| 2026 | GECCO | NegaBent, No Regrets: Evolving Spectrally Flat Boolean Functions. | Claude Carlet, Marko Durasevic, Ermes Franch, Domagoj Jakobovic, Luca Mariot, Stjepan Picek |
| 2026 | GECCO | IDEM Enough? Evolving Highly Nonlinear Idempotent Boolean Functions. | Claude Carlet, Marko Djurasevic, Domagoj Jakobovic, Luca Mariot, Stjepan Picek |
| 2026 | NDSS | CatBack: Universal Backdoor Attacks on Tabular Data via Categorical Encoding. | Behrad Tajalli, Stefanos Koffas, Stjepan Picek |
| 2026 | NDSS | NeuroStrike: Neuron-Level Attacks on Aligned LLMs. | Lichao Wu, Sasha Behrouzi, Mohamadreza Rostami, Maximilian Thang, Stjepan Picek, Ahmad-Reza Sadeghi |
| 2026 | NDSS | MIMIR: Masked Image Modeling for Mutual Information-based Adversarial Robustness. | Xiaoyun Xu, Shujian Yu, Zhuoran Liu, Stjepan Picek |
| 2025 | ACNS | Jump, It Is Easy: JumpReLU Activation Function in Deep Learning-Based Side-Channel Analysis. | Abraham Basurto-Becerra, Azade Rezaeezade, Stjepan Picek |
| 2025 | ACNS | Can KANs Do It? Toward Interpretable Deep Learning-Based Side-Channel Analysis. | Kota Yoshida, Sengim Karayalcin, Stjepan Picek |
| 2025 | ACSAC | Flashy Backdoor: Real-world Environment Backdoor Attack on SNNs with DVS Cameras. | Roberto Riao, Gorka Abad, Stjepan Picek, Aitor Urbieta |
| 2025 | CCS | Towards Backdoor Stealthiness in Model Parameter Space. | Xiaoyun Xu, Zhuoran Liu, Stefanos Koffas, Stjepan Picek |
| 2025 | DATE | Late Breaking Results: Practical Electromagnetic Fault Injection on Intel Neural Compute Stick 2. | Shivam Bhasin, Dirmanto Jap, Prasanna Ravi, Marina Krcek, Stjepan Picek |
| 2025 | ESORICS | Time-Distributed Backdoor Attacks on Federated Spiking Learning. | Gorka Abad, Stjepan Picek, Aitor Urbieta |
| 2025 | ESORICS | Membership Privacy Evaluation in Deep Spiking Neural Networks. | Jiaxin Li, Gorka Abad, Stjepan Picek, Mauro Conti |
| 2025 | ESORICS | Backdoor Attacks on Transformers for Tabular Data: An Empirical Study. | Bart Pleiter, Behrad Tajalli, Stefanos Koffas, Gorka Abad, Jing Xu, Martha A. Larson, Stjepan Picek |
| 2025 | EUROGP | A Systematic Evaluation of Evolving Highly Nonlinear Boolean Functions in Odd Sizes. | Claude Carlet, Marko Durasevic, Domagoj Jakobovic, Stjepan Picek, Luca Mariot |
| 2025 | GECCO | Degree is Important: On Evolving Homogeneous Boolean Functions. | Claude Carlet, Marko Durasevic, Domagoj Jakobovic, Luca Mariot, Stjepan Picek |
| 2025 | ICASSP | L | Simen Gaure, Stefanos Koffas, Stjepan Picek, Sondre Rnjom |
| 2025 | SP | Continuous Embedding Attacks via Clipped Inputs in Jailbreaking Large Language Models. | Zihao Xu, Yi Liu, Gelei Deng, Kailong Wang, Yuekang Li, Ling Shi, Stjepan Picek |
| 2025 | SIGMETRICS | MUDGUARD: Taming Malicious Majorities in Federated Learning using Privacy-preserving Byzantine-robust Clustering. | Rui Wang, Xingkai Wang, Huanhuan Chen, Jrmie Decouchant, Stjepan Picek, Nikolaos Laoutaris, Kaitai Liang |
| 2024 | ACL | A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Models. | Zihao Xu, Yi Liu, Gelei Deng, Yuekang Li, Stjepan Picek |
| 2024 | ASIACRYPT | It's a Kind of Magic: A Novel Conditional GAN Framework for Efficient Profiling Side-Channel Analysis. | Sengim Karayalcin, Marina Krcek, Lichao Wu, Stjepan Picek, Guilherme Perin |
