{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,29]],"date-time":"2026-10-29T10:56:28Z","timestamp":1793271388612,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":113,"publisher":"ACM","funder":[{"name":"Machine Learning Cluster of Excellence, Deutsche Forschungsgemeinschaft under Germany?s Excellence Strategy","award":["EXC number 2064\/1, Project number 390727645"],"award-info":[{"award-number":["EXC number 2064\/1, Project number 390727645"]}]},{"name":"Google PhD Fellowship 2023"},{"name":"Carl Zeiss Foundation"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,6,23]]},"DOI":"10.1145\/3715275.3732020","type":"proceedings-article","created":{"date-parts":[[2025,6,23]],"date-time":"2025-06-23T17:01:18Z","timestamp":1750698078000},"page":"283-295","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["Robustness and Cybersecurity in the EU Artificial Intelligence Act"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-2573-7195","authenticated-orcid":false,"given":"Henrik","family":"Nolte","sequence":"first","affiliation":[{"name":"University of T\u00fcbingen, T\u00fcbingen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-6652-2034","authenticated-orcid":false,"given":"Miriam","family":"Rateike","sequence":"additional","affiliation":[{"name":"IBM Research Africa, Nairobi, Kenya and Saarland University, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0356-4859","authenticated-orcid":false,"given":"Mich\u00e8le","family":"Finck","sequence":"additional","affiliation":[{"name":"CZS Institute for Artificial Intelligence and Law, University of T\u00fcbingen, T\u00fcbingen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,6,23]]},"reference":[{"key":"e_1_3_3_2_2_2","unstructured":"AI IHEG. 2019. High-level expert group on artificial intelligence. Ethics Guidelines for Trustworthy AI (2019)."},{"key":"e_1_3_3_2_3_2","unstructured":"Andy Applebaum William Arbaugh Jack\u00a0W. Davidson Joseph Edappully John Emanuello Howie Huang Andrew Golczynski Nicole Nichols Tejas Patel Ahmad Ridley and Vance Wong. 2022. ICML 2024 Workshop on Machine Learning for Cybersecurity. https:\/\/sites.google.com\/view\/icml-ml4cyber\/home Accessed: 2024-10-22."},{"key":"e_1_3_3_2_4_2","unstructured":"Yahav Bechavod Katrina Ligett Aaron Roth Bo Waggoner and Steven\u00a0Z Wu. 2019. Equal opportunity in online classification with partial feedback. Advances in Neural Information Processing Systems 32 (2019)."},{"key":"e_1_3_3_2_5_2","doi-asserted-by":"crossref","unstructured":"Elisabetta Biasin Burcu Yasar and Erik Kamenjasevic. 2023. New cybersecurity requirements for medical devices in the EU: the forthcoming European health data space data act and artificial intelligence act. Law Tech. & Hum. 5 (2023) 43.","DOI":"10.5204\/lthj.3068"},{"key":"e_1_3_3_2_6_2","first-page":"387","volume-title":"Machine Learning and Knowledge Discovery in Databases: European Conference, ECML PKDD 2013, Prague, Czech Republic, September 23-27, 2013, Proceedings, Part III 13","author":"Biggio Battista","year":"2013","unstructured":"Battista Biggio, Igino Corona, Davide Maiorca, Blaine Nelson, Nedim \u0160rndi\u0107, Pavel Laskov, Giorgio Giacinto, and Fabio Roli. 2013. Evasion attacks against machine learning at test time. In Machine Learning and Knowledge Discovery in Databases: European Conference, ECML PKDD 2013, Prague, Czech Republic, September 23-27, 2013, Proceedings, Part III 13. Springer, 387\u2013402."},{"key":"e_1_3_3_2_7_2","doi-asserted-by":"publisher","DOI":"10.1145\/3630106.3658928"},{"key":"e_1_3_3_2_8_2","unstructured":"David Bomhard and Jonas Siglm\u00fcller. 2024. AI Act \u2013 das Trilogergebnis. RDi 45 (2024)."},{"key":"e_1_3_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.1145\/3531146.3533153"},{"key":"e_1_3_3_2_10_2","unstructured":"Cambridge University Press. 2024. Adequate. https:\/\/dictionary.cambridge.org\/dictionary\/english\/adequate Accessed: 2024-07-15."},{"key":"e_1_3_3_2_11_2","unstructured":"Cambridge University Press. 