| 2026 | EACL | ConVerse: Benchmarking Contextual Safety in Agent-to-Agent Conversations. | Amr Gomaa, Ahmed Salem, Sahar Abdelnabi |
| 2025 | ACL | A Theory of Response Sampling in LLMs: Part Descriptive and Part Prescriptive. | Sarath Sivaprasad, Pramod Kaushik, Sahar Abdelnabi, Mario Fritz |
| 2025 | EMNLP | Context-Aware Reasoning On Parametric Knowledge for Inferring Causal Variables. | Ivaxi Sheth, Sahar Abdelnabi, Mario Fritz |
| 2025 | ICLR | Can LLMs Separate Instructions From Data? And What Do We Even Mean By That? | Egor Zverev, Sahar Abdelnabi, Soroush Tabesh, Mario Fritz, Christoph H. Lampert |
| 2023 | ACSAC | From Attachments to SEO: Click Here to Learn More about Clickbait PDFs! | Giada Stivala, Sahar Abdelnabi, Andrea Mengascini, Mariano Graziano, Mario Fritz, Giancarlo Pellegrino |
| 2023 | CCS | Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection. | Sahar Abdelnabi, Kai Greshake, Shailesh Mishra, Christoph Endres, Thorsten Holz, Mario Fritz |
| 2022 | CVPR | Open-Domain, Content-based, Multi-modal Fact-checking of Out-of-Context Images via Online Resources. | Sahar Abdelnabi, Rakibul Hasan, Mario Fritz |
| 2021 | CCS | What's in the box: Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models. | Sahar Abdelnabi, Mario Fritz |
| 2021 | ICCV | Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Data. | Ning Yu, Vladislav Skripniuk, Sahar Abdelnabi, Mario Fritz |
| 2021 | SP | Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hiding. | Sahar Abdelnabi, Mario Fritz |
| 2020 | CCS | VisualPhishNet: Zero-Day Phishing Website Detection by Visual Similarity. | Sahar Abdelnabi, Katharina Krombholz, Mario Fritz |
| 2019 | SMC | Towards High-Frequency SSVEP-Based Target Discrimination with an Extended Alphanumeric Keyboard. | Sahar Abdelnabi, Michael Xuelin Huang, Andreas Bulling |