The DOI matches its Crossref record; 13 of the 13 references it cites were found in a registry or an index.
Evasion Attacks against Machine Learning at Test Time
Open accessOverview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“They demonstrated that DBA is substantially more persistent and stealthy on diverse datasets such as finance and image data.”
From Vulnerabilities in federated learning (2021) · cites this paper as [44]
In the citing paper
“However, only a few works [44] investigate the poisoning attacks in a distributed environment where multiple malicious clients with the same attack strive to include poisoned training samples into the training procedures.”
From Vulnerabilities in federated learning (2021) · cites this paper as [44]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Huang, L., Joseph, A. D., Nelson, B., Rubinstein, B. I. P., & Tygar, J. D. (2011) · Proceedings of the 4th ACM workshop on Security and artificial intelligence · doi:10.1145/2046684.2046692 · Cited by 1,194
Self-citationDalvi, N. N., Domingos, P. M., Mausam, Sanghai, S. K., & Verma, D. (2004) · Knowledge Discovery and Data Mining · doi:10.1145/1014052.1014066 · Cited by 1,085
Can machine learning be secure?
Barreno, M., Nelson, B. A., Sears, R., Joseph, A. D., & Tygar, J. D. (2006) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/1128817.1128824 · Cited by 852
Self-citationLowd, D., & Meek, C. (2005) · Proceedings of the eleventh ACM SIGKDD international conference on Knowledge discovery in data mining · doi:10.1145/1081870.1081950 · Cited by 755
Security Evaluation of Pattern Classifiers under Attack
Biggio, B., Fumera, G., & Roli, F. (2013) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2013.57 · Cited by 412
Self-citationNightmare at test time: robust learning by feature deletion
Globerson, A., & Roweis, S. (2006) · Proceedings of the 23rd international conference on Machine learning - ICML '06 · doi:10.1145/1143844.1143889 · Cited by 309
Malicious PDF detection using metadata and structural features
Smutz, C., & Stavrou, A. (2012) · Proceedings of the 28th Annual Computer Security Applications Conference · doi:10.1145/2420950.2420987 · Cited by 271
Stackelberg games for adversarial prediction problems
Brückner, M., & Scheffer, T. (2011) · Proceedings of the 17th ACM SIGKDD international conference on Knowledge discovery and data mining · doi:10.1145/2020408.2020495 · Cited by 229
Multiple classifier systems for robust classifier design in adversarial environments
Biggio, B., Fumera, G., & Roli, F. (2010) · International Journal of Machine Learning and Cybernetics · doi:10.1007/s13042-010-0007-7 · Cited by 187
Self-citationLearning to classify with missing and corrupted features
Dekel, O., Shamir, O., & Xiao, L. (2009) · Machine Learning · doi:10.1007/s10994-009-5124-8 · Cited by 126
Research works printed but not linked: 11
- Biggio, B., Nelson, B., Laskov, P.: Poisoning attacks against support vector machines. In: Langford, J., Pineau, J. (eds.) 29th Int’l Conf. on Mach. Learn. (2012)
- Brückner, M., Kanzow, C., Scheffer, T.: Static prediction games for adversarial learning problems. J. Mach. Learn. Res. 13, 2617–2654 (2012)
- Fogla, P., Sharif, M., Perdisci, R., Kolesnikov, O., Lee, W.: Polymorphic blending attacks. In: Proc. 15th Conf. on USENIX Sec. Symp. USENIX Association, CA (2006)
- Kloft, M., Laskov, P.: Online anomaly detection under adversarial impact. In: Proc. of the 13th Int’l Conf. on Art. Int. and Stats (AISTATS), pp. 405–412 (2010)
- Kolcz, A., Teo, C.H.: Feature weighting for improved classifier robustness. In: Sixth Conf. on Email and Anti-Spam (CEAS), Mountain View, CA, USA (2009)
- Laskov, P., Kloft, M.: A framework for quantitative security analysis of machine learning. In: AISec 2009: Proc. of the 2nd ACM Works. on Sec. and Art. Int., pp. 1–4. ACM, New York (2009)