2024. Appropriate. https:\/\/dictionary.cambridge.org\/dictionary\/english\/appropriate Accessed: 2024-07-15."},{"key":"e_1_3_3_2_12_2","unstructured":"Cambridge University Press. 2024. Relevant. https:\/\/dictionary.cambridge.org\/dictionary\/english\/relevant Accessed: 2024-07-17."},{"key":"e_1_3_3_2_13_2","doi-asserted-by":"crossref","unstructured":"Diogo\u00a0V Carvalho Eduardo\u00a0M Pereira and Jaime\u00a0S Cardoso. 2019. Machine learning interpretability: A survey on methods and metrics. Electronics 8 8 (2019) 832.","DOI":"10.3390\/electronics8080832"},{"key":"e_1_3_3_2_14_2","doi-asserted-by":"crossref","unstructured":"Federica Casarosa. 2022. Cybersecurity certification of Artificial Intelligence: a missed opportunity to coordinate between the Artificial Intelligence Act and the Cybersecurity Act. International Cybersecurity Law Review 3 1 (2022) 115\u2013130.","DOI":"10.1365\/s43439-021-00043-6"},{"key":"e_1_3_3_2_15_2","doi-asserted-by":"crossref","unstructured":"Daniel\u00a0C Castro Ian Walker and Ben Glocker. 2020. Causality matters in medical imaging. Nature Communications 11 1 (2020) 3673.","DOI":"10.1038\/s41467-020-17478-w"},{"key":"e_1_3_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-tutorials.5"},{"key":"e_1_3_3_2_17_2","unstructured":"Foo\u00a0Yun Chee and Tassilo Hummel. 2024. Europe sets benchmark for rest of the world with landmark AI laws. Reuters (May 2024). https:\/\/www.reuters.com\/world\/europe\/eu-countries-back-landmark-artificial-intelligence-rules-2024-05-21\/"},{"key":"e_1_3_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.1109\/EISIC.2017.21"},{"key":"e_1_3_3_2_19_2","volume-title":"Annual Conference on Neural Information Processing Systems","author":"Chen Pin-Yu","year":"2022","unstructured":"Pin-Yu Chen, Sijia Liu, Sayak Paul, and Hugging Face. 2022. Foundational Robustness of Foundation Models. In Annual Conference on Neural Information Processing Systems."},{"key":"e_1_3_3_2_20_2","unstructured":"Xinyun Chen Chang Liu Bo Li Kimberly Lu and Dawn Song. 2017. Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1712.05526 (2017)."},{"key":"e_1_3_3_2_21_2","unstructured":"Lei Cheng Xiaowen Huang Jitao Sang and Jian Yu. 2024. Towards Robust Recommendation: A Review and an Adversarial Robustness Evaluation Library. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2404.17844 (2024)."},{"key":"e_1_3_3_2_22_2","unstructured":"Alexandra Chouldechova and Max G\u2019Sell. 2017. Fairer and more accurate but for whom? arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1707.00046 (2017)."},{"key":"e_1_3_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3098095"},{"key":"e_1_3_3_2_24_2","unstructured":"CVE. 2024. Common Vulnerabilities and Exposures Glossary. https:\/\/www.cve.org\/ResourcesSupport\/Glossary. Accessed: 2024-07-03."},{"key":"e_1_3_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.1145\/3351095.3372878"},{"key":"e_1_3_3_2_26_2","unstructured":"Avisha Das Amara Tariq Felipe Batalini Boddhisattwa Dhara and Imon Banerjee. 2024. Exposing Vulnerabilities in Clinical LLMs Through Data Poisoning Attacks: Case Study in Breast Cancer. medRxiv (2024)."},{"key":"e_1_3_3_2_27_2","doi-asserted-by":"crossref","unstructured":"Dipankar Dasgupta Zahid Akhtar and Sajib Sen. 2022. Machine learning in cybersecurity: a comprehensive survey. The Journal of Defense Modeling and Simulation 19 1 (2022) 57\u2013106.","DOI":"10.1177\/1548512920951275"},{"key":"e_1_3_3_2_28_2","unstructured":"Luca Deck Jan-Laurin M\u00fcller Conradin Braun Domenique Zipperling and Niklas K\u00fchl. 2024. Implications of the AI Act for Non-Discrimination Law and Algorithmic Fairness. 3rd European Workshop on Algorithmic Fairness (2024)."},{"key":"e_1_3_3_2_29_2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00040"},{"key":"e_1_3_3_2_30_2","unstructured":"Nathan Drenkow Numair Sani Ilya Shpitser and Mathias Unberath. 