Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning

Jagielski, Matthew, Oprea, Alina, Biggio, Battista, Liu, Chang, Nita-Rotaru, Cristina, Li, Bo·2018·2018 IEEE Symposium on Security and Privacy (SP)
DOI 10.1109/sp.2018.00057

Cited by (860)

Items 301–400 of 860

  1. Turning Federated Learning Systems Into Covert Channels
    Gabriele Costa, Fabio Pinelli, Simone Soderi, Gabriele Tolomei · 2022 · IEEE Access
  2. On the Adversarial Robustness of Subspace Learning
    Fuwei Li, Lifeng Lai, Shuguang Robert Cui · 2020 · IEEE Transactions on Signal Processing
  3. Towards Class-Oriented Poisoning Attacks Against Neural Networks
    Bingyin Zhao, Yingjie Lao · 2022 · IEEE Winter Conference on Applications of Computer Vision
  4. Holistic Adversarial Robustness of Deep Learning Models
    Pin‐Yu Chen, Sijia Liu · 2023 · Proceedings of the AAAI Conference on Artificial Intelligence
  5. PAC-learning in the presence of evasion adversaries
    Daniel Cullina, A. Bhagoji, Prateek Mittal · 2018 · Neural Information Processing Systems
  6. Garbage In, Garbage Out: Poisoning Attacks Disguised With Plausible Mobility in Data Aggregation
    Ping Zhao, Hongbo Jiang, Jie Li, Zhu Qiang Xiao, Daibo Liu, Ju Ren, Deke Guo · 2021 · IEEE Transactions on Network Science and Engineering
  7. EV-FL: Efficient Verifiable Federated Learning With Weighted Aggregation for Industrial IoT Networks
    Haiyang Yu, Runtong Xu, Zhang Hui, Zhen Yang, Huan Liu · 2023 · IEEE/ACM Transactions on Networking
  8. Selective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models
    Rui Zhu, Di Tang, Siyuan Tang, Xiaofeng Wang, Haixu Tang · 2023 · IEEE Symposium on Security and Privacy (S&P)
  9. Privacy-Preserving Distributed Learning for Residential Short-Term Load Forecasting
    Yi Dong, Yingjie Wang, Mariana Botelho da Gama, Mustafa Mustafa, Geert Deconinck, Xiaowei Huang · 2024 · IEEE Internet of Things Journal
  10. Evaluating Efficiency and Effectiveness of Federated Learning Approaches in Knowledge Extraction Tasks
    Fiammetta Marulli, Laura Verde, S. Marrone, Roberta Barone, Maria Stella de Biase · 2021 · International Joint Conference on Neural Networks (IJCNN)
  11. Re-Learning Emotional Intelligence Through Artificial Intelligence
    Sandeep Singh, Chetan Banbarilal Sharma, Shamneesh Sharma, Neeraj Kumar Verma · 2021 · International Conference on Reliability, Infocom Technologies and Optimization (Trends and Future Directions) (ICRITO)
  12. {DRMI}: A Dataset Reduction Technology based on Mutual Information for Black-box Attacks
    Yingzhe He, Guozhu Meng, Kai Chen, Xingbo Hu, Jinwen He · 2021 · USENIX Security Symposium
  13. Defending Against Data Poisoning Attacks: From Distributed Learning to Federated Learning
    Yuchen Tian, Weizhe Zhang, Andrew C. Simpson, Yang Liu, Zoe L. Jiang · 2021 · The Computer Journal
  14. An improved real time detection of data poisoning attacks in deep learning vision systems
    Vijay Raghavan, Thomas A. Mazzuchi, Shahram Sarkani · 2022 · Discover Artificial Intelligence
  15. Leveraging Artificial Intelligence in Blockchain-Based E-Health for Safer Decision Making Framework
    Abdulatif Alabdulatif, Muneerah Al Asqah, Tarek Moulahi, Salah Zidi · 2023 · Applied Sciences
  16. Conceptualizing the Secure Machine Learning Operations (SecMLOps) Paradigm
    Xinrui Zhang, Jason Jaskolka · 2022 · IEEE International Conference on Software Quality, Reliability and Security (QRS)