- LeCun, Y., Jackel, L., Bottou, L., Brunot, A., Cortes, C., Denker, J., Drucker, H., Guyon, I., Müller, U., Säckinger, E., Simard, P., Vapnik, V.: Comparison of learning algorithms for handwritten digit recognition. In: Int’l Conf. on Art. Neu. Net., pp. 53–60 (1995)
- Nelson, B., Barreno, M., Chi, F.J., Joseph, A.D., Rubinstein, B.I.P., Saini, U., Sutton, C., Tygar, J.D., Xia, K.: Exploiting machine learning to subvert your spam filter. In: LEET 2008: Proc. of the 1st USENIX Work. on L.-S. Exp. and Emerg. Threats, pp. 1–9. USENIX Association, Berkeley (2008)
- Nelson, B., Rubinstein, B.I., Huang, L., Joseph, A.D., Lee, S.J., Rao, S., Tygar, J.D.: Query strategies for evading convex-inducing classifiers. J. Mach. Learn. Res. 13, 1293–1332 (2012)
- Platt, J.: Probabilistic outputs for support vector machines and comparison to regularized likelihood methods. In: Smola, A., Bartlett, P., Schölkopf, B., Schuurmans, D. (eds.) Adv. in L. M. Class, pp. 61–74 (2000)
- Šrndić, N., Laskov, P.: Detection of malicious pdf files based on hierarchical document structure. In: Proc. 20th Annual Net. & Dist. Sys. Sec. Symp. (2013)
Cited by
Sorted by citations
Items 401–500 of 904
Randomized Operating Point Selection in Adversarial Classification
Lisý, V., Kessl, R., & Pevný, T. (2014) · Lecture notes in computer science · doi:10.1007/978-3-662-44851-9_16 · Cited by 12
A dynamic‐adversarial mining approach to the security of machine learning
Sethi, T. S., Kantardzic, M. M., Lyu, L., & Chen, J. (2018) · Wiley Interdisciplinary Reviews Data Mining and Knowledge Discovery · doi:10.1002/widm.1245 · Cited by 12
Machine Behaviour (Originally Published 2019 by Springer Nature)
Rahwan, I., Cebrián, M., Obradovich, N., Bongard, J., Bonnefon, J., Breazeal, C., Crandall, J. W., Christakis, N. A., Couzin, I. D., Jackson, M. O., et al. (2022) · Wiley eBooks · doi:10.1002/9781119815075.ch10 · Cited by 12
Multi-Agent Reinforcement Learning-Based Passenger Spoofing Attack on Mobility-as-a-Service
Chu, K.-F., & Guo, W. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3379283 · Cited by 11
On the Minimal Adversarial Perturbation for Deep Neural Networks With Provable Estimation Error
Brau, F., Rossolini, G., Biondi, A., & Buttazzo, G. (2022) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2022.3195616 · Cited by 12
Advances in Adversarial Attacks and Defenses in Intrusion Detection System: A Survey
Mbow, M., Sakurai, K., & Koide, H. (2022) · Communications in computer and information science · doi:10.1007/978-981-19-7769-5_15 · Cited by 11
A Survey of the Implementations of Model Inversion Attacks
Song, J., & Namiot, D. (2023) · Communications in computer and information science · doi:10.1007/978-3-031-30648-8_1 · Cited by 12
Madvex: Instrumentation-Based Adversarial Attacks on Machine Learning Malware Detection
Loose, N., Mächtle, F., Pott, C., Bezsmertnyi, V., & Eisenbarth, T. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-35504-2_4 · Cited by 11
Black-Box Targeted Adversarial Attack on Segment Anything (SAM)
Zheng, S., Zhang, C., & Hao, X. (2024) · IEEE Transactions on Multimedia · doi:10.1109/tmm.2024.3521769 · Cited by 17
Feature partitioning for robust tree ensembles and their certification in adversarial scenarios
Calzavara, S., Lucchese, C., Marcuzzi, F., & Orlando, S. (2021) · EURASIP Journal on Information Security · doi:10.1186/s13635-021-00127-0 · Cited by 11
Noise Sensitivity-Based Energy Efficient and Robust Adversary Detection in Neural Networks
Sterneck, R., Moitra, A., & Panda, P. (2021) · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems · doi:10.1109/tcad.2021.3091436 · Cited by 11
Defending Adversarial Attacks via Semantic Feature Manipulation