2021. A systematic review of robustness in deep learning for computer vision: Mind the gap? arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2112.00639 (2021)."},{"key":"e_1_3_3_2_31_2","unstructured":"European Commission. 2020. White Paper On Artificial Intelligence - A European approach to excellence and trust. EUR-Lex COM(2020) 65 final (2020). https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX:52020DC0065"},{"key":"e_1_3_3_2_32_2","unstructured":"European Commission. 2021. Commission staff working document impact assessment accompanying the proposal for a regulation of the european parliament and of the council laying down harmonized rules on artificial intelligence (artificial intelligence act) and amending certain union legislative acts. EUR-Lex SWD\/2021\/84 final (2021). https:\/\/eur-lex.europa.eu\/legal-content\/EN\/ALL\/?uri=SWD:2021:84:FIN"},{"key":"e_1_3_3_2_33_2","first-page":"421","volume-title":"Proceedings of the AAAI\/ACM Conference on AI, Ethics, and Society","volume":"7","author":"Feffer Michael","year":"2024","unstructured":"Michael Feffer, Anusha Sinha, Wesley\u00a0H Deng, Zachary\u00a0C Lipton, and Hoda Heidari. 2024. Red-teaming for generative ai: Silver bullet or security theater?. In Proceedings of the AAAI\/ACM Conference on AI, Ethics, and Society, Vol.\u00a07. 421\u2013437."},{"key":"e_1_3_3_2_34_2","unstructured":"Gemini Team Rohan Anil Sebastian Borgeaud Yonghui Wu Jean-Baptiste Alayrac Jiahui Yu Radu Soricut Johan Schalkwyk Andrew\u00a0M Dai Anja Hauth et\u00a0al. 2023. Gemini: a family of highly capable multimodal models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2312.11805 (2023)."},{"key":"e_1_3_3_2_35_2","unstructured":"Ben Glocker Robert Robinson Daniel\u00a0C Castro Qi Dou and Ender Konukoglu. 2019. Machine learning with multi-site imaging data: An empirical study on the impact of scanner effects. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1910.04597 (2019)."},{"key":"e_1_3_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1109\/IcETRAN59631.2023.10192125"},{"key":"e_1_3_3_2_37_2","unstructured":"Ian\u00a0J Goodfellow Jonathon Shlens and Christian Szegedy. 2015. Explaining and harnessing adversarial examples. 6th International Conference on Learning Representations (2015)."},{"key":"e_1_3_3_2_38_2","unstructured":"Lukasz Gorywoda. 2009. The New European Legislative Framework for the marketing of goods. Columbia Journal of European Law 16 (2009) 161."},{"key":"e_1_3_3_2_39_2","doi-asserted-by":"crossref","unstructured":"Carlos\u00a0I Gutierrez Anthony Aguirre Risto Uuk Claire\u00a0C Boine and Matija Franklin. 2023. A proposal for a definition of general purpose artificial intelligence systems. Digital Society 2 3 (2023) 36.","DOI":"10.1007\/s44206-023-00068-w"},{"key":"e_1_3_3_2_40_2","doi-asserted-by":"crossref","unstructured":"Philipp Hacker. 2024. Comments on the Final Trilogue Version of the AI Act. Available at SSRN 4757603 (2024).","DOI":"10.2139\/ssrn.4757603"},{"key":"e_1_3_3_2_41_2","doi-asserted-by":"crossref","unstructured":"Ronan Hamon Henrik Junklewitz Josep\u00a0Soler Garrido and Ignacio Sanchez. 2024. Three challenges to secure AI systems in the context of AI regulations. IEEE Access (2024).","DOI":"10.1109\/ACCESS.2024.3391021"},{"key":"e_1_3_3_2_42_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00823"},{"key":"e_1_3_3_2_43_2","doi-asserted-by":"crossref","unstructured":"Steven\u00a0CH Hoi Doyen Sahoo Jing Lu and Peilin Zhao. 2021. Online learning: A comprehensive survey. Neurocomputing 459 (2021) 249\u2013289.","DOI":"10.1016\/j.neucom.2021.04.112"},{"key":"e_1_3_3_2_44_2","volume-title":"Cybersecurity of Artificial Intelligence in the AI Act","author":"Junklewitz Henrik","year":"2023","unstructured":"Henrik Junklewitz, Ronan Hamon, Antoine-Alexandre Andr\u00e9, Tatjana Evas, Josep Soler\u00a0Garrido, and Jose\u00a0Ignacio Sanchez\u00a0Martin. 2023. Cybersecurity of Artificial Intelligence in the AI Act. Technical Report KJ-NA-31-643-EN-N (online). Joint Research Center, Luxembourg (Luxembourg)."