| 2024 | DATE | Can Machine Learn Pipeline Leakage? | Omid Bazangani, Parisa Amiri-Eliasi, Stjepan Picek, Lejla Batina |
| 2024 | DDECS | Xoodyak Under SCA Siege. | Parisa Amiri-Eliasi, Silvia Mella, Lo Weissbart, Lejla Batina, Stjepan Picek |
| 2024 | DSN | Universal Soldier: Using Universal Adversarial Perturbations for Detecting Backdoor Attacks. | Xiaoyun Xu, Oguzhan Ersoy, Behrad Tajalli, Stjepan Picek |
| 2024 | ESORICS | Short Paper: Effects of Poisoning Attacks on Causal Deep Reinforcement Learning. | Patrick Lodeweegs, Behrad Tajalli, Stjepan Picek |
| 2024 | EUROGP | Look into the Mirror: Evolving Self-dual Bent Boolean Functions. | Claude Carlet, Marko Durasevic, Domagoj Jakobovic, Luca Mariot, Stjepan Picek |
| 2024 | GECCO | On the Evolution of Boolean Functions with the Algebraic Normal Form Representation. | Claude Carlet, Marko Durasevic, Domagoj Jakobovic, Stjepan Picek |
| 2024 | GECCO | A Systematic Exploration of Evolutionary Computation for the Design of Hardware-oriented Non-cryptographic Hash Functions. | Mujtaba Hassan, Jo Vliegen, Stjepan Picek, Nele Mentens |
| 2024 | INDOCRYPT | OccPoIs: Points of Interest Based on Neural Network's Key Recovery in Side-Channel Analysis Through Occlusion. | Trevor Yap, Stjepan Picek, Shivam Bhasin |
| 2024 | NDSS | Sneaky Spikes: Uncovering Stealthy Backdoor Attacks in Spiking Neural Networks with Neuromorphic Data. | Gorka Abad, Oguzhan Ersoy, Stjepan Picek, Aitor Urbieta |
| 2024 | PPSN | Discovering Rotation Symmetric Self-dual Bent Functions with Evolutionary Algorithms. | Claude Carlet, Marko urasevic, Domagoj Jakobovic, Stjepan Picek |
| 2023 | CCS | Turning Privacy-preserving Mechanisms against Federated Learning. | Marco Arazzi, Mauro Conti, Antonino Nocera, Stjepan Picek |
| 2023 | CCS | Poster: Backdoor Attack on Extreme Learning Machines. | Behrad Tajalli, Gorka Abad, Stjepan Picek |
| 2023 | CCS | Poster: Boosting Adversarial Robustness by Adversarial Pre-training. | Xiaoyun Xu, Stjepan Picek |
| 2023 | CCS | Poster: Multi-target & Multi-trigger Backdoor Attacks on Graph Neural Networks. | Jing Xu, Stjepan Picek |
| 2023 | DATE | Maximizing the Potential of Custom RISC-V Vector Extensions for Speeding up SHA-3 Hash Functions. | Huimin Li, Nele Mentens, Stjepan Picek |
| 2023 | DSN | IB-RAR: Information Bottleneck as Regularizer for Adversarial Robustness. | Xiaoyun Xu, Guilherme Perin, Stjepan Picek |
| 2023 | FPL | FLAIRS: FPGA-Accelerated Inference-Resistant & Secure Federated Learning. | Huimin Li, Phillip Rieger, Shaza Zeitouni, Stjepan Picek, Ahmad-Reza Sadeghi |
| 2023 | GECCO | Modeling Strong Physically Unclonable Functions with Metaheuristics. | Carlos A. Coello Coello, Marko Durasevic, Domagoj Jakobovic, Marina Krcek, Luca Mariot, Stjepan Picek |
| 2023 | GECCO | Digging Deeper: Operator Analysis for Optimizing Nonlinearity of Boolean Functions. | Marko Durasevic, Domagoj Jakobovic, Luca Mariot, Stjepan Picek |
| 2023 | ICASSP | Going in Style: Audio Backdoors Through Stylistic Transformations. | Stefanos Koffas, Luca Pajola, Stjepan Picek, Mauro Conti |
