Publications

2026

1. ICLR

   When Flatness Does (Not) Guarantee Adversarial Robustness

   Nils Philipp Walter, Linara Adilova, Jilles Vreeken, and Michael Kamp

   In The Fourteenth International Conference on Learning Representations, 2026

   Bib PDF

   @inproceedings{walter2026when,
     title = {When Flatness Does (Not) Guarantee Adversarial Robustness},
     author = {Walter, Nils Philipp and Adilova, Linara and Vreeken, Jilles and Kamp, Michael},
     booktitle = {The Fourteenth International Conference on Learning Representations},
     year = {2026},
     organization = {ICLR},
   }

2025

1. NeurIPS

   Neural Rule Lists: Learning Discretizations, Rules, and Order in One Go

   Sascha Xu, Nils Philipp Walter, and Jilles Vreeken

   In The Thirty-ninth Annual Conference on Neural Information Processing Systems, 2025

   Bib PDF

   @inproceedings{walter2025neurules,
     title = {Neural Rule Lists: Learning Discretizations, Rules, and Order in One Go},
     author = {Xu, Sascha and Walter, Nils Philipp and Vreeken, Jilles},
     booktitle = {The Thirty-ninth Annual Conference on Neural Information Processing Systems},
     year = {2025},
     organization = {NeurIPS},
   }

2. arXiv

   Soft Instruction De-escalation Defense

   Nils Philipp Walter, Chawin Sitawarin, Jamie Hayes, David Stutz, and 1 more author

   arXiv preprint arXiv:2510.21057, 2025

   Bib HTML PDF

   @article{walter2025soft,
     title = {Soft Instruction De-escalation Defense},
     author = {Walter, Nils Philipp and Sitawarin, Chawin and Hayes, Jamie and Stutz, David and Shumailov, Ilia},
     journal = {arXiv preprint arXiv:2510.21057},
     year = {2025},
     organization = {arXiv},
   }

3. arXiv

   Hidden in Plain Sight – Class Competition Focuses Attribution Maps

   Nils Philipp Walter, Jilles Vreeken, and Jonas Fischer

   arXiv preprint arXiv:2503.07346, 2025

   Bib HTML PDF

   @article{walter2025var,
     title = {Hidden in Plain Sight – Class Competition Focuses Attribution Maps},
     author = {Walter, Nils Philipp and Vreeken, Jilles and Fischer, Jonas},
     journal = {arXiv preprint arXiv:2503.07346},
     year = {2025},
     organization = {arXiv},
   }

2024

1. arXiv

   The Uncanny Valley: Exploring Adversarial Robustness from a Flatness Perspective

   Nils Philipp Walter, Linara Adilova, Jilles Vreeken, and Michael Kamp

   arXiv preprint arXiv:2405.16918, 2024

   Bib HTML PDF

   @article{walter2024uncanny,
     title = {The Uncanny Valley: Exploring Adversarial Robustness from a Flatness Perspective},
     author = {Walter, Nils Philipp and Adilova, Linara and Vreeken, Jilles and Kamp, Michael},
     journal = {arXiv preprint  arXiv:2405.16918},
     year = {2024},
     organization = {arXiv},
   }

2. ICML

   Learning Exceptional Subgroups by End-to-End Maximizing KL-divergence

   Sascha Xu, Nils Philipp Walter, Janis Kalofolias, and Jilles Vreeken

   In Proceedings of the International Conference on Machine Learning (ICML), 2024

   Bib PDF

   @inproceedings{xu2024learningicml,
     title = {Learning Exceptional Subgroups by End-to-End Maximizing KL-divergence},
     author = {Xu, Sascha and Walter, Nils Philipp and Kalofolias, Janis and Vreeken, Jilles},
     booktitle = {Proceedings of the International Conference on Machine Learning (ICML)},
     year = {2024},
     organization = {PMLR},
   }

3. AAAI

   Finding Interpretable Class-Specific Patterns through Efficient Neural Search

   Nils Philipp Walter, Jonas Fischer, and Jilles Vreeken

   In Proceedings of the 38th Annual AAAI Conference on Artificial Intelligence, 2024

   Bib HTML PDF

   @inproceedings{walter2024finding,
     title = {Finding Interpretable Class-Specific Patterns through Efficient Neural Search},
     author = {Walter, Nils Philipp and Fischer, Jonas and Vreeken, Jilles},
     booktitle = {Proceedings of the 38th Annual AAAI Conference on Artificial Intelligence},
     year = {2024},
     organization = {AAAI},
   }

2022

1. CVPR

   On Fragile Features and Batch Normalization in Adversarial Training

   Nils Philipp Walter, David Stutz, and Bernt Schiele

   arXiv preprint arXiv:2204.12393, 2022

   Bib HTML PDF

   @article{walter2022fragile,
     title = {On Fragile Features and Batch Normalization in Adversarial Training},
     author = {Walter, Nils Philipp and Stutz, David and Schiele, Bernt},
     journal = {arXiv preprint arXiv:2204.12393},
     year = {2022},
   }