  17. Secure water quality prediction system using machine learning and blockchain technologies
    M. Geetha Jenifel · 2023 · Journal of Environmental Management
  18. FlexibleFL: Mitigating poisoning attacks with contributions in cloud-edge federated learning systems
    Yaru Zhao, Yihao Cao, Jianbiao Zhang, Haoxiang Huang, Yanhui Liu · 2024 · Information Sciences
  19. A survey on machine unlearning: Techniques and new emerged privacy risks
    Hengzhu Liu, Ping Xiong, Tianqing Zhu, Philip S. Yu · 2025 · Journal of Information Security and Applications
  20. A Cause-Based Classification Approach for Malicious DNS Queries Detected Through Blacklists
    Akihiro Satoh, Yutaka Nakamura, Yutaka Fukuda, Kazuto Sasai, Gen Kitagata · 2019 · IEEE Access
  21. Review and Critical Analysis of Privacy-Preserving Infection Tracking and Contact Tracing
    William Johnston Buchanan, Muhammad Ali Imran, Masood Ur Rehman, Lei Zhang, Qammer H. Abbasi, Christos Chrysoulas, David Haynes, Nikolaos Pitropakis, Pavlos Papadopoulos · 2020 · Frontiers in Communications and Networks
  22. Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free
    Tianlong Chen, Zhenyu Zhang, Yihua Zhang, Shiyu Chang, Sijia Liu, Zhangyang Wang · 2022 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
  23. Min-Max Optimization without Gradients: Convergence and Applications to Adversarial ML
    Sijia Liu, Songtao Lu, Xiangyi Chen, Yao Feng, Kaidi Xu, Abdullah Al-Dujaili, Hong, Minyi, Una-May O’Reilly · 2019 · arXiv (Cornell University)
  24. Financial Crime & Fraud Detection Using Graph Computing: Application Considerations & Outlook
    Eren Kurshan, Hongda Shen, Haiyang Yu · 2021 · arXiv (Cornell University)
  25. Understanding the Limits of Unsupervised Domain Adaptation via Data Poisoning
    Akshay Mehra, Bhavya Kailkhura, Pin‐Yu Chen, Jihun Hamm · 2021 · arXiv (Cornell University)
  26. Blockchain-Based Attack Detection on Machine Learning Algorithms for IoT-Based e-Health Applications
    Thippa Reddy Gadekallu, M. K. Manoj, Sivarama Krishnan S, Neeraj Kumar, Saqib Hakak, Sweta Bhattacharya · 2021 · IEEE Internet of Things Magazine
  27. Sensitivity of Machine Learning Approaches to Fake and Untrusted Data in Healthcare Domain
    Fiammetta Marulli, S. Marrone, Laura Verde · 2022 · Journal of Sensor and Actuator Networks
  28. Efficient Defenses Against Output Poisoning Attacks on Local Differential Privacy
    Shaorui Song, Lei Xu, Liehuang Zhu · 2023 · IEEE Transactions on Information Forensics and Security
  29. Ethical Marketing AI?A Structured Literature Review of the Ethical Challenges Posed by Artificial Intelligence in the Domains of Marketing and Consumer Behavior
    Yiran Su, Emma Junhong Wang, Pierre R. Berthon · 2023 · Hawaii International Conference on System Sciences (HICSS)
  30. Poison-Resilient Anomaly Detection: Mitigating Poisoning Attacks in Semi-Supervised Encrypted Traffic Anomaly Detection
    Zhangfa Wu, Huifang Li, Yekui Qian, Yi Hua, Hongping Gan · 2024 · IEEE Transactions on Network Science and Engineering
  31. Exploiting Gaussian Noise Variance for Dynamic Differential Poisoning in Federated Learning
    Md Tamjid Hossain, Shahriar Badsha, Hung Manh La, Shafkat Islam, Ibrahim Khalil · 2025 · IEEE Transactions on Artificial Intelligence
  32. DTA-PUF: Dynamic Timing-aware Physical Unclonable Function for Resource-constrained Devices
