1. Oneto, L., and Chicco, D., Nine quick tips for trustworthy machine learning in the biomedical sciences, PLOS Computational Biology 2025.
https://doi.org/10.1371/journal.pcbi.1013624
2. Carlevaro, A., Oneto, L., Anguita, D., and Roli, F., Provably Efficient and Robust Conformal Prediction under a Realistic Threat Model, Symposium on Conformal and Probabilistic Prediction with Applications (COPA), PMLR 266:113-132, 2025. https://proceedings.mlr.press/v266/carlevaro25a.html
3. Perasso, B., Lozza, L., Ponte, A., Demetrio, L., Oneto L., and Roli, F., Empirical Quantification of Spurious Correlations in Malware Detection, ITAL-IA 2025 https://ceur-ws.org/Vol-4121/Ital-IA_2025_paper_13.pdf
4. Cinà, A. E., Pintor, M., Demetrio, L., Demontis, A., Biggio, B., and Roli, F., Evaluating the Evaluators: Trust in Adversarial Robustness Tests. ITAL-IA 2025.
https://ceur-ws.org/Vol-4121/Ital-IA_2025_paper_38.pdf
5. Oneto, L., Navarin, N., Micheli, A., Pasa, L., Gallicchio, C., Bacciu, D., and Anguita, D., Informed Machine Learning for Complex Data, Neurocomputing, 2026. https://doi.org/10.1016/j.neucom.2025.132505
6. Lazzaro, D., Mura, R., Cinà, A. E., Laurita, G., Vercelli, G. V., Oneto, L., Biggio, B., and Roli, F., Poison Once, Fool Many: Practical Poisoning Attacks against Text-to-Image Retrieval Systems, Knowledge-Based Systems, 2026. https://doi.org/10.1016/j.knosys.2025.115090
7. Rando, M., Demetrio, L., Rosasco, L., and Roli, F., A New Formulation for Zeroth-Order Optimization of Adversarial EXEmples in Malware Detection, IEEE Transactions on Information Forensics and Security, vol. 21, pp. 506-515, 2026.
https://ieeexplore.ieee.org/document/11316492
8. Wu, J., Cinà, A. E., Villani, F., Xia, Z., Demetrio, L., Oneto, L., Anguita, D., Roli, F., and Feng, X., HORNET: Fast and minimal adversarial perturbations. Information Sciences, 2026. https://doi.org/10.1016/j.ins.2025.123028
9. Repetto, S., Maljkovic, I., Lotto, M, Cinà, A. E., Vascon, S., and Roli, F., Evaluating the robustness of explainable AI in medical image recognition under natural and adversarial data corruption. Machine Learning 115, 4, 2026. https://doi.org/10.1007/s10994-025-06919-6
10. Villani, F., Lazzaro, D., Cinà, A. E., Dell’Amico, M., Biggio, B., and Roli, F., Sonic: Fast and Transferable Data Poisoning on Clustering Algorithms, Information Sciences, 2026 https://doi.org/10.1016/j.ins.2026.123140