The DOI matches its Crossref record; 50 of the 52 references it cites were found in a registry or an index.
Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning
Open accessAbstract
As machine learning becomes widely used for automated decisions, attackers have strong incentives to manipulate the results and models generated by machine learning algorithms. In this paper, we perform the first systematic study of poisoning attacks and their countermeasures for linear regression models. In poisoning attacks, attackers deliberately influence the training data to manipulate the results of a predictive model. We propose a theoretically-grounded optimization framework specifically designed for linear regression and demonstrate its effectiveness on a range of datasets and models. We also introduce a fast statistical attack that requires limited knowledge of the training process. Finally, we design a new principled defense method that is highly resilient against all poisoning attacks. We provide formal guarantees about its convergence and an upper bound on the effect of poisoning attacks when the defense is deployed. We evaluate extensively our attacks and defenses on three realistic datasets from health care, loan assessment, and real estate domains.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Persistent, self-modifying memory further introduces risks of silent state corruption, where malicious logic can propagate across future reasoning steps without clear provenance (Jagielski et al., 2018;Li et al., 2022;Steinberger, Peter, 2025b).”
From Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents (2025) · cites this paper as Jagielski et al., 2018
Experimental — accuracy not yet measuredIn the citing paper
“Another detection-based defense mechanism uses euclidean distance to expose any deviation in the model update parameters for each client [90].”
From Vulnerabilities in federated learning (2021) · cites this paper as [90]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The Elements of Statistical Learning
Hastie, T., Tibshirani, R., & Friedman, J. (2009) · Springer Series in Statistics · doi:10.1007/978-0-387-84858-7 · Cited by 25,970
Fischler, M. A., & Bolles, R. C. (1981) · Communications of the ACM · doi:10.1145/358669.358692 · Cited by 25,893
The Elements of Statistical Learning: Data Mining, Inference, and Prediction
Lu, Z. Q. J. (2010) · Journal of the Royal Statistical Society Series A (Statistics in Society) · doi:10.1111/j.1467-985x.2010.00646_6.x · Cited by 12,916
Explaining and Harnessing Adversarial Examples
Goodfellow, I. J., Shlens, J., & Szegedy, C. (2014) · arXiv · doi:10.48550/arxiv.1412.6572 · Cited by 10,381
Towards Evaluating the Robustness of Neural Networks
Carlini, N., & Wagner, D. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.49 · Cited by 8,859
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Robust estimation of a location parameter
Huber, P. J. (1964) · The Annals of Mathematical Statistics · doi:10.1214/aoms/1177703732 · Cited by 7,228
Robust principal component analysis?
Candès, E. J., Li, X., Ma, Y., & Wright, J. N. (2011) · Journal of the ACM · doi:10.1145/1970392.1970395 · Cited by 7,048
Membership Inference Attacks Against Machine Learning Models
Shokri, R., Stronati, M., Song, C., & Shmatikov, V. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.41 · Cited by 4,754
The Limitations of Deep Learning in Adversarial Settings
Papernot, N., McDaniel, P., Jha, S., Fredrikson, M., Celik, Z. B., & Swami, A. (2016) · 2016 IEEE European Symposium on Security and Privacy (EuroS&P) · doi:10.1109/eurosp.2016.36 · Cited by 3,993
Flagged first, then by citations
2 of the 52 references couldn’t be matched to a known paper.