| 2023 | IJCNN | Rethinking the Trigger-injecting Position in Graph Backdoor Attack. | Jing Xu, Gorka Abad, Stjepan Picek |
| 2023 | NDSS | The Power of Bamboo: On the Post-Compromise Security for Searchable Symmetric Encryption. | Tianyang Chen, Peng Xu, Stjepan Picek, Bo Luo, Willy Susilo, Hai Jin, Kaitai Liang |
| 2023 | NDSS | DARWIN: Survival of the Fittest Fuzzing Mutators. | Patrick Jauernig, Domagoj Jakobovic, Stjepan Picek, Emmanuel Stapf, Ahmad-Reza Sadeghi |
| 2023 | SP | On Feasibility of Server-side Backdoor Attacks on Split Learning. | Behrad Tajalli, Oguzhan Ersoy, Stjepan Picek |
| 2022 | ACNS | Deep Neural Networks Aiding Cryptanalysis: A Case Study of the Speck Distinguisher. | Nicoleta-Norica Bacuieti, Lejla Batina, Stjepan Picek |
| 2022 | ACNS | Deep Learning-Based Side-Channel Analysis Against AES Inner Rounds. | Sudharshan Swaminathan, Lukasz Chmielewski, Guilherme Perin, Stjepan Picek |
| 2022 | ACSAC | More is Better (Mostly): On the Backdoor Attacks in Federated Graph Neural Networks. | Jing Xu, Rui Wang, Stefanos Koffas, Kaitai Liang, Stjepan Picek |
| 2022 | CCS | Poster: Backdoor Attacks on Spiking NNs and Neuromorphic Datasets. | Gorka Abad, Oguzhan Ersoy, Stjepan Picek, Vctor Julio Ramrez-Durn, Aitor Urbieta |
| 2022 | CCS | Label-Only Membership Inference Attack against Node-Level Graph Neural Networks. | Mauro Conti, Jiaxin Li, Stjepan Picek, Jing Xu |
| 2022 | CCS | Poster: Clean-label Backdoor Attack on Graph Neural Networks. | Jing Xu, Stjepan Picek |
| 2022 | CEC | Evolutionary Construction of Perfectly Balanced Boolean Functions. | Luca Mariot, Stjepan Picek, Domagoj Jakobovic, Marko Djurasevic, Alberto Leporati |
| 2022 | DAC | A scalable SIMD RISC-V based processor with customized vector extensions for CRYSTALS-kyber. | Huimin Li, Nele Mentens, Stjepan Picek |
| 2022 | FDTC | The More You Know: Improving Laser Fault Injection with Prior Knowledge. | Marina Krcek, Thomas Ordas, Daniele Fronte, Stjepan Picek |
| 2022 | GECCO | Evolving constructions for balanced, highly nonlinear boolean functions. | Claude Carlet, Marko Djurasevic, Domagoj Jakobovic, Luca Mariot, Stjepan Picek |
| 2022 | GECCO | On generalizing the power function exponent constructions with genetic programming. | Claude Carlet, Domagoj Jakobovic, Stjepan Picek |
| 2022 | GECCO | Evolutionary computation and machine learning in security. | Stjepan Picek, Domagoj Jakobovic |
| 2021 | CARDIS | A Tale of Two Boards: On the Influence of Microarchitecture on Side-Channel Leakage. | Vipul Arora, Ileana Buhan, Guilherme Perin, Stjepan Picek |
| 2021 | CARDIS | Profiled Side-Channel Analysis in the Efficient Attacker Framework. | Stjepan Picek, Annelie Heuser, Guilherme Perin, Sylvain Guilley |
| 2021 | FDTC | On the Importance of Initial Solutions Selection in Fault Injection. | Marina Krcek, Daniele Fronte, Stjepan Picek |
| 2021 | GECCO | Evolutionary algorithms-assisted construction of cryptographic boolean functions. | Claude Carlet, Domagoj Jakobovic, Stjepan Picek |
| 2021 | GECCO | CoInGP: convolutional inpainting with genetic programming. | Domagoj Jakobovic, Luca Manzoni, Luca Mariot, Stjepan Picek, Mauro Castelli |
| 2021 | GECCO | Evolutionary computation and machine learning in cryptology. | Stjepan Picek, Domagoj Jakobovic |
