who Are You? A Statistical Approach to Measuring User Authenticity. | David Freeman, Sakshi Jain, Markus Drmuth, Battista Biggio, Giorgio Giacinto |
| 2016 | SSPR | On Security and Sparsity of Linear Classifiers for Adversarial Settings. | Ambra Demontis, Paolo Russu, Battista Biggio, Giorgio Fumera, Fabio Roli |
| 2015 | ICIAP | Super-Sparse Regression for Fast Age Estimation from Faces at Test Time. | Ambra Demontis, Battista Biggio, Giorgio Fumera, Fabio Roli |
| 2015 | ICIAP | Fast Image Classification with Reduced Multiclass Support Vector Machines. | Marco Melis, Luca Piras, Battista Biggio, Giorgio Giacinto, Giorgio Fumera, Fabio Roli |
| 2015 | ICML | Is Feature Selection Secure against Training Data Poisoning? | Huang Xiao, Battista Biggio, Gavin Brown, Giorgio Fumera, Claudia Eckert, Fabio Roli |
| 2014 | CCS | On learning and recognition of secure patterns. | Battista Biggio |
| 2014 | CCS | Poisoning behavioral malware clustering. | Battista Biggio, Konrad Rieck, Davide Ariu, Christian Wressnegger, Igino Corona, Giorgio Giacinto, Fabio Roli |
| 2014 | SSPR | Poisoning Complete-Linkage Hierarchical Clustering. | Battista Biggio, Samuel Rota Bul, Ignazio Pillai, Michele Mura, Eyasu Zemene Mequanint, Marcello Pelillo, Fabio Roli |
| 2013 | CCS | Is data clustering in adversarial settings secure? | Battista Biggio, Ignazio Pillai, Samuel Rota Bul, Davide Ariu, Marcello Pelillo, Fabio Roli |
| 2013 | CIARP | Pattern Recognition Systems under Attack. | Fabio Roli, Battista Biggio, Giorgio Fumera |
| 2012 | ICML | Poisoning Attacks against Support Vector Machines. | Battista Biggio, Blaine Nelson, Pavel Laskov |
| 2012 | SSPR | Poisoning Adaptive Biometric Systems. | Battista Biggio, Giorgio Fumera, Fabio Roli, Luca Didaci |
| 2011 | CCS | Understanding the risk factors of learning in adversarial environments. | Blaine Nelson, Battista Biggio, Pavel Laskov |
| 2011 | SMC | Design of robust classifiers for adversarial environments. | Battista Biggio, Giorgio Fumera, Fabio Roli |
| 2008 | SSPR | Adversarial Pattern Classification Using Multiple Classifiers and Randomisation. | Battista Biggio, Giorgio Fumera, Fabio Roli |
| 2007 | ICIAP | Image Spam Filtering Using Visual Information. | Battista Biggio, Giorgio Fumera, Ignazio Pillai, Fabio Roli |