},{"key":"e_1_3_3_2_45_2","first-page":"277","volume-title":"International Conference on Artificial Intelligence and Statistics","author":"Kilbertus Niki","year":"2020","unstructured":"Niki Kilbertus, Manuel\u00a0Gomez Rodriguez, Bernhard Sch\u00f6lkopf, Krikamol Muandet, and Isabel Valera. 2020. Fair decisions despite imperfect predictions. In International Conference on Artificial Intelligence and Statistics. PMLR, 277\u2013287."},{"key":"e_1_3_3_2_46_2","unstructured":"Tadas Klimas and Jurate Vaiciukaite. 2008. The Law of Recitals in European Community Legislation\u2019(2008). ILSA Journal of International & Comparative Law 15 (2008) 61."},{"key":"e_1_3_3_2_47_2","volume-title":"First Conference on Language Modeling","author":"Kumar Aounon","year":"2024","unstructured":"Aounon Kumar, Chirag Agarwal, Suraj Srinivas, Aaron\u00a0Jiaxun Li, Soheil Feizi, and Himabindu Lakkaraju. 2024. Certifying LLM Safety against Adversarial Prompting. In First Conference on Language Modeling."},{"key":"e_1_3_3_2_48_2","volume-title":"Not with a Bug, But with a Sticker: Attacks on Machine Learning Systems and What To Do About Them","author":"Kumar Ram Shankar Siva","year":"2023","unstructured":"Ram Shankar Siva Kumar and Hyrum Anderson. 2023. Not with a Bug, But with a Sticker: Attacks on Machine Learning Systems and What To Do About Them. John Wiley & Sons, 2023."},{"key":"e_1_3_3_2_49_2","doi-asserted-by":"crossref","unstructured":"Cornelia Kutterer. 2023. Regulating Foundation Models in the AI Act: From \u201cHigh\u201d to \u201cSystemic\u201d Risk. AI-Regulation Papers 24-01-1 (2023).","DOI":"10.21552\/aire\/2024\/1\/5"},{"key":"e_1_3_3_2_50_2","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i10.21353"},{"key":"e_1_3_3_2_51_2","doi-asserted-by":"crossref","unstructured":"Johann Laux Sandra Wachter and Brent Mittelstadt. 2024. Trustworthy artificial intelligence and the European Union AI act: On the conflation of trustworthiness and acceptability of risk. Regulation & Governance 18 1 (2024) 3\u201332.","DOI":"10.1111\/rego.12512"},{"key":"e_1_3_3_2_52_2","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3470799"},{"key":"e_1_3_3_2_53_2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.findings-emnlp.272"},{"key":"e_1_3_3_2_54_2","unstructured":"Jingyang Li and Guoqiang Li. 2024. The Triangular Trade-off between Robustness Accuracy and Fairness in Deep Neural Networks: A Survey. Comput. Surveys (2024)."},{"key":"e_1_3_3_2_55_2","unstructured":"Anqi Liu and Brian Ziebart. 2014. Robust classification under sample selection bias. Advances in Neural Information Processing Systems 27 (2014)."},{"key":"e_1_3_3_2_56_2","first-page":"3150","volume-title":"International Conference on Machine Learning","author":"Liu Lydia\u00a0T","year":"2018","unstructured":"Lydia\u00a0T Liu, Sarah Dean, Esther Rolf, Max Simchowitz, and Moritz Hardt. 2018. Delayed impact of fair machine learning. In International Conference on Machine Learning. PMLR, 3150\u20133158."},{"key":"e_1_3_3_2_57_2","doi-asserted-by":"crossref","unstructured":"Kristian Lum and William Isaac. 2016. To predict and serve? Significance 13 5 (2016) 14\u201319.","DOI":"10.1111\/j.1740-9713.2016.00960.x"},{"key":"e_1_3_3_2_58_2","unstructured":"J\u00a0Scott Marcus. 2020. Promoting product longevity. How can the EU product safety and compliance framework help promote product durability and tackle planned obsolescence foster the production of more sustainable products and achieve more transparent supply chains for consumers? Policy Department for Economic Scientific and Quality of Life Policies Directorate-General for Internal Policies (2020)."},{"key":"e_1_3_3_2_59_2","doi-asserted-by":"crossref","unstructured":"Kristof Meding and Thilo Hagendorff. 