Wang, S., Nepal, ., Rudolph, C., Grobler, M. M., Chen, S., Chen, T., & An, Z. (2021) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2021.3090365 · Cited by 11
[Retracted] Medicolite‐Machine Learning‐Based Patient Care Model
Khan, R., Srivastava, A. K., Gupta, M., Kumari, P., & Kumar, S. (2022) · Computational Intelligence and Neuroscience · doi:10.1155/2022/8109147 · Cited by 11
RetractedDefense against adversarial examples based on wavelet domain analysis
Sarvar, A., & Amirmazlaghani, M. (2022) · Applied Intelligence · doi:10.1007/s10489-022-03159-2 · Cited by 11
Bansal, A., Kim, H., Yu, S., Li, B., Hovakimyan, N., Caccamo, M., & Sha, L. (2022) · Proceedings/Proceedings - International Symposium on Software Reliability Engineering · doi:10.1109/issre55969.2022.00017 · Cited by 11
Who Activated My Voice Assistant? A Stealthy Attack on Android Phones Without Users’ Awareness
Zhang, R., Chen, X., Wen, S., & Zheng, X. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-30619-9_27 · Cited by 11
On the robustness of randomized classifiers to adversarial examples
Pinot, R., Meunier, L., Yger, F., Gouy‐Pailler, C., Chevaleyre, Y., & Atif, J. (2022) · Machine Learning · doi:10.1007/s10994-022-06216-6 · Cited by 11
Federated Knowledge Recycling: Privacy-preserving synthetic data sharing
Lomurno, E., & Matteucci, M. (2025) · Pattern Recognition Letters · doi:10.1016/j.patrec.2025.02.030 · Cited by 10
Dinler, Ö. B. (2025) · Drones · doi:10.3390/drones9110806 · Cited by 10
Easwaramoorthy, S. V., Bouakkaz, M., & Ramasubbareddy, S. (2026) · Journal of King Saud University - Computer and Information Sciences · doi:10.1007/s44443-026-00916-y · Cited by 10
‘Security Theater’: On the Vulnerability of Classifiers to Exploratory Attacks
Sethi, T. S., Kantardzic, M. M., & Ryu, J. W. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-57463-9_4 · Cited by 10
Kim, K., & Woo, S. S. (2018) · IFIP advances in information and communication technology · doi:10.1007/978-3-319-99828-2_25 · Cited by 10
Adversarial Machine Learning for Network Security
Shi, Y., Zeng, H., & Nguyen, T. T. (2019) · IEEE Conference on Technologies for Homeland Security (HST) · doi:10.1109/hst47167.2019.9032936 · Cited by 10
The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers?
Ciná, A. E., Vascon, S., Demontis, A., Biggio, B., Roli, F., & Pelillo, M. (2021) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn52387.2021.9533557 · Cited by 10
Self-citationAdvTraffic: Obfuscating Encrypted Traffic with Adversarial Examples
Liu, H., Dani, J., Yu, H., Sun, W., & Wang, B. (2022) · International Workshop on Quality of Service · doi:10.1109/iwqos54832.2022.9812875 · Cited by 10
Out-of-Distribution Detection with Reconstruction Error and Typicality-based Penalty
Osada, G., Takahashi, T., Ahsan, B., & Nishide, T. (2023) · IEEE Winter Conference on Applications of Computer Vision · doi:10.1109/wacv56688.2023.00551 · Cited by 10
Lella, E., Macchiarulo, N., Pazienza, A., Lofù, D., Abbatecola, A., & Noviello, P. (2023) · International Conference on Smart and Sustainable Technologies (SpliTech) · doi:10.23919/splitech58164.2023.10193009 · Cited by 10
The Path to Defence: A Roadmap to Characterising Data Poisoning Attacks on Victim Models
Chaalan, T., Pang, S., Kamruzzaman, J., Gondal, I., & Zhang, X. (2023) · ACM Computing Surveys · doi:10.1145/3627536 · Cited by 13
Passenger Spoofing Attack for Artificial Intelligence-based Mobility-as-a-Service
Chu, K.-F., & Guo, W. (2023) · IEEE International Conference on Intelligent Transportation Systems (ITSC) · doi:10.1109/itsc57777.2023.10422567 · Cited by 10
A Random Ensemble of Encrypted Vision Transformers for Adversarially Robust Defense
Iijima, R., Shiota, S., & Kiya, H. (2024) · IEEE Access · doi:10.1109/access.2024.3400958 · Cited by 11
Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Models