Research works printed but not linked: 6
- 0, Kaggle House Prices Advanced Regression Techniques
- kan, 0, Lending Club Loan Data
- hao, 2016, PREDA-TOR: Proactive recognition and elimination of domain abuse at time-of-registration, Proceedings of the 23rd ACM Conference on Computer and Communications Security
- faggella, 2016, Machine learning healthcare applications — 2017 and beyond
- 0, PharmGKB Downloads - IWPC Data
- srndic, 0, Mimicus - Contagio Dataset
Cited by
Sorted by citations
Items 401–500 of 861
Adi, E., Baig, Z. A., & Zeadally, S. (2022) · Applied Cybersecurity & Internet Governance · doi:10.5604/01.3001.0016.0800 · Cited by 10
BrainWash: A Poisoning Attack to Forget in Continual Learning
Abbasi, A., Nooralinejad, P., Pirsiavash, H., & Kolouri, S. (2024) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52733.2024.02271 · Cited by 9
Adversarial Impact on Anomaly Detection in Cloud Datacenters
Deka, P. K., Bhuyan, M. H., Kadobayashi, Y., & Elmroth, E. (2019) · IEEE Pacific Rim International Symposium on Dependable Computing (PRDC) · doi:10.1109/prdc47002.2019.00049 · Cited by 9
A Generative Model based Adversarial Security of Deep Learning and Linear Classifier Models
Sivaslıoğlu, S., Çatak, F. Ö., & Şahinbaş, K. (2021) · Informatica · doi:10.31449/inf.v45i1.3234 · Cited by 9
Adversarial Invariant Learning
Ye, N., Tang, J., Deng, H., Zhou, X.-Y., Li, Q., Li, Z., Yang, G., & Zhu, Z. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.01226 · Cited by 9
FedAegis: Edge-Based Byzantine-Robust Federated Learning for Heterogeneous Data
Zhou, F., Yu, R., Li, Z., Gu, H., & Wang, X. (2022) · Globecom · doi:10.1109/globecom48099.2022.10000981 · Cited by 9
Robustness of Deep Learning Models for Vision Tasks
Lee, Y., & Kim, J. (2023) · Applied Sciences · doi:10.3390/app13074422 · Cited by 11
Client-specific Property Inference against Secure Aggregation in Federated Learning
Kerkouche, R., Ács, G., & Fritz, M. (2023) · Workshop on Privacy in the Electronic Society · doi:10.1145/3603216.3624964 · Cited by 9
First-Order Efficient General-Purpose Clean-Label Data Poisoning
Zheng, T., & Li, B. (2021) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infocom42981.2021.9488730 · Cited by 9
Self-citationPrivacy and Ethical Concerns of Brain-Computer Interfaces
Yue, C. (2023) · IEEE International Conference on Metaverse Computing, Networking and Applications (MetaCom) · doi:10.1109/metacom57706.2023.00036 · Cited by 8
Low dimensional secure federated learning framework against poisoning attacks
Erdöl, E. S., Üstübioğlu, B., Erdöl, H., & Ulutaş, G. (2024) · Future Generation Computer Systems · doi:10.1016/j.future.2024.04.017 · Cited by 8
Edge-Assisted Label-Flipping Attack Detection in Federated Learning
Alotaibi, N., Felemban, M., & Mahmood, S. (2024) · IEEE Open Journal of the Communications Society · doi:10.1109/ojcoms.2024.3496872 · Cited by 9
DUPS: Data poisoning attacks with uncertain sample selection for federated learning
Zhang, H., Wang, K.-X., Liang, X.-Y., & Yu, Y.-F. (2024) · Computer Networks · doi:10.1016/j.comnet.2024.110909 · Cited by 8
Attack Vectors for Face Recognition Systems: A Comprehensive Review
Leyva, R., Epiphaniou, G., & Maple, C. R. (2025) · ACM Computing Surveys · doi:10.1145/3736753 · Cited by 8
Poisoning Attacks to Knowledge Distillation-Based Federated Learning Under Robust Aggregation Rules
Pang, X., Wang, Z., Liu, D., Hu, J., Sun, P., Luo, M., & Ren, K. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3586491 · Cited by 8