2024. Fairness Hacking: The Malicious Practice of Shrouding Unfairness in Algorithms. Philosophy & Technology 37 1 (2024) 4.","DOI":"10.1007\/s13347-023-00679-8"},{"key":"e_1_3_3_2_60_2","doi-asserted-by":"crossref","unstructured":"Shira Mitchell Eric Potash Solon Barocas Alexander D\u2019Amour and Kristian Lum. 2021. Algorithmic fairness: Choices assumptions and definitions. Annual Review of Statistics and its Application 8 1 (2021) 141\u2013163.","DOI":"10.1146\/annurev-statistics-042720-125902"},{"key":"e_1_3_3_2_61_2","doi-asserted-by":"crossref","unstructured":"Shinsuke Murakami Masahiro Oguchi Tomohiro Tasaki Ichiro Daigo and Seiji Hashimoto. 2010. Lifespan of commodities part I: The creation of a database and its review. Journal of Industrial Ecology 14 4 (2010) 598\u2013612.","DOI":"10.1111\/j.1530-9290.2010.00250.x"},{"key":"e_1_3_3_2_62_2","first-page":"25677","volume-title":"International Conference on Machine Learning","author":"Naik Aaditya","year":"2023","unstructured":"Aaditya Naik, Yinjun Wu, Mayur Naik, and Eric Wong. 2023. Do machine learning models learn statistical rules inferred from data?. In International Conference on Machine Learning. PMLR, 25677\u201325693."},{"key":"e_1_3_3_2_63_2","unstructured":"Maria-Irina Nicolae Mathieu Sinn Minh\u00a0Ngoc Tran Beat Buesser Ambrish Rawat Martin Wistuba Valentina Zantedeschi Nathalie Baracaldo Bryant Chen Heiko Ludwig et\u00a0al. 2018. Adversarial Robustness Toolbox v1. 0.0. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1807.01069 (2018)."},{"key":"e_1_3_3_2_64_2","doi-asserted-by":"crossref","unstructured":"Helen Nissenbaum. 1996. Accountability in a computerized society. Science and Engineering Ethics 2 (1996) 25\u201342.","DOI":"10.1007\/BF02639315"},{"key":"e_1_3_3_2_65_2","unstructured":"Henrik Nolte and Zeynep Schreitm\u00fcller. 2024. Cybersicherheit KI-basierter Medizinprodukte im Lichte der MDR und KI-VO. Zeitschrift f\u00fcr das gesamte Medizinprodukterecht 1 (2024) 20."},{"key":"e_1_3_3_2_66_2","doi-asserted-by":"crossref","unstructured":"Claudio Novelli Federico Casolari Philipp Hacker Giorgio Spedicato and Luciano Floridi. 2024. Generative AI in EU Law: Liability Privacy Intellectual Property and Cybersecurity. EU Law: Liability Privacy Intellectual Property and Cybersecurity (January 14 2024) (2024).","DOI":"10.2139\/ssrn.4821952"},{"key":"e_1_3_3_2_67_2","first-page":"922","volume-title":"International Conference on Artificial Intelligence and Statistics","author":"Olmin Amanda","year":"2022","unstructured":"Amanda Olmin and Fredrik Lindsten. 2022. Robustness and reliability when training with noisy labels. In International Conference on Artificial Intelligence and Statistics. PMLR, 922\u2013942."},{"key":"e_1_3_3_2_68_2","unstructured":"R OpenAI. 2023. Gpt-4 technical report. arxiv 2303.08774. View in Article 2 5 (2023)."},{"key":"e_1_3_3_2_69_2","doi-asserted-by":"publisher","DOI":"10.1145\/3617694.3623227"},{"key":"e_1_3_3_2_70_2","first-page":"17258","volume-title":"International Conference on Machine Learning","author":"Pang Tianyu","year":"2022","unstructured":"Tianyu Pang, Min Lin, Xiao Yang, Jun Zhu, and Shuicheng Yan. 2022. Robustness and accuracy could be reconcilable by (proper) definition. In International Conference on Machine Learning. PMLR, 17258\u201317277."},{"key":"e_1_3_3_2_71_2","unstructured":"Nicolas Papernot Florian Tramer Kamalika Chaudhuri Matt Fredrikson and Jacob Steinhardt. 2018. NeurIPS 2018 Workshop on Security in Machine Learning. https:\/\/secml2018.github.io\/ Accessed: 2024-10-22."},{"key":"e_1_3_3_2_72_2","doi-asserted-by":"crossref","unstructured":"Georgios Pavlidis. 2024. Unlocking the black box: analysing the EU artificial intelligence act\u2019s framework for explainability in AI. Law Innovation and Technology (2024) 1\u201316.","DOI":"10.1080\/17579961.2024.2313795"},{"key":"e_1_3_3_2_73_2","doi-asserted-by":"crossref","unstructured":"Ceyhun\u00a0Necati Pehlivan. 2024. The EU Artificial Intelligence (AI) Act: An Introduction. Global Privacy Law Review 5 1 (2024).","DOI":"10.54648\/GPLR2024004"},{"key":"e_1_3_3_2_74_2","first-page":"7599","volume-title":"International Conference on Machine Learning","author":"Perdomo Juan","year":"2020","unstructured":"Juan Perdomo, Tijana Zrnic, Celestine Mendler-D\u00fcnner, and Moritz Hardt. 