| 2021 | GECCO | On the genotype compression and expansion for evolutionary algorithms in the continuous domain. | Lucija Planinic, Marko Djurasevic, Luca Mariot, Domagoj Jakobovic, Stjepan Picek, Carlos A. Coello Coello |
| 2020 | DAC | Learning From A Big Brother - Mimicking Neural Networks in Profiled Side-channel Analysis. | Daan van der Valk, Marina Krcek, Stjepan Picek, Shivam Bhasin |
| 2020 | ESORICS | Big Enough to Care Not Enough to Scare! Crawling to Attack Recommender Systems. | Fabio Aiolli, Mauro Conti, Stjepan Picek, Mirko Polato |
| 2020 | EUROGP | An Evolutionary View on Reversible Shift-Invariant Transformations. | Luca Mariot, Stjepan Picek, Domagoj Jakobovic, Alberto Leporati |
| 2020 | GECCO | One property to rule them all?: on the limits of trade-offs for S-boxes. | Marko Djurasevic, Domagoj Jakobovic, Stjepan Picek |
| 2020 | GECCO | Towards an evolutionary-based approach for natural language processing. | Luca Manzoni, Domagoj Jakobovic, Luca Mariot, Stjepan Picek, Mauro Castelli |
| 2020 | GECCO | Evolutionary computation and machine learning in cryptology. | Stjepan Picek, Domagoj Jakobovic |
| 2020 | NDSS | Mind the Portability: A Warriors Guide through Realistic Profiled Side-channel Analysis. | Shivam Bhasin, Anupam Chattopadhyay, Annelie Heuser, Dirmanto Jap, Stjepan Picek, Ritu Ranjan Shrivastwa |
| 2020 | PPSN | A Search for Additional Structure: The Case of Cryptographic S-boxes. | Claude Carlet, Marko Djurasevic, Domagoj Jakobovic, Stjepan Picek |
| 2020 | PPSN | Fitness Landscape Analysis of Dimensionally-Aware Genetic Programming Featuring Feynman Equations. | Marko Durasevic, Domagoj Jakobovic, Marcella Scoczynski Ribeiro Martins, Stjepan Picek, Markus Wagner |
| 2019 | CCS | Poster: Recovering the Input of Neural Networks via Single Shot Side-channel Attacks. | Lejla Batina, Shivam Bhasin, Dirmanto Jap, Stjepan Picek |
| 2019 | CCS | Poster: When Adversary Becomes the Guardian - Towards Side-channel Security With Adversarial Attacks. | Stjepan Picek, Dirmanto Jap, Shivam Bhasin |
| 2019 | EUROGP | Hyper-bent Boolean Functions and Evolutionary Algorithms. | Luca Mariot, Domagoj Jakobovic, Alberto Leporati, Stjepan Picek |
| 2019 | GECCO | A characterisation of S-box fitness landscapes in cryptography. | Domagoj Jakobovic, Stjepan Picek, Marcella S. R. Martins, Markus Wagner |
| 2019 | GECCO | On the design of S-box constructions with genetic programming. | Stjepan Picek, Domagoj Jakobovic |
| 2019 | GECCO | C | Stjepan Picek, Karlo Knezevic, Domagoj Jakobovic, Ante Derek |
| 2018 | CARDIS | Improving Side-Channel Analysis Through Semi-supervised Learning. | Stjepan Picek, Annelie Heuser, Alan Jovic, Karlo Knezevic, Tania Richmond |
| 2018 | CEC | A Search for Differentially-6 Uniform (n, n-2) Functions. | Stjepan Picek, Karlo Knezevic, Domagoj Jakobovic, Claude Carlet |
| 2018 | CEC | Evolving Bent Quaternary Functions. | Stjepan Picek, Karlo Knezevic, Luca Mariot, Domagoj Jakobovic, Alberto Leporati |
| 2018 | FDTC | Genetic Algorithm-Based Electromagnetic Fault Injection. | Antun Maldini, Niels Samwel, Stjepan Picek, Lejla Batina |