A defense method against multi-label poisoning attacks in federated learning
Ma, W., Zhao, Q., & Tian, W. (2025) · Scientific Reports · doi:10.1038/s41598-025-09672-x · Cited by 11
Robust Federated Learning Against Data Poisoning Attacks: Prevention and Detection of Attacked Nodes
Ovi, P. R., & Gangopadhyay, A. (2025) · Electronics · doi:10.3390/electronics14152970 · Cited by 8
Malpetti, D., Scutari, M., Gualdi, F., van Setten, J., van der Laan, S. W., Haitjema, S., Lee, A. M., Hering, I., & Mangili, F. (2025) · Frontiers in Digital Health · doi:10.3389/fdgth.2025.1644291 · Cited by 12
Bi-Level Poisoning Attack Model and Countermeasure for Appliance Consumption Data of Smart Homes
Billah, M., Anwar, A., Rahman, Z., & Galib, S. M. (2021) · RePEc: Research Papers in Economics · Cited by 8
Mitigation of a poisoning attack in federated learning by using historical distance detection
Shi, Z., Ding, X., Li, F., Chen, Y., & Li, C. (2022) · Annals of Telecommunications · doi:10.1007/s12243-022-00929-4 · Cited by 8
Imperceptible Attacks on Fault Detection and Diagnosis Systems in Smart Buildings
Alkhouri, I., Awad, A. S., Sun, W., & Atia, G. (2023) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2023.3288221 · Cited by 8
Effective Machine Learning-based Access Control Administration through Unlearning
Llamas, J. M., Preuveneers, D., & Joosen, W. (2023) · IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) · doi:10.1109/eurospw59978.2023.00011 · Cited by 8
Detecting Conventional and Adversarial Attacks Using Deep Learning Techniques: A Systematic Review
Ali, T., Eleyan, A., & Bejaoui, T. (2023) · International Symposium on Networks, Computers and Communications (ISNCC) · doi:10.1109/isncc58260.2023.10323872 · Cited by 10
Secure AI Model Sharing: A Cryptographic Approach for Encrypted Model Exchange
Neyigapula, B. S. (2024) · International Journal of Artificial Intelligence and Machine Learning · doi:10.51483/ijaiml.4.1.2024.48-60 · Cited by 9
TransGAN-Based Secure Indoor Localization Against Adversarial Attacks
Yan, Q., Xiong, W., & Wang, H. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3488836 · Cited by 8
Optimal Transport Barycentric Aggregation for Byzantine-Resilient Federated Learning
Kumar, K. N., Chalamala, S. R., Singh, A. K., & Mohan, C. K. (2025) · IEEE Transactions on Big Data · doi:10.1109/tbdata.2025.3604177 · Cited by 8
Recursive reasoning-based training-time adversarial machine learning
Chen, Y., Dai, Z., Yu, H., Low, B. K. H., & Ho, T. (2022) · Artificial Intelligence · doi:10.1016/j.artint.2022.103837 · Cited by 8
FLForest: Byzantine-robust Federated Learning through Isolated Forest
Wang, T., Zhao, B., & Fang, L. (2023) · IEEE International Conference on Parallel and Distributed Systems (ICPADS) · doi:10.1109/icpads56603.2022.00046 · Cited by 8
Generating Semantic Adversarial Examples with Differentiable RenderingPreprint
Jain, L., Chen, S., Wu, W., Jang, U., Chandrasekaran, V., Seshia, S. A., & Jha, S. (2019) · arXiv (Cornell University) · Cited by 8
Huang, S., Peng, X., Jiang, H., Luo, Y., & Yu, S. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2003.09739 · Cited by 12
A Gradient Method for Multilevel OptimizationPreprint
Sato, R., Tanaka, M., & Takeda, A. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2105.13954 · Cited by 8
Membership Inference Attacks Against Recommender SystemsPreprint
Zhang, M., Ren, Z., Wang, Z., Ren, P., Chen, Z., Hu, P., & Zhang, Y. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2109.08045 · Cited by 8