    Ioannis Tsiokanos, Jack Miskelly, Chongyan Gu, Maire P. O'Neill, Georgios Karakonstantis · 2021 · ACM Journal on Emerging Technologies in Computing Systems
  33. Trembling triggers: exploring the sensitivity of backdoors in DNN-based face recognition
    Cecilia Pasquini, Rainer Böhme · 2020 · EURASIP Journal on Information Security
  34. zkMLaaS: a Verifiable Scheme for Machine Learning as a Service
    Chenyu Huang, Jianzong Wang, Huangxun Chen, Shijing Si, Zhangcheng Huang, Jing Zhong Xiao · 2022 · Globecom
  35. Challenges and Countermeasures of Federated Learning Data Poisoning Attack Situation Prediction
    Jianping Wu, Jiahe Jin, Chunming Wu · 2024 · Mathematics
  36. Cybersecurity of AI medical devices: risks, legislation, and challenges
    Elisabetta Biasin, Erik Kamenjašević, Kaspar Rosager Ludvigsen · 2024 · Edward Elgar Publishing eBooks
  37. FedRoLA: Robust Federated Learning Against Model Poisoning via Layer-based Aggregation
    Gang Yan, Hao Wang, Xu Yuan, Jian Li · 2024 · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD)
  38. Security threats to agricultural artificial intelligence: Position and perspective
    Yansong Gao, Seyit Ahmet Camtepe, Nazatul Haque Sultan, Hang Thanh Bui, Arash Mahboubi, Hamed Aboutorab, Michael Bewong, Rafiqul Islam, Md Zahidul Islam, Aufeef Chauhan et al. · 2024 · Computers and Electronics in Agriculture
  39. AI-Powered Cyber Threats: A Systematic Review
    Mafaz Mohsin Khalil Alanezi, Ruah Mouad Alyas AL-Azzawi · 2024 · Mesopotamian Journal of CyberSecurity
  40. An Adversarial Training Based Machine Learning Approach to Malware Classification under Adversarial Conditions
    Sean M. Devine, Nathaniel D. Bastian · 2021 · Hawaii International Conference on System Sciences (HICSS)
  41. Dynamic Federated Learning Model for Identifying Adversarial Clients.
    Nuria Rodríguez-Barroso, Eugenio Martínez‐Cámara, M. Victoria Luzón, Gerardo González-Seco, Miguel A. Veganzones, Francisco Herrera · 2020 · arXiv (Cornell University)
  42. Privacy Issues, Attacks, Countermeasures and Open Problems in Federated Learning: A Survey
    Blessing Guembe, Sanjay Misra, Ambrose Agbon Azeta · 2024 · Applied Artificial Intelligence
  43. Robust Nonparametric Regression under Poisoning Attack
    Puning Zhao, Zhiguo Wan · 2024 · Proceedings of the AAAI Conference on Artificial Intelligence
  44. Robust and privacy-preserving federated learning with distributed additive encryption against poisoning attacks
    Fan Zhang, Hui Huang, Zhixiong Chen, Zhenjie Huang · 2024 · Computer Networks
  45. Impacting Robustness in Deep Learning-Based NIDS through Poisoning Attacks
    Shahad Alahmed, Qutaiba Alasad, Jiann Shiun Yuan, Mohammed Alawad · 2024 · Algorithms
  46. M-to-N Backdoor Paradigm: A Multi-Trigger and Multi-Target Attack to Deep Learning Models
    Linshan Hou, Zhongyun Hua, Yuhong Li, Yifeng Zheng, Leo Yu Zhang · 2024 · IEEE Transactions on Circuits and Systems for Video Technology
  47. Adopting AI in Education
    Mehdi Kaddouri, Khalid Mhamdi, Ilham Chniete, Meriem Marhraoui, Mohamed Khaldi, Sabrine Jmad · 2024 · Advances in educational technologies and instructional design book series
  48. The Price of Tailoring the Index to Your Data: Poisoning Attacks on Learned Index Structures
    Evgenios M. Kornaropoulos, Silei Ren, Roberto Tamassia · 2022 · ACM SIGMOD International Conference on Management of Data (SIGMOD)
  49. An Approach for Poisoning Attacks Against RNN-Based Cyber Anomaly Detection