| 2018 | PPSN | Evolutionary Search of Binary Orthogonal Arrays. | Luca Mariot, Stjepan Picek, Domagoj Jakobovic, Alberto Leporati |
| 2018 | PPSN | Tutorials at PPSN 2018. | Gisele Lobo Pappa, Michael T. M. Emmerich, Ana L. C. Bazzan, Will N. Browne, Kalyanmoy Deb, Carola Doerr, Marko Durasevic, Michael G. Epitropakis, Saemundur O. Haraldsson, Domagoj Jakobovic, Pascal Kerschke, Krzysztof Krawiec, Per Kristian Lehre, Xiaodong Li, Andrei Lissovoi, Pekka Malo, Luis Mart, Yi Mei, Juan Julin Merelo Guervs, Julian F. Miller, Alberto Moraglio, Antonio J. Nebro, Su Nguyen, Gabriela Ochoa, Pietro S. Oliveto, Stjepan Picek, Nelishia Pillay, Mike Preuss, Marc Schoenauer, Roman Senkerik, Ankur Sinha, Ofer M. Shir, Dirk Sudholt, L. Darrell Whitley, Mark Wineberg, John R. Woodward, Mengjie Zhang |
| 2017 | ACNS | Trade-Offs for S-Boxes: Cryptographic Properties and Side-Channel Resilience. | Claude Carlet, Annelie Heuser, Stjepan Picek |
| 2017 | CCS | If You Can't Measure It, You Can't Improve It: Moving Target Defense Metrics. | Stjepan Picek, Erik Hemberg, Una-May O'Reilly |
| 2017 | CEC | On the evolution of bent (n, m) functions. | Stjepan Picek, Karlo Knezevic, Domagoj Jakobovic |
| 2017 | GECCO | On the mutual information as a fitness landscape measure. | Rebeka Coric, Stjepan Picek, Domagoj Jakobovic, Carlos A. Coello Coello |
| 2017 | GECCO | Amplitude-oriented mixed-type CGP classification. | Karlo Knezevic, Stjepan Picek, Julian F. Miller |
| 2017 | GECCO | Evolutionary algorithms for the design of orthogonal latin squares based on cellular automata. | Luca Mariot, Stjepan Picek, Domagoj Jakobovic, Alberto Leporati |
| 2017 | GECCO | Evolutionary computation and cryptology. | Stjepan Picek |
| 2017 | GECCO | CryptoBench: benchmarking evolutionary algorithms with cryptographic problems. | Stjepan Picek, Domagoj Jakobovic, Una-May O'Reilly |
| 2017 | GECCO | Evolving S-boxes based on cellular automata with genetic programming. | Stjepan Picek, Luca Mariot, Alberto Leporati, Domagoj Jakobovic |
| 2017 | IJCNN | Side-channel analysis and machine learning: A practical perspective. | Stjepan Picek, Annelie Heuser, Alan Jovic, Simone A. Ludwig, Sylvain Guilley, Domagoj Jakobovic, Nele Mentens |
| 2016 | CARDIS | PRNGs for Masking Applications and Their Mapping to Evolvable Hardware. | Stjepan Picek, Bohan Yang, Vladimir Rozic, Jo Vliegen, Jori Winderickx, Thomas De Cnudde, Nele Mentens |
| 2016 | CEC | Maximal nonlinearity in balanced boolean functions with even number of inputs, revisited. | Stjepan Picek, Roberto Santana, Domagoj Jakobovic |
| 2016 | GECCO | Evolutionary Computation and Cryptology. | Stjepan Picek |
| 2016 | GECCO | Evolving Algebraic Constructions for Designing Bent Boolean Functions. | Stjepan Picek, Domagoj Jakobovic |
| 2016 | PPSN | Tutorials at PPSN 2016. | Carola Doerr, Nicolas Bredche, Enrique Alba, Thomas Bartz-Beielstein, Dimo Brockhoff, Benjamin Doerr, Gusz Eiben, Michael G. Epitropakis, Carlos M. Fonseca, Andreia P. Guerreiro, Evert Haasdijk, Jacqueline Heinerman, Julien Hubert, Per Kristian Lehre, Luigi Malag, Juan Julin Merelo Guervs, Julian Francis Miller, Boris Naujoks, Pietro S. Oliveto, Stjepan Picek, Nelishia Pillay, Mike Preuss, Patricia Ryser-Welch, Giovanni Squillero, Jrg Stork, Dirk Sudholt, Alberto Paolo Tonda, L. Darrell Whitley, Martin Zaefferer |