Using Anomaly Detection to Detect Poisoning Attacks in Federated Learning ApplicationsPreprint
Raza, A., Tran, K. P., Koehl, L., Li, S., & Tran, K. D. (2024) · SSRN Electronic Journal · doi:10.2139/ssrn.4811423 · Cited by 8
Zhao, R., Yang, Z., Liang, D., & Xue, F. (2024) · Lecture notes in operations research · doi:10.1007/978-981-97-1949-5_140 · Cited by 9
FedCmp: Byzantine-robust federated learning through clustering model update parameters
Wang, H., Wang, S., Wang, R., & Wang, P. (2025) · Information Sciences · doi:10.1016/j.ins.2025.122377 · Cited by 7
Adapting Aggregation Rule for Robust Federated Learning under Dynamic Attacks
Hu, C., Zhang, M., Li, N., Li, J., Yang, Z., Hassan, M. U., & Tei, K. (2025) · International Symposium on Software Engineering for Adaptive and Self-Managing Systems (SEAMS) · doi:10.1109/seams66627.2025.00026 · Cited by 7
AMA: Adaptive Model Poisoning Attacks Towards Federated Learning
Wu, D., Guo, Q., Qi, Y., Qi, S., & Li, Q. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3594175 · Cited by 7
Data Poisoning Attacks to Local Differential Privacy Protocols for Graphs
He, X. G., Huang, K., Ye, Q., & Hu, H. (2025) · IEEE International Conference on Data Engineering (ICDE) · doi:10.1109/icde65448.2025.00079 · Cited by 7
Trimming stability selection increases variable selection robustness
Werner, T. (2023) · Machine Learning · doi:10.1007/s10994-023-06384-z · Cited by 9
Upreti, D., Kim, H., Yang, E., & Seo, C. (2023) · IAES International Journal of Artificial Intelligence · doi:10.11591/ijai.v13.i1.pp459-466 · Cited by 17
Paliwal, M., & Chatradhi, N. (2023) · Advances in human resources management and organizational development book series · doi:10.4018/979-8-3693-0039-8.ch012 · Cited by 7
FLGQM: Robust Federated Learning Based on Geometric and Qualitative Metrics
Liu, S., Xi, X., Wang, M., Wu, F., Ji, Y., Zhu, C., & Zhang, Q. (2023) · Applied Sciences · doi:10.3390/app14010351 · Cited by 7
Manipulating Pre-Trained Encoder for Targeted Poisoning Attacks in Contrastive Learning
Chen, J., Gao, Y., Liu, G., Abdelmoniem, A. M., & Wang, C. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3350389 · Cited by 7
Lee, B., Kim, J., & Ro, Y. M. (2023) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51070.2023.00415 · Cited by 7
Data Poisoning Attacks and Mitigation Strategies on Federated Support Vector Machines
Mouri, I. J., Ridowan, M., & Adnan, M. A. (2024) · SN Computer Science · doi:10.1007/s42979-023-02556-9 · Cited by 7
Data Poisoning Attacks on Traffic State Estimation and Prediction (TSEP)
Wang, F., Wang, X., Hong, Y., Rockafellar, R. T., & Ban, X. J. (2023) · Transportation Research Part C Emerging Technologies · doi:10.1016/j.trc.2024.104577 · Cited by 12
Liu, Y., Wang, C., & Yuan, X. (2024) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3637528.3671879 · Cited by 7
Zhang, G., Liu, H., Yang, B. T., & Feng, S. (2024) · Peer-to-Peer Networking and Applications · doi:10.1007/s12083-024-01794-9 · Cited by 7
Fortifying NLP models against poisoning attacks: The power of personalized prediction architectures
Ferdinan, T., & Kocoń, J. (2024) · Information Fusion · doi:10.1016/j.inffus.2024.102692 · Cited by 9
Zhu, Y., Chong, L., Chen, C., Lyu, X., Chen, Z., Wang, B., Hu, F., Li, H., Dai, J., Cai, B., et al. (2024) · Computer Modeling in Engineering & Sciences · doi:10.32604/cmes.2024.054820 · Cited by 7
Model-Targeted Poisoning Attacks: Provable Convergence and Certified Bounds.