    Jinghui Xu, Yu Wen, Chun Hung Yang, Dan Meng · 2020 · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)
  50. Poisoning Attacks against Data-Driven Control Methods
    Alessio Russo, Alexandre Proutière · 2021 · Proceedings of the ... American Control Conference/Proceedings of the American Control Conference
  51. Efficient and Secure Deep Learning Inference in Trusted Processor Enabled Edge Clouds
    Yuepeng Li, Deze Zeng, Lin Gu, Quan Chen, Song Guo, Albert Y. Zomaya, Minyi Guo · 2022 · IEEE Transactions on Parallel and Distributed Systems
  52. PELTA - Shielding Multiparty-FHE against Malicious Adversaries
    Sylvain Chatel, Christian Mouchet, Ali Utkan Şahin, Apostolos Pyrgelis, Carmela Troncoso, Jean‐Pierre Hubaux · 2023 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  53. Poisoning Attacks on Algorithmic Fairness
    David Solans, Battista Biggio, Carlos Castillo · 2021 · Lecture notes in computer science
  54. Better Safe Than Sorry: Constructing Byzantine-Robust Federated Learning with Synthesized Trust
    Gangchao Geng, Tianyang Cai, Zheng Yang · 2023 · Electronics
  55. Towards an Adversarial Machine Learning Framework in Cyber-Physical Systems
    John Mulo, Tian Pu, Adamu Hussaini, Hengshuo Liang, Wei Yu · 2023 · IEEE/ACIS International Conference on Software Engineering Research, Management and Applications (SERA)
  56. Fraud Detection under Siege: Practical Poisoning Attacks and Defense Strategies
    Tommaso Paladini, Francesco Monti, Mario Polino, Michele Carminati, Stefano Zanero · 2023 · ACM Transactions on Privacy and Security
  57. Hijack Vertical Federated Learning Models as One Party
    Pengyu Qiu, Xuhong Zhang, Shouling Ji, Changjiang Li, Yuwen Pu, Xing Yang, Ting Wang · 2024 · IEEE Transactions on Dependable and Secure Computing
  58. Nullius in Explanans: an ethical risk assessment for explainable AI
    Luca Nannini, Diletta Huyskes, Enrico Panai, Giada Pistilli, Alessio Tartaro · 2024 · Ethics and Information Technology
  59. A Proactive Defense Against Model Poisoning Attacks in Federated Learning
    Haonan Yan, Chengbo Zheng, Qian Chen, Xiaoguang Li, Bin Wang, Hui Li, Xiaodong Lin · 2025 · IEEE Transactions on Dependable and Secure Computing
  60. Decentralized Min-Max Optimization: Formulations, Algorithms and Applications in Network Poisoning Attack
    Ioannis Tsaknakis, Mingyi Hong, Sijia Liu · 2020 · IEEE International Conference on Acoustics Speech and Signal Processing
  61. Backdoor Attack of Graph Neural Networks Based on Subgraph Trigger
    Yu Sheng, Rong Chen, Guanyu Cai, Li Kuang · 2021 · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering
  62. Manipulating Supply Chain Demand Forecasting With Targeted Poisoning Attacks
    Jian Chen, Yuan Gao, Jinyong Shan, Kai Peng, Chen Wang, Hongbo Jiang · 2022 · IEEE Transactions on Industrial Informatics
  63. A review of generative and non-generative adversarial attack on context-rich images
    Hamil Stanly, S. Mercy Shalinie, Riji Paul · 2023 · Engineering Applications of Artificial Intelligence
  64. Demystifying Data Poisoning Attacks in Distributed Learning as a Service
    Wenqi Wei, Ka-Ho Chow, Yanzhao Wu, Ling Liu · 2023 · IEEE Transactions on Services Computing
  65. Property Inference Attacks on Convolutional Neural Networks: Influence and Implications of Target Model’s Complexity
    Mathias Parisot, Balázs Pejó, Dayana Spagnuelo · 2021 · International Conference on Security and Cryptography
