| 2026 | ACL | FinHarmBench: Financial Jailbreak Benchmark and Unsupervised Safety Fine-Tuning via Refusal Steering Distillation. | Yubin Choi, Yujin Yang, Subin Kim, Seokil Ham, Seungju Cho, Jungmin Son, Youngjun Kwak, Changick Kim |
| 2025 | AAAI | Enhancing Robustness in Incremental Learning with Adversarial Training. | Seungju Cho, Hongsin Lee, Changick Kim |
| 2025 | ICLR | Long-tailed Adversarial Training with Self-Distillation. | Seungju Cho, Hongsin Lee, Changick Kim |
| 2025 | ICLR | Indirect Gradient Matching for Adversarial Robust Distillation. | Hongsin Lee, Seungju Cho, Changick Kim |
| 2023 | CVPR | Introducing Competition to Boost the Transferability of Targeted Adversarial Examples Through Clean Feature Mixup. | Junyoung Byun, Myung-Joon Kwon, Seungju Cho, Yoonji Kim, Changick Kim |
| 2023 | ICIP | Improving Adversarial Transferability Via Feature Translation. | Yoonji Kim, Seungju Cho, Junyoung Byun, Myung-Joon Kwon, Changick Kim |
| 2022 | CVPR | Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input. | Junyoung Byun, Seungju Cho, Myung-Joon Kwon, Hee-Seon Kim, Changick Kim |
| 2022 | ICIP | Exploiting Doubly Adversarial Examples for Improving Adversarial Robustness. | Junyoung Byun, Hyojun Go, Seungju Cho, Changick Kim |
| 2022 | ICIP | Adversarial Training with Channel Attention Regularization. | Seungju Cho, Junyoung Byun, Myung-Joon Kwon, Yoonji Kim, Changick Kim |
| 2022 | ICIP | Adaptive Warping Network for Transferable Adversarial Attacks. | Minji Son, Myung-Joon Kwon, Hee-Seon Kim, Junyoung Byun, Seungju Cho, Changick Kim |