Suya, F., Mahloujifar, S., Evans, D., & Tian, Y. (2020) · Cited by 7
Weerasinghe, S., Abraham, T., Alpcan, T., Erfani, S., Leckie, C. A., & Rubinstein, B. I. P. (2021) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2021/437 · Cited by 7
Malware: The Never-Ending Arm Race
Menéndez, H. D. (2021) · doi:10.46723/ojc.1.1.3 · Cited by 7
FairRoad: Achieving Fairness for Recommender Systems with Optimized Antidote Data
Fang, M., Liu, J., Momma, M., & Sun, Y. (2022) · ACM Symposium on Access Control Models and Technologies (SACMAT) · doi:10.1145/3532105.3535023 · Cited by 8
An Incremental Gray-Box Physical Adversarial Attack on Neural Network Training
Al-qudah, R., Aloqaily, M., Ouni, B., Guizani, M., & Lestable, T. (2023) · International Conference on Communications · doi:10.1109/icc45041.2023.10278837 · Cited by 7
Manipulating hidden-Markov-model inferences by corrupting batch data
Caballero, W. N., Camacho, J. M., Ekin, T., & Naveiro, R. (2023) · Computers & Operations Research · doi:10.1016/j.cor.2023.106478 · Cited by 7
10 Security and Privacy Problems in Large Foundation Models
Jia, J., Liu, H., & Gong, N. Z. (2023) · Springer eBooks · doi:10.1007/978-3-031-42637-7_8 · Cited by 8
Spyware detection technique based on reinforcement learning
Lysenko, S., Bobrovnikova, K., Popov, P. T., Харченко, В. С., & Medzatyi, D. (2020) · City Research Online (City University London) · Cited by 7
An Optimal Control View of Adversarial Machine LearningPreprint
Zhu, X. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1811.04422 · Cited by 7
Regula Sub-rosa: Latent Backdoor Attacks on Deep Neural NetworksPreprint
Yao, Y., Li, H., Zheng, H.-T., & Zhao, B. Y. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1905.10447 · Cited by 7
Liu, Y., Shen, G., Tao, G., Wang, Z., Ma, S., & Zhang, X. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2103.08820 · Cited by 9
Backdoor Attacks on Federated Learning with Lottery Ticket HypothesisPreprint
Yin, Z., Yuan, Y., Guo, P., & Zhou, P. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2109.10512 · Cited by 7
Secure AI Systems: Emerging Threats and Defense Mechanisms
Rahaman, H., Chatterjee, A., & Bhunia, S. (2024) · Proceedings - Asian Test Symposium/Proceedings · doi:10.1109/ats64447.2024.10915428 · Cited by 6
Mostofi, F., Toğan, V., & Tokdemir, O. B. (2025) · Advanced Engineering Informatics · doi:10.1016/j.aei.2025.104019 · Cited by 6
A survey on privacy issues and mitigation strategies for LLMs in healthcare
Alissa, K. A. (2025) · The Journal of Supercomputing · doi:10.1007/s11227-025-08146-1 · Cited by 8
Adversarial Machine Learning: A 20-Year Survey of Attacks, Defenses, and Standards
Tekeste, B., Al-Hussaeni, K., Fung, B. C. M., Alawadhi, I. M., & Fachkha, C. (2026) · IEEE Access · doi:10.1109/access.2026.3690620 · Cited by 7
Protecting machine learning systems using blockchain: solutions, challenges and future prospects
Hajlaoui, R., Dhahri, S., Mahfoudhi, S., Moulahi, T., & Alotibi, G. N. (2024) · Multimedia Tools and Applications · doi:10.1007/s11042-024-19993-0 · Cited by 7
Poisoning Attacks and Defenses to Learned Bloom Filters for Malicious URL Detection
Dong, F., Wang, P., Li, R., Cui, X., Zhao, J., Tao, J., Zhang, C., & Guan, X. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3528993 · Cited by 6
On the Initial Behavior Monitoring Issues in Federated Learning
Mallah, R. A., Badu-Marfo, G., & Farooq, B. (2021) · IEEE Access · doi:10.1109/access.2021.3131102 · Cited by 6
Cyber Threat Ontology and Adversarial Machine Learning Attacks: Analysis and Prediction Perturbance
Yeboah-Ofori, A., Ismail, U. M., Swidurski, T., & Opoku-Boateng, F. A. (2021) · International Conference on Computing, Computational Modelling and Applications (ICCMA) · doi:10.1109/iccma53594.2021.00020 · Cited by 6