  66. LEGO: A hybrid toolkit for efficient 2PC-based privacy-preserving machine learning
    Zhipeng Zhou, Qiang Fu, Qianjun Wei, Qiang Li · 2022 · Computers & Security
  67. Covert Channel Attack to Federated Learning Systems.
    Gabriele Costa, Fabio Pinelli, Simone Soderi, Gabriele Tolomei · 2021 · arXiv (Cornell University)
  68. ComAvg: Robust decentralized federated learning with random committees
    Sicong Zhou, Huawei Huang, Ruixin Li, Jialiang Liu, Zibin Zheng · 2023 · Computer Communications
  69. Poison-Tolerant Collaborative Filtering Against Poisoning Attacks on Recommender Systems
    Thar Baker, Tong Li, Jingyu Jia, Baolei Zhang, Chang Tan, Albert Y. Zomaya · 2024 · IEEE Transactions on Dependable and Secure Computing
  70. RVFL: Rational Verifiable Federated Learning Secure Aggregation Protocol
    Xianyu Mu, Youliang Tian, Zhou Zhou, Shuai Wang, Jinbo Xiong · 2024 · IEEE Internet of Things Journal
  71. Social bot detection using variational generative adversarial networks with hidden Markov models in Twitter network
    Greeshma Lingam, Sajal Kumar Das · 2025 · Knowledge-Based Systems
  72. Bi-Level Poisoning Attack Model and Countermeasure for Appliance Consumption Data of Smart Homes
    Mustain Billah, Adnan Anwar, Ziaur Rahman, Syed Md. Galib · 2021 · Energies
  73. Poisoning attack detection using client historical similarity in non-iid environments
    Xintong You, Zhengqi Liu, Yang Xu, Xuyang Ding · 2022 · International Conference on Cloud Computing, Data Science & Engineering (Confluence)
  74. Multi-Attack Detection: General Defense Strategy Based on Neural Networks for CV-QKD
    Hongwei Du, Duan Huang · 2022 · Photonics
  75. FLMJR: Improving Robustness of Federated Learning via Model Stability
    Qi Guo, Di Wu, Yong Qi, Saiyu Qi, Qian Li · 2022 · Lecture notes in computer science
  76. Detection of Electricity Theft False Data Injection Attacks in Smart Grids
    Abdulrahman Takiddin, Muhammad Ismail, Erchin Serpedin · 2022 · European Signal Processing Conference (EUSIPCO)
  77. Clean-label poisoning attack with perturbation causing dominant features
    Chen Zhang, Zhuo Tang, Kenli Li · 2023 · Information Sciences
  78. ACROSS: Automated zero-touch cross-layer provisioning framework for 5G and beyond vertical services
    Dimitris Giannopoulos, Georgios P. Katsikas, Kostis Trantzas, Dimitrios Klonidis, Christos Tranoris, Spyros Denazis, Lluís Gifre, Ricard Vilalta, Pol Alemany, Raül Muñoz et al. · 2023 · Joint European Conference on Networks and Communications & 6G Summit (EuCNC/6G Summit)
  79. Online data poisoning attack against edge AI paradigm for IoT-enabled smart city
    Yanxu Zhu, Hong Wen, Jinsong Wu, Runhui Zhao · 2023 · Mathematical Biosciences & Engineering
  80. Resilience of Pruned Neural Network Against Poisoning Attack
    Bingyin Zhao, Yingjie Lao · 2018 · International Conference on Malicious and Unwanted Software
  81. A Robust Malware Detection Approach for Android System Against Adversarial Example Attacks
    Wenjia Li, Neha Bala, Aemun Ahmar, Fernanda Tovar, Arpit Battu, Prachi Bambarkar · 2019 · IEEE International Conference on Collaboration and Internet Computing (CIC)
  82. PAC-Learning for Strategic Classification
    Ravi Sundaram, Anil Kumar S. Vullikanti, Haifeng Xu, Yao, Fan · 2020 · arXiv (Cornell University)
  83. HaS-Nets: A Heal and Select Mechanism to Defend DNNs Against Backdoor Attacks for Data Collection Scenarios