| 2016 | PPSN | Evolving Cryptographic Pseudorandom Number Generators. | Stjepan Picek, Dominik Sisejkovic, Vladimir Rozic, Bohan Yang, Domagoj Jakobovic, Nele Mentens |
| 2016 | WAIFI | A Search Strategy to Optimize the Affine Variant Properties of S-Boxes. | Stjepan Picek, Bohan Yang, Nele Mentens |
| 2016 | WISA | Applications of Soft Computing in Cryptology. | Stjepan Picek |
| 2015 | EUROGP | Evolutionary Methods for the Construction of Cryptographic Boolean Functions. | Stjepan Picek, Domagoj Jakobovic, Julian F. Miller, Elena Marchiori, Lejla Batina |
| 2015 | GECCO | Correlation Immunity of Boolean Functions: An Evolutionary Algorithms Perspective. | Stjepan Picek, Claude Carlet, Domagoj Jakobovic, Julian F. Miller, Lejla Batina |
| 2015 | GECCO | Cartesian Genetic Programming Approach for Generating Substitution Boxes of Different Sizes. | Stjepan Picek, Julian F. Miller, Domagoj Jakobovic, Lejla Batina |
| 2015 | GECCO | Fighting the Symmetries: The Structure of Cryptographic Boolean Function Spaces. | Stjepan Picek, Robert I. McKay, Roberto Santana, Tom Gedeon |
| 2015 | ISCAS | Improving DPA resistance of S-boxes: How far can we go? | Baris Ege, Kostas Papagiannopoulos, Lejla Batina, Stjepan Picek |
| 2015 | ISCAS | Challenges in designing trustworthy cryptographic co-processors. | Ricardo Chaves, Giorgio Di Natale, Lejla Batina, Shivam Bhasin, Baris Ege, Apostolos P. Fournaris, Nele Mentens, Stjepan Picek, Francesco Regazzoni, Vladimir Rozic, Nicolas Sklavos, Bohan Yang |
| 2014 | GECCO | From fitness landscape to crossover operator choice. | Stjepan Picek, Domagoj Jakobovic |
| 2014 | INDOCRYPT | S-box Pipelining Using Genetic Algorithms for High-Throughput AES Implementations: How Fast Can We Go? | Lejla Batina, Domagoj Jakobovic, Nele Mentens, Stjepan Picek, Antonio de la Piedra, Dominik Sisejkovic |
| 2014 | INDOCRYPT | Confused by Confusion: Systematic Evaluation of DPA Resistance of Various S-boxes. | Stjepan Picek, Kostas Papagiannopoulos, Baris Ege, Lejla Batina, Domagoj Jakobovic |
| 2014 | PPSN | Evolving DPA-Resistant Boolean Functions. | Stjepan Picek, Lejla Batina, Domagoj Jakobovic |
| 2014 | PPSN | Combining Evolutionary Computation and Algebraic Constructions to Find Cryptography-Relevant Boolean Functions. | Stjepan Picek, Elena Marchiori, Lejla Batina, Domagoj Jakobovic |
| 2014 | WISTP | S-box, SET, Match: A Toolbox for S-box Analysis. | Stjepan Picek, Lejla Batina, Domagoj Jakobovic, Baris Ege, Marin Golub |
| 2013 | CARDIS | Glitch It If You Can: Parameter Search Strategies for Successful Fault Injection. | Rafael Boix Carpi, Stjepan Picek, Lejla Batina, Federico Menarini, Domagoj Jakobovic, Marin Golub |
| 2013 | CEC | On the recombination operator in the real-coded genetic algorithms. | Stjepan Picek, Domagoj Jakobovic, Marin Golub |
| 2013 | GECCO | Evolving cryptographically sound boolean functions. | Stjepan Picek, Domagoj Jakobovic, Marin Golub |
| 2012 | CEC | Influence of the crossover operator in the performance of the hybrid Taguchi GA. | Stjepan Picek, Marin Golub, Domagoj Jakobovic |