// publications

Publications

2026

ClusterMark: Towards Robust Watermarking for Autoregressive Image Generators with Visual Token Clustering

Denis Lukovnikov, Andreas Müller, Erwin Quiring, Asja Fischer
2026 Proc. of IEEE Conference on Computer Vision and Pattern Recognition (CVPR)
Link

Chasing Shadows: Pitfalls in LLM Security Research

Jonathan Evertz, Niklas Risse, Nicolai Neuer, Andreas Müller, Philipp Normann, Gaetano Sapia, Srishti Gupta, David Pape, Soumya Shaw, Devansh Srivastav, Christian Wressnegger, Erwin Quiring, Thorsten Eisenhofer, Daniel Arp, Lea Schönherr
2026 Network and Distributed System Security Symposium (NDSS)
Link

2025

Towards A Correct Usage of Cryptography in Semantic Watermarks for Diffusion Models

Jonas Thietke, Andreas Müller, Denis Lukovnikov, Asja Fischer, Erwin Quiring
2025 ICLR Workshop on GenAI Watermarking (WMARK)
Link

Intriguing Properties of Adversarial ML Attacks in the Problem Space [Extended Version]

Jacopo Cortellazzi, Erwin Quiring, Daniel Arp, Feargus Pendlebury, Fabio Pierazzi, Lorenzo Cavallaro
2025 ACM Transactions on Privacy and Security
DOI

Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models

Andreas Müller, Denis Lukovnikov, Jonas Thietke, Asja Fischer, Erwin Quiring
2025 Proc. of IEEE Conference on Computer Vision and Pattern Recognition (CVPR)
Link

Are Semantic Watermarks for Diffusion Models Resilient to Layout Control?

Denis Lukovnikov, Andreas Müller, Jonas Thietke, Erwin Quiring, Asja Fischer
2025 ICLR Workshop on GenAI Watermarking (WMARK)
Link

2024

The Impact of Uniform Inputs on Activation Sparsity and Energy-Latency Attacks in Computer Vision

Andreas M\"uller, Erwin Quiring
2024 Deep Learning Security and Privacy Workshop (DLSP)
DOI

Pitfalls in Machine Learning for Computer Security

Daniel Arp, Erwin Quiring, Feargus Pendlebury, Alexander Warnecke, Fabio Pierazzi, Christian Wressnegger, Lorenzo Cavallaro, Konrad Rieck
2024 Communications of the ACM
DOI

I still know it's you! On Challenges in Anonymizing Source Code

Micha Horlboge, Erwin Quiring, Roland Meyer, Konrad Rieck
2024 Proceedings on Privacy Enhancing Technologies (PETS)
DOI

AI-Generated Faces in the Real World: A Large-Scale Case Study of Twitter Profile Images

Jonas Ricker, Dennis Assenmacher, Thorsten Holz, Asja Fischer, Erwin Quiring
2024 Proc. of Symposium on Research in Attacks, Intrusions, and Defenses (RAID)
DOI

2023

On the Detection of Image-Scaling Attacks in Machine Learning

Erwin Quiring, Andreas Müller, Konrad Rieck
2023 Proc. of Annual Computer Security Applications Conference (ACSAC)
DOI

No more Reviewer #2: Subverting Automatic Paper-Reviewer Assignment using Adversarial Learning

Thorsten Eisenhofer*, Erwin Quiring*, Jonas Möller and Doreen Riepel, Thorsten Holz, Konrad Rieck
2023 Proc. of USENIX Security Symposium
Link

Lessons Learned on Machine Learning for Computer Security

Daniel Arp, Erwin Quiring, Feargus Pendlebury, Alexander Warnecke, Fabio Pierazzi, Christian Wressnegger, Lorenzo Cavallaro, Konrad Rieck
2023 IEEE Security & Privacy
DOI

2022

Misleading Deep-Fake Detection with GAN Fingerprints

Vera Wesselkamp, Konrad Rieck, Daniel Arp, Erwin Quiring
2022 Deep Learning and Security Workshop (DLS)
DOI

Dos and Don'ts of Machine Learning in Computer Security

Daniel Arp, Erwin Quiring, Feargus Pendlebury, Alexander Warnecke, Fabio Pierazzi, Christian Wressnegger, Lorenzo Cavallaro, Konrad Rieck
2022 Proc. of USENIX Security Symposium
Link

2020

Backdooring and Poisoning Neural Networks with Image-Scaling Attacks

Erwin Quiring, Konrad Rieck
2020 Deep Learning and Security Workshop (DLS)
DOI

Against All Odds: Winning the Defense Challenge in an Evasion Competition with Diversification

Erwin Quiring, Lukas Pirch, Michael Reimsbach, Daniel Arp, Konrad Rieck
2020

Adversarial Preprocessing: Understanding and Preventing Image-Scaling Attacks in Machine Learning

Erwin Quiring, David Klein, Daniel Arp, Martin Johns, Konrad Rieck
2020 Proc. of USENIX Security Symposium
Link

2019

On the Security and Applicability of Fragile Camera Fingerprints

Erwin Quiring, Matthias Kirchner, Konrad Rieck
2019 Proc. of European Symposium on Research in Computer Security (ESORICS)
DOI

Misleading Authorship Attribution of Source Code using Adversarial Learning

Erwin Quiring, Alwin Maier, Konrad Rieck
2019 Proc. of USENIX Security Symposium
Link

2018

Privacy-Enhanced Fraud Detection with Bloom Filters

Daniel Arp AND Erwin Quiring AND Tammo Krueger AND Stanimir Dragiev AND Konrad Rieck
2018 Proc. of Int. Conference on Security and Privacy in Communication Networks (SECURECOMM)
DOI

Forgotten Siblings: Unifying Attacks on Machine Learning and Digital Watermarking

Erwin Quiring, Daniel Arp, Konrad Rieck
2018 Proc. of IEEE European Symposium on Security and Privacy (EuroS&P)
DOI

Adversarial Machine Learning Against Digital Watermarking

Erwin Quiring, Konrad Rieck
2018 European Signal Processing Conference (EUSIPCO)
DOI

2017

Privacy Threats through Ultrasonic Side Channels on Mobile Devices

Daniel Arp, Erwin Quiring, Christian Wressnegger, Konrad Rieck
2017 Proc. of IEEE European Symposium on Security and Privacy (EuroS&P)
DOI

2016

Bat in the Mobile: A Study on Ultrasonic Device Tracking

Daniel Arp, Erwin Quiring, Christian Wressnegger, Konrad Rieck
2016
Link

2015

Fragile Sensor Fingerprint Camera Identification

Erwin Quiring, Matthias Kirchner
2015 IEEE International Workshop on Information Forensics and Security (WIFS)
DOI

2014

On the Combination of Randomized Thresholds and Non-Parametric Boundaries to Protect Digital Watermarks against Sensitivity Attacks

Erwin Quiring, Pascal Sch\"ottle
2014 Proc. of the ACM Workshop on Information Hiding and Multimedia Security (IH&MMSec)
DOI

Laiengerechte Erzeugung von 3D-Animationen am Beispiel von textuellen Unfallbeschreibungen

Matthias Carnein, Erwin Quiring, Andreas Haack, Andreas Möhring, Jörg Becker
2014 Proc. of the International Legal Informatics Symposium (IRIS)