Croce, F., Singh, N. D., & Hein, M. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-72986-7_11 · Cited by 10
Towards Quality Assurance of Software Product Lines with Adversarial Configurations
Temple, P., Acher, M., Perrouin, G., Biggio, B., Jezéquél, J., & Roli, F. (2019) · International Software Product Line Conference (SPLC) · doi:10.1145/3336294.3336309 · Cited by 10
Self-citationSelective Adversarial Learning for Mobile Malware
Khoda, M. E., Imam, T., Kamruzzaman, J., Gondal, I., & Rahman, A. (2019) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom/bigdatase.2019.00044 · Cited by 10
Using Randomness to Improve Robustness of Tree-Based Models Against Evasion Attacks
Yang, F., Chen, Z., & Gangopadhyay, A. (2020) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2020.2987299 · Cited by 10
Contrast Duality of Adversarial Learningin Network Intrusion: A Review
Saini, S., Chennamaneni, A., & Sawyerr, B. (2025) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2025.3641908 · Cited by 9
EG-Booster: Explanation-Guided Booster of ML Evasion Attacks
Amich, A., & Eshete, B. (2022) · ACM Conference on Data and Application Security and Privacy (CODASPY) · doi:10.1145/3508398.3511510 · Cited by 9
Ouyang, T., Nguyen-Son, H.-Q., Nguyen, H. H., Echizen, I., & Seo, Y. (2023) · Asia-Pacific Software Engineering Conference (APSEC) · doi:10.1109/apsec60848.2023.00056 · Cited by 11
SecMD: Make Machine Learning More Secure Against Adversarial Malware Attacks
Chen, L., & Ye, Y. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-63004-5_7 · Cited by 9
Server-Based Manipulation Attacks Against Machine Learning Models
Liao, C., Zhong, H., Zhu, S., & Squicciarini, A. (2018) · ACM Conference on Data and Application Security and Privacy (CODASPY) · doi:10.1145/3176258.3176321 · Cited by 10
Detecting Potential Local Adversarial Examples for Human-Interpretable Defense
Renard, X., Laugel, T., Lesot, M., Marsala, C., & Detyniecki, M. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-13453-2_4 · Cited by 9
Adversarial Authorship Attribution in Open-Source Projects
Matyukhina, A., Stakhanova, N., Preda, M. D., & Perley, C. (2019) · ACM Conference on Data and Application Security and Privacy (CODASPY) · doi:10.1145/3292006.3300032 · Cited by 9
Wang, L., Yang, K., Wang, W., Wang, R., & Ye, A. (2020) · ACM International Conference on Multimedia (ACM MM) · doi:10.1145/3394171.3413703 · Cited by 11
Resilient Machine Learning (rML) Ensemble Against Adversarial Machine Learning Attacks
Yao, L., Tunc, C., Satam, P., & Hariri, S. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-61725-7_32 · Cited by 9
Kim, J., Kim, S., Kim, S. T., & Ro, Y. M. (2021) · IEEE Transactions on Image Processing · doi:10.1109/tip.2021.3130526 · Cited by 10
Robustness of Deep Learning Models for Vision Tasks
Lee, Y., & Kim, J. (2023) · Applied Sciences · doi:10.3390/app13074422 · Cited by 11
On the Detection of Adaptive Adversarial Attacks in Speaker Verification Systems
Chen, Z. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3267619 · Cited by 9
Fooling Examples: Another Intriguing Property of Neural Networks
Zhang, M., Chen, Y., & Qian, C. (2023) · Sensors · doi:10.3390/s23146378 · Cited by 9
On Improving the Effectiveness of Adversarial Training
Qin, Y., Hunt, R., & Yue, C. (2019) · ACM International Workshop on Security and Privacy Analytics (IWSPA) · doi:10.1145/3309182.3309190 · Cited by 9
Empirical assessment of generating adversarial configurations for software product lines
Temple, P., Perrouin, G., Acher, M., Biggio, B., Jezéquél, J., & Roli, F. (2021) · Empirical Software Engineering · doi:10.1007/s10664-020-09915-7 · Cited by 9
Self-citationJacobian Regularization for Mitigating Universal Adversarial Perturbations
Co, K. T., Martínez‐Rego, D., & Lupu, E. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-86380-7_17 · Cited by 9