2020. Performative prediction. In International Conference on Machine Learning. PMLR, 7599\u20137609."},{"key":"e_1_3_3_2_75_2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.findings-acl.294"},{"key":"e_1_3_3_2_76_2","unstructured":"Yao Qiang Xiangyu Zhou Saleh\u00a0Zare Zade Mohammad\u00a0Amin Roshani Douglas Zytko and Dongxiao Zhu. 2024. Learning to Poison Large Language Models During Instruction Tuning. CoRR (2024)."},{"key":"e_1_3_3_2_77_2","volume-title":"International Conference on Learning Representations","author":"Rade Rahul","year":"2022","unstructured":"Rahul Rade and Seyed-Mohsen Moosavi-Dezfooli. 2022. Reducing excessive margin to achieve a better accuracy vs. robustness trade-off. In International Conference on Learning Representations."},{"key":"e_1_3_3_2_78_2","doi-asserted-by":"publisher","DOI":"10.5555\/3524938.3525671"},{"key":"e_1_3_3_2_79_2","unstructured":"Aditya Ramesh Prafulla Dhariwal Alex Nichol Casey Chu and Mark Chen. 2022. Hierarchical text-conditional image generation with clip latents. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2204.06125 1 2 (2022) 3."},{"key":"e_1_3_3_2_80_2","doi-asserted-by":"publisher","DOI":"10.1145\/3531146.3533199"},{"key":"e_1_3_3_2_81_2","doi-asserted-by":"crossref","unstructured":"Maria Rigaki and Sebastian Garcia. 2023. A survey of privacy attacks in machine learning. Comput. Surveys 56 4 (2023) 1\u201334.","DOI":"10.1145\/3624010"},{"key":"e_1_3_3_2_82_2","doi-asserted-by":"crossref","unstructured":"Ishai Rosenberg Asaf Shabtai Yuval Elovici and Lior Rokach. 2021. Adversarial machine learning attacks and defense methods in the cyber security domain. ACM Computing Surveys (CSUR) 54 5 (2021) 1\u201336.","DOI":"10.1145\/3453158"},{"key":"e_1_3_3_2_83_2","doi-asserted-by":"crossref","unstructured":"Maryam Roshanaei Mahir\u00a0R Khan and Natalie\u00a0N Sylvester. 2024. Navigating AI Cybersecurity: Evolving Landscape and Challenges. Journal of Intelligent Learning Systems and Applications 16 3 (2024) 155\u2013174.","DOI":"10.4236\/jilsa.2024.163010"},{"key":"e_1_3_3_2_84_2","doi-asserted-by":"crossref","unstructured":"Jos\u00e9\u00a0A S\u00e1ez Juli\u00e1n Luengo and Francisco Herrera. 2016. Evaluating the classifier behavior with noisy data considering performance and robustness: The equalized loss of accuracy measure. Neurocomputing 176 (2016) 26\u201335.","DOI":"10.1016\/j.neucom.2014.11.086"},{"key":"e_1_3_3_2_85_2","doi-asserted-by":"crossref","unstructured":"Iqbal\u00a0H Sarker Md\u00a0Hasan Furhad and Raza Nowrozy. 2021. Ai-driven cybersecurity: an overview security intelligence modeling and research directions. SN Computer Science 2 3 (2021) 173.","DOI":"10.1007\/s42979-021-00557-0"},{"key":"e_1_3_3_2_86_2","first-page":"9389","volume-title":"International Conference on Machine Learning","author":"Schwarzschild Avi","year":"2021","unstructured":"Avi Schwarzschild, Micah Goldblum, Arjun Gupta, John\u00a0P Dickerson, and Tom Goldstein. 2021. Just how toxic is data poisoning? a unified benchmark for backdoor and data poisoning attacks. In International Conference on Machine Learning. PMLR, 9389\u20139398."},{"key":"e_1_3_3_2_87_2","first-page":"19434","volume-title":"International Conference on Machine Learning","author":"Schwinn Leo","year":"2022","unstructured":"Leo Schwinn, Leon Bungert, An Nguyen, Ren\u00e9 Raab, Falk Pulsmeyer, Doina Precup, Bj\u00f6rn Eskofier, and Dario Zanca. 2022. Improving robustness against real-world and worst-case distribution shifts through decision region quantification. In International Conference on Machine Learning. PMLR, 19434\u201319449."},{"key":"e_1_3_3_2_88_2","unstructured":"Leo Schwinn David Dobre Sophie Xhonneux Gauthier Gidel and Stephan G\u00fcnnemann. 2024. Soft prompt threats: Attacking safety alignment and unlearning in open-source llms through the embedding space. Advances in Neural Information Processing Systems 37 (2024) 9086\u20139116."