    Hassan Mohamed Ali, ‪Surya Nepal‬, Salil S. Kanhere, Sanjay Kumar Jha · 2020 · arXiv (Cornell University)
  84. A Survey of Security Protection Methods for Deep Learning Model
    Haipeng Peng, Shuang Bao, Lixiang Li · 2023 · IEEE Transactions on Artificial Intelligence
  85. Detecting and Mitigating Data Poisoning Attacks in Machine Learning: A Weighted Average Approach
    Yogi Reddy Maramreddy, Kireet Muppavaram · 2024 · Engineering Technology & Applied Science Research
  86. Better Together: Attaining the Triad of Byzantine-robust Federated Learning via Local Update Amplification
    Liyue Shen, Yanjun Zhang, Jingwei Wang, Guangdong Bai · 2022 · Annual Computer Security Applications Conference
  87. Ensurance of artificial intelligence systems cyber security: analysis of vulnerabilities, attacks and countermeasures
    Oleksii Neretin, Vyacheslav Serhiiovych Kharchenko · 2022 · Vìsnik Nacìonalʹnogo unìversitetu Lʹvìvsʹka polìtehnìka Serìâ Ìnformacìjnì sistemi ta merežì
  88. Energy-Latency Attacks to On-Device Neural Networks via Sponge Poisoning
    Zijian Wang, Shuo Huang, Yujin Huang, Helei Cui · 2023
  89. The Path to Defence: A Roadmap to Characterising Data Poisoning Attacks on Victim Models
    Tarek Chaalan, Shaoning Pang, Joarder Kamruzzaman, Iqbal Gondal, Xuyun Zhang · 2023 · ACM Computing Surveys
  90. On the Adversarial Robustness of Robust Estimators
    Lifeng Lai, Erhan Bayraktar · 2020 · IEEE Transactions on Information Theory
  91. A Countermeasure Method Using Poisonous Data Against Poisoning Attacks on IoT Machine Learning
    Tomoki Chiba, Yuichi Sei, Yasuyuki Tahara, Akihiko Ohsuga · 2021 · International Journal of Semantic Computing
  92. Data Sanitization Approach to Mitigate Clean-Label Attacks Against Malware Detection Systems
    Samson Ho, Achyut Reddy, Sridhar Venkatesan, Rauf Izmailov, Ritu Chadha, Alina Oprea · 2022 · IEEE Military Communications Conference (MILCOM)
  93. Attacking Graph-based Classification via Manipulating the Graph Structure
    Binghui Wang, Neil Zhenqiang Gong · 2019 · arXiv (Cornell University)
  94. Defending against Label-Flipping Attacks in Federated Learning Systems with UMAP
    Deepak Upreti, Hyunil Kim, Eunmok Yang, Changho Seo · 2022 · Research Square
  95. Defending local poisoning attacks in multi-party learning via immune system
    Xie, Fei, Gao, Yuan, Wang, Jiongqian, Zhao, Wei · 2022 · Knowledge-Based Systems
  96. FedG2L: a privacy-preserving federated learning scheme base on “G2L” against poisoning attack
    Mengfan Xu, Xinghua Li · 2023 · Connection Science
  97. The Dataset Multiplicity Problem: How Unreliable Data Impacts Predictions
    Anna P. Meyer, Aws Albarghouthi, Loris D’Antoni · 2023 · ACM Conference on Fairness, Accountability, and Transparency (FAccT)
  98. FedSV: Byzantine-Robust Federated Learning via Shapley Value
    Khaoula Otmani, Rachid El-Azouzi, Vincent Labatut · 2024 · International Conference on Communications
  99. Community-Oriented Duplex Privacy Amplification and Active Poisoning Resistance for Heterogeneous Federated Learning
    Zan Zhou, Jun Zhao, Shujie Yang, Hongjing Li, Tengchao Ma, Changqiao Xu · 2025 · IEEE Transactions on Dependable and Secure Computing
  100. Artificial Intelligence for Cybersecurity: Offensive Tactics, Mitigation Techniques and Future Directions
    Erwin Adi, Zubair Ahmed Baig, Sherali Zeadally · 2022 · Applied Cybersecurity & Internet Governance