Harnessing GPT-2 for Feature Extraction in Malware Detection: A Novel Approach to Cybersecurity
Basharat, M., & Omar, M. (2024) · Revista Academiei Forţelor Terestre · doi:10.2478/raft-2024-0008 · Cited by 8
Dense Hopfield networks in the teacher-student setting
Thériault, R., & Tantari, D. (2024) · SciPost Physics · doi:10.21468/scipostphys.17.2.040 · Cited by 11
Tafreshian, B., & Zhang, S. (2024) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom63139.2024.00337 · Cited by 8
Machine Learning for Cybersecurity: A Comprehensive Literature Review
Gökstorp, S., Katsikeas, S., & Johnson, P. (2026) · ACM Computing Surveys · doi:10.1145/3796543 · Cited by 8
Alrawashdeh, K., & Goldsmith, S. (2020) · IEEE Applied Imagery Pattern Recognition Workshop · doi:10.1109/aipr50011.2020.9425293 · Cited by 8
Realistic Fingerprint Presentation Attacks Based on an Adversarial Approach
Casula, R., Orrù, G., Marrone, S., Gagliardini, U., Marcialis, G. L., & Sansone, C. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3327663 · Cited by 8
Detecting Conventional and Adversarial Attacks Using Deep Learning Techniques: A Systematic Review
Ali, T., Eleyan, A., & Bejaoui, T. (2023) · International Symposium on Networks, Computers and Communications (ISNCC) · doi:10.1109/isncc58260.2023.10323872 · Cited by 10
TXAI-ADV: Trustworthy XAI for Defending AI Models against Adversarial Attacks in Realistic CIoT
Ojo, S., Krichen, M., Alamro, M. A., & Mihoub, A. (2024) · Electronics · doi:10.3390/electronics13091769 · Cited by 8
Effectiveness of Moving Target Defenses for Adversarial Attacks in ML-Based Malware Detection
Rashid, A., & Such, J. M. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3542237 · Cited by 9
An Evasion Resilient Approach to the Detection of Malicious PDF Files
Maiorca, D., Ariu, D., Corona, I., & Giacinto, G. (2015) · Communications in computer and information science · doi:10.1007/978-3-319-27668-7_5 · Cited by 8
Self-citationSemantically Adversarial Learnable Filters
Shamsabadi, A. S., Oh, C., & Cavallaro, A. (2021) · IEEE Transactions on Image Processing · doi:10.1109/tip.2021.3112290 · Cited by 8
CuRTAIL: ChaRacterizing and Thwarting AdversarIal Deep Learning
Javaheripi, M., Samragh, M., Rouhani, B. D., Javidi, T., & Koushanfar, F. (2020) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2020.3024191 · Cited by 9
Denoised Internal Models: A Brain-inspired Autoencoder Against Adversarial Attacks
Liu, K.-Y., Li, X., Lai, Y.-R., Su, H., Wang, J., Guo, C., Xie, H. B., Guan, J., & Zhou, Y. (2022) · Machine Intelligence Research · doi:10.1007/s11633-022-1375-7 · Cited by 9
Yang, Y., Shih, F. Y., & Roshan, U. (2022) · International Journal of Pattern Recognition and Artificial Intelligence · doi:10.1142/s0218001422540052 · Cited by 8
Transferability of Adversarial Examples in Machine Learning-based Malware Detection
Hu, Y., Wang, N., Chen, Y., Lou, W., & Hou, Y. T. (2022) · IEEE Conference on Communications and Network Security · doi:10.1109/cns56114.2022.9947226 · Cited by 8
Enablers of Adversarial Attacks in Machine Learning
Izmailov, R., Sugrim, S., Chadha, R., McDaniel, P. D., & Swami, A. (2018) · IEEE Military Communications Conference (MILCOM) · doi:10.1109/milcom.2018.8599715 · Cited by 9
Quantifying DNN Model Robustness to the Real-World Threats
Zhong, Z., Hu, Z., & Chen, X. (2020) · International Conference on Dependable Systems & Networks/Proceedings · doi:10.1109/dsn48063.2020.00033 · Cited by 8
A Watermarking-Based Framework for Protecting Deep Image Classifiers Against Adversarial Attacks
Sun, C., & Yang, E. (2021) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw53098.2021.00371 · Cited by 8
On the feasibility of adversarial machine learning in malware and network intrusion detection