},{"key":"e_1_3_3_2_89_2","doi-asserted-by":"crossref","unstructured":"Zhouxing Shi Yihan Wang Fan Yin Xiangning Chen Kai-Wei Chang and Cho-Jui Hsieh. 2024. Red teaming language model detectors with language models. Transactions of the Association for Computational Linguistics 12 (2024) 174\u2013189.","DOI":"10.1162\/tacl_a_00639"},{"key":"e_1_3_3_2_90_2","doi-asserted-by":"publisher","DOI":"10.1145\/3630106.3658974"},{"key":"e_1_3_3_2_91_2","unstructured":"Lucilla Sioli. 2021. A European Strategy for Artificial Intelligence. Presentation at the CEPS webinar - European approach to the regulation of artificial intelligence. https:\/\/www.ceps.eu\/wp-content\/uploads\/2021\/04\/AI-Presentation-CEPS-Webinar-L.-Sioli-23.4.21.pdf"},{"key":"e_1_3_3_2_92_2","doi-asserted-by":"publisher","DOI":"10.1007\/11941439_114"},{"key":"e_1_3_3_2_93_2","unstructured":"Christian Szegedy Wojciech Zaremba Ilya Sutskever Joan Bruna Dumitru Erhan Ian Goodfellow and Rob Fergus. 2013. Intriguing properties of neural networks. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/1312.6199 (2013)."},{"key":"e_1_3_3_2_94_2","unstructured":"Rohan Taori Achal Dave Vaishaal Shankar Nicholas Carlini Benjamin Recht and Ludwig Schmidt. 2020. Measuring robustness to natural distribution shifts in image classification. Advances in Neural Information Processing Systems 33 (2020) 18583\u201318599."},{"key":"e_1_3_3_2_95_2","doi-asserted-by":"crossref","unstructured":"Fabian\u00a0M Teichmann and Sonia\u00a0R Boticiu. 2023. An overview of the benefits challenges and legal aspects of penetration testing and red teaming. International Cybersecurity Law Review 4 4 (2023) 387\u2013397.","DOI":"10.1365\/s43439-023-00100-2"},{"key":"e_1_3_3_2_96_2","doi-asserted-by":"crossref","unstructured":"Andrea Tocchetti Lorenzo Corti Agathe Balayn Mireia Yurrita Philip Lippmann Marco Brambilla and Jie Yang. 2024. AI robustness: a human-centered perspective on technological challenges and opportunities. Comput. Surveys (2024).","DOI":"10.1145\/3665926"},{"key":"e_1_3_3_2_97_2","volume-title":"International Conference on Learning Representations","author":"Tsipras Dimitris","year":"2019","unstructured":"Dimitris Tsipras, Shibani Santurkar, Logan Engstrom, Alexander Turner, and Aleksander Madry. 2019. Robustness May Be at Odds with Accuracy. In International Conference on Learning Representations."},{"key":"e_1_3_3_2_98_2","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.AI.100-2e2023"},{"key":"e_1_3_3_2_99_2","first-page":"235","volume-title":"Legal Knowledge and Information Systems: JURIX 2021: The Thirty-Fourth Annual Conference, Vilnius, Lithuania, 8-10 December 2021. Vol. 346","author":"Vitali Fabio","year":"2022","unstructured":"Fabio Vitali. 2022. A Survey on Methods and Metrics for the Assessment of Explainability under the Proposed AI Act. In Legal Knowledge and Information Systems: JURIX 2021: The Thirty-Fourth Annual Conference, Vilnius, Lithuania, 8-10 December 2021. Vol. 346. IOS Press, 235."},{"key":"e_1_3_3_2_100_2","first-page":"14","volume-title":"International Symposium on Distributed Computing and Artificial Intelligence","author":"Vitorino Jo\u00e3o","year":"2024","unstructured":"Jo\u00e3o Vitorino, Eva Maia, and Isabel Pra\u00e7a. 2024. Adversarial evasion attack efficiency against large language models. In International Symposium on Distributed Computing and Artificial Intelligence. Springer, 14\u201322."},{"key":"e_1_3_3_2_101_2","doi-asserted-by":"crossref","unstructured":"Yuntao Wang Yanghe Pan Miao Yan Zhou Su and Tom\u00a0H Luan. 2023. A survey on ChatGPT: AI-generated contents challenges and solutions. IEEE Open Journal of the Computer Society (2023).","DOI":"10.1109\/OJCS.2023.3300321"},{"key":"e_1_3_3_2_102_2","unstructured":"Alexander Wei Nika Haghtalab and Jacob Steinhardt. 2024. Jailbroken: How does llm safety training fail? Advances in Neural Information Processing Systems 36 (2024)."},{"key":"e_1_3_3_2_103_2","unstructured":"Alexander Wei and Fred Zhang. 2020. Optimal robustness-consistency trade-offs for learning-augmented online algorithms. Advances in Neural Information Processing Systems 33 (2020) 8042\u20138053."},{"key":"e_1_3_3_2_104_2","doi-asserted-by":"crossref","unstructured":"Sholom\u00a0M Weiss and Nitin Indurkhya. 1995. Rule-based machine learning methods for functional prediction. Journal of Artificial Intelligence Research 3 (1995) 383\u2013403.","DOI":"10.1613\/jair.199"},{"key":"e_1_3_3_2_105_2","doi-asserted-by":"crossref","unstructured":"Yueqi Xie Jingwei Yi Jiawei Shao Justin Curl Lingjuan Lyu Qifeng Chen Xing Xie and Fangzhao Wu. 2023. Defending chatgpt against jailbreak attack via self-reminders. Nature Machine Intelligence 5 12 (2023) 1486\u20131496.","DOI":"10.1038\/s42256-023-00765-8"},{"key":"e_1_3_3_2_106_2","first-page":"11492","volume-title":"International Conference on Machine Learning","author":"Xu Han","year":"2021","unstructured":"Han Xu, Xiaorui Liu, Yaxin Li, Anil Jain, and Jiliang Tang. 2021. To be robust or to be fair: Towards fairness in adversarial training. In International Conference on Machine Learning. PMLR, 11492\u201311501."},{"key":"e_1_3_3_2_107_2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.naacl-long.337"},{"key":"e_1_3_3_2_108_2","doi-asserted-by":"crossref","unstructured":"Yao-Yuan Yang Cyrus Rashtchian Hongyang Zhang Russ\u00a0R Salakhutdinov and Kamalika Chaudhuri. 2020. A closer look at accuracy vs. robustness. Advances in neural information processing systems 33 (2020) 8588\u20138601.","DOI":"10.1155\/2020\/8328412"},{"key":"e_1_3_3_2_109_2","doi-asserted-by":"crossref","unstructured":"Yifan Yao Jinhao Duan Kaidi Xu Yuanfang Cai Zhibo Sun and Yue Zhang. 2024. A survey on large language model (llm) security and privacy: The good the bad and the ugly. High-Confidence Computing (2024) 100211.","DOI":"10.1016\/j.hcc.2024.100211"},{"key":"e_1_3_3_2_110_2","unstructured":"Lifan Yuan Yangyi Chen Ganqu Cui Hongcheng Gao Fangyuan Zou Xingyi Cheng Heng Ji Zhiyuan Liu and Maosong Sun. 2023. Revisiting out-of-distribution robustness in nlp: Benchmarks analysis and LLMs evaluations. Advances in Neural Information Processing Systems 36 (2023) 58478\u201358507."},{"key":"e_1_3_3_2_111_2","doi-asserted-by":"publisher","DOI":"10.1145\/1015330.1015425"},{"key":"e_1_3_3_2_112_2","first-page":"7472","volume-title":"International conference on machine learning","author":"Zhang Hongyang","year":"2019","unstructured":"Hongyang Zhang, Yaodong Yu, Jiantao Jiao, Eric Xing, Laurent El\u00a0Ghaoui, and Michael Jordan. 2019. Theoretically principled trade-off between robustness and accuracy. In International conference on machine learning. PMLR, 7472\u20137482."},{"key":"e_1_3_3_2_113_2","unstructured":"Xueru Zhang Ruibo Tu Yang Liu Mingyan Liu Hedvig Kjellstrom Kun Zhang and Cheng Zhang. 2020. How do fair decisions fare in long-term qualification? Advances in Neural Information Processing Systems 33 (2020) 18457\u201318469."},{"key":"e_1_3_3_2_114_2","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539231"}],"event":{"name":"FAccT '25: The 2025 ACM Conference on Fairness, Accountability, and Transparency","location":"Athens Greece","acronym":"FAccT '25"},"container-title":["Proceedings of the 2025 ACM Conference on Fairness, Accountability, and Transparency"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3715275.3732020","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,24]],"date-time":"2025-06-24T11:14:18Z","timestamp":1750763658000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3715275.3732020"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,23]]},"references-count":113,"alternative-id":["10.1145\/3715275.3732020","10.1145\/3715275"],"URL":"https:\/\/doi.org\/10.1145\/3715275.3732020","relation":{},"subject":[],"published":{"date-parts":[[2025,6,23]]},"assertion":[{"value":"2025-06-23","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}