Venturi, A., & Zanasi, C. (2021) · IEEE International Symposium on Network Computing and Applications (NCA) · doi:10.1109/nca53618.2021.9685709 · Cited by 8
Photovoltaic Generation Forecast: Model Training and Adversarial Attack Aspects
Santana, E. J., Silva, R. P., Zarpel�ão, B. B., & Barbon, S. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-61380-8_43 · Cited by 8
Adversarial Machine Learning: A 20-Year Survey of Attacks, Defenses, and Standards
Tekeste, B., Al-Hussaeni, K., Fung, B. C. M., Alawadhi, I. M., & Fachkha, C. (2026) · IEEE Access · doi:10.1109/access.2026.3690620 · Cited by 7
$$\ell _\infty $$-Robustness and Beyond: Unleashing Efficient Adversarial Training
Dolatabadi, H. M., Erfani, S., & Leckie, C. A. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-20083-0_28 · Cited by 7
Crystal Ball: From Innovative Attacks to Attack Effectiveness Classifier
Berger, H., Hajaj, C., Mariconti, E., & Dvir, A. Z. (2021) · IEEE Access · doi:10.1109/access.2021.3138628 · Cited by 7
Shafee, A. A., Mahmoud, M. M. E. A., Bruce, J. W., Srivastava, G., Balamsh, A., & Aljohani, A. J. (2023) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2023.3299522 · Cited by 7
MalAder: Decision-Based Black-Box Attack Against API Sequence Based Malware Detectors
Chen, X., Cui, L., Wen, H., Li, Z., Zhu, H., Hao, Z., & Sun, L. (2023) · International Conference on Dependable Systems & Networks/Proceedings · doi:10.1109/dsn58367.2023.00027 · Cited by 8
Adversarial Coreset Selection for Efficient Robust Training
Dolatabadi, H. M., Erfani, S., & Leckie, C. A. (2023) · International Journal of Computer Vision · doi:10.1007/s11263-023-01860-4 · Cited by 7
Securing Network Traffic Classification Models against Adversarial Examples Using Derived Variables
Adeke, J. M., Liu, G., Zhao, J., Wu, N., & Bashir, H. M. (2023) · Future Internet · doi:10.3390/fi15120405 · Cited by 7
An Ensemble Learning to Detect Decision-Based Adversarial Attacks in Industrial Control Systems
Babadi, N., Karimipour, H., & Islam, A. (2023) · IEEE Symposium Series on Computational Intelligence (SSCI) · doi:10.1109/ssci52147.2023.10371863 · Cited by 7
Gibert, D., Zizzo, G., & Le, Q. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-54129-2_40 · Cited by 7
A Systematic Evaluation of Adversarial Attacks against Speech Emotion Recognition Models
Facchinetti, N., Simonetta, F., & Ntalampiras, S. (2024) · Intelligent Computing · doi:10.34133/icomputing.0088 · Cited by 8
How well do models of visual cortex generalize to out of distribution samples?
Ren, Y., & Bashivan, P. (2024) · PLoS Computational Biology · doi:10.1371/journal.pcbi.1011145 · Cited by 9
Model-Manipulation Attacks Against Black-Box Explanations
Hegde, A., Noppel, M., & Wressnegger, C. (2024) · Annual Computer Security Applications Conference · doi:10.1109/acsac63791.2024.00081 · Cited by 7
Advocating for Multiple Defense Strategies Against Adversarial Examples
Araujo, A., Meunier, L., Pinot, R., & Négrevergne, B. (2020) · Communications in computer and information science · doi:10.1007/978-3-030-65965-3_11 · Cited by 7
The White-Box Adversarial Data Stream Model
Ajtai, M., Braverman, V., Jayram, T. S., Silwal, S., Sun, A., Woodruff, D. P., & Zhou, S. (2022) · ACM SIGACT-SIGMOD-SIGART Symposium on Principles of Database Systems (PODS) · doi:10.1145/3517804.3526228 · Cited by 7
The Forensicability of Operation Detection in Image Operation Chain
Chen, Z., Zhu, J., & Zhang, J. (2022) · IEEE Access · doi:10.1109/access.2022.3185994 · Cited by 7
Guo, H., Gu, H., Yang, Z., Wang, X., Lee, E. K., Chandramoorthy, N., Eilam, T., Chen, D., & Nahrstedt, K. (2022) · International Middleware Conference · doi:10.1145/3528535.3565244 · Cited by 10
Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally
Al-Maliki, S., Qayyum, A., Ali, H. M., Abdallah, M. M., Qadir, J., Hoang, D. T., Niyato, D. T., & Al‐Fuqaha, A. (2024) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2024.3383407 · Cited by 10
Adversarial vulnerability bounds for Gaussian process classification
Smith, M. T., Grosse, K., Michael Backes, A., & Álvarez, M. A. (2022) · Machine Learning · doi:10.1007/s10994-022-06224-6 · Cited by 11
Generalized Adversarial Training in Riemannian Space
Zhang, S., Huang, K., Zhang, R., & Hussain, A. (2019) · Proceedings · doi:10.1109/icdm.2019.00093 · Cited by 7
On benign features in malware detection
Cao, M., Badihi, S., Ahmed, K., Xiong, P., & Rubin, J. (2020) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1145/3324884.3418926 · Cited by 7
Alrawashdeh, K., & Goldsmith, S. (2020) · IEEE International Symposium on Technology and Society (ISTAS) · doi:10.1109/istas50296.2020.9462227 · Cited by 7
Wang, F., Ma, Z., Zhang, X., Li, Q., & Wang, C. (2023) · Mathematics · doi:10.3390/math11041016 · Cited by 7
Robustness in spiking networks: a geometric perspectivePreprint
Calaim, N., Dehmelt, F. A., Gonçalves, P. J., & Machens, C. K. (2020) · bioRxiv (Cold Spring Harbor Laboratory) · doi:10.1101/2020.06.15.148338 · Cited by 7
On the Economics of Adversarial Machine Learning
Merkle, F., Samsinger, M., Schöttle, P., & Pevný, T. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3379829 · Cited by 7
Probabilistic Byzantine Attack on Federated Learning
Wang, T.-H., Chen, P., & Huang, Y.-C. (2025) · IEEE Transactions on Signal Processing · doi:10.1109/tsp.2025.3564842 · Cited by 6
Facial Soft-biometrics Obfuscation through Adversarial Attacks
Carletti, V., Foggia, P., Greco, A., Saggese, A., & Vento, M. (2024) · ACM Transactions on Multimedia Computing Communications and Applications · doi:10.1145/3656474 · Cited by 7
BounceAttack: A Query-Efficient Decision-based Adversarial Attack by Bouncing into the Wild
Wan, J., Fu, J., Wang, L., & Yang, Z. (2024) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp54263.2024.00068 · Cited by 7
1-Lipschitz Layers Compared: Memory, Speed, and Certifiable Robustness
Prach, B., Brau, F., Buttazzo, G., & Lampert, C. H. (2024) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52733.2024.02320 · Cited by 9
Gao, G., Lv, Z., Zhang, Y., & Qin, A. K. (2025) · Neural Networks · doi:10.1016/j.neunet.2025.107271 · Cited by 6
Learning key steps to attack deep reinforcement learning agents
Yu, C.-M., Chen, M.-H., & Lin, H.-T. (2023) · Machine Learning · doi:10.1007/s10994-023-06318-9 · Cited by 6
Metadata
- Authors
- Biggio, B., Corona, I., Maiorca, D., Nelson, B., Šrndić, N., Laskov, P., Giacinto, G., & Roli, F.
- Affiliations
- University of Cagliari (IT)
- University of Potsdam (DE)
- University of Tübingen (DE)
- Venue
- Lecture Notes in Computer Science
- Publisher
- Springer Berlin Heidelberg
- Published
- 2013
- Pages
- 387-402
- ISSN
- 0302-9743 (ISSN-L)
- 1611-3349
- OpenAlex
- W3103836116
- Cited by
- 890
- References
- 13
- Citations by year
- 2026: 35 · 2025: 103 · 2024: 131 · 2023: 123 · 2022: 126 · 2021: 95 · 2020: 98 · 2019: 98 · 2018: 37 · 2017: 26 · 2016: 7 · 2015: 5 · 2014: 4 · 2013: 1
- FWCI
- 3.66
- Type
- conference paper
- Language
- en
- Open access
- green
- arxiv.org
- Licence
- www.springer.com/tdm (tdm)
- Locations
- Lecture notes in computer science (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- UNICA IRIS Institutional Research Information System (University of Cagliari) (submittedVersion)
- CINECA IRIS Institutial Research Information System (University of Genoa) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Software › Advanced Malware Detection Techniques
- Keywords
- evasion attacks, adversarial learning, gradient-based attacks, malware detection, PDF documents, countermeasures
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