Evolutionary computation and machine learning in security
Picek, S., & Jakobović, D. (2022) · Genetic and Evolutionary Computation Conference Companion (GECCO Companion) · doi:10.1145/3520304.3534087 · Cited by 6
A Robust Framework for Adaptive Selection of Filter Ensembles to Detect Adversarial Inputs
Roy, A., & Dasgupta, D. (2022) · International Conference on Dependable Systems and Networks workshops · doi:10.1109/dsn-w54100.2022.00019 · Cited by 6
SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning
Chaudhari, H., Jagielski, M., & Oprea, A. (2023) · IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) · doi:10.1109/satml54575.2023.00021 · Cited by 8
Self-citationModelling Data Poisoning Attacks Against Convolutional Neural Networks
Jonnalagadda, A., Mohanty, D., Zakee, A., & Kamalov, F. (2024) · Journal of Information & Knowledge Management · doi:10.1142/s0219649224500229 · Cited by 6
A black-box adversarial attack on demand side management
Cramer, E., & Gao, J. Q. (2024) · Computers & Chemical Engineering · doi:10.1016/j.compchemeng.2024.108681 · Cited by 6
Cost Aware Adversarial Learning
Silva, S. D., Kim, J., & Raich, R. (2020) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp40776.2020.9053631 · Cited by 6
Xue, M., He, C., Wang, J., & Liu, W. (2020) · Computers & Security · doi:10.1016/j.cose.2020.102046 · Cited by 6
A Defense Method against Poisoning Attacks on IoT Machine Learning Using Poisonous Data
Chiba, T., Sei, Y., Tahara, Y., & Ohsuga, A. (2020) · IEEE International Conference on Artificial Intelligence and Knowledge Engineering (AIKE) · doi:10.1109/aike48582.2020.00022 · Cited by 6
Data-Driven Control and Data-Poisoning attacks in Buildings: the KTH Live-In Lab case study
Russo, A., Molinari, M., & Proutière, A. (2021) · Mediterranean Conference on Control and Automation (MED) · doi:10.1109/med51440.2021.9480238 · Cited by 6
Nakai, T., Suzuki, D., & Fujino, T. (2021) · IACR Transactions on Cryptographic Hardware and Embedded Systems · doi:10.46586/tches.v2021.i3.149-175 · Cited by 6
Robust and privacy-preserving collaborative training: a comprehensive survey
Yang, F., Zhang, X., Guo, S., Chen, D., Gan, Y., Xiang, T., & Liu, Y. (2024) · Artificial Intelligence Review · doi:10.1007/s10462-024-10797-0 · Cited by 17
Moyeen, M. A., Kaur, K., Agarwal, A., Manzano, S. R., Zaman, M., & Goel, N. (2025) · IEEE Access · doi:10.1109/access.2025.3592207 · Cited by 5
Chen, L., Zhai, W., Bu, X., Sun, M., & Zhu, C. (2025) · Drones · doi:10.3390/drones9080528 · Cited by 5
Deepfake Detection in CCTV Videos Using Deep Learning
Imran, J., Bawany, N. Z., & Tahzeeb, S. (2025) · Arabian Journal for Science and Engineering · doi:10.1007/s13369-025-10526-x · Cited by 5
Xiong, H., Lv, J., Man, D., Zhu, Y., Liu, T., Wang, H., Xu, C., & Yang, W. (2025) · Computer Communications · doi:10.1016/j.comcom.2025.108272 · Cited by 5
Tinoco-Martínez, S. R., Ferreira-Medina, H., Cendejas-Valdez, J. L., Rendón, F. H., Flores-Monroy, M. M., & Ginori-Rodríguez, B. H. (2022) · Lecture notes in networks and systems · doi:10.1007/978-3-031-16075-2_1 · Cited by 5
Novel poisoning attacks for clustering methods via robust feature generation
Zhang, C., & Tang, Z. (2024) · Neurocomputing · doi:10.1016/j.neucom.2024.127925 · Cited by 5
Yuan, A., Oprea, A., & Tan, C. (2024) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp54263.2024.00026 · Cited by 5
Self-citationSketchBoard: Sketch-Guided Storyboard Generation for Game Characters in the Game Industry
Chan, E. M. Y., Seow, C. K., Tan, E. S. W., Wang, M., Yau, P. C., & Cao, Q. P. (2024) · IEEE International Conference on Industrial Informatics (INDIN) · doi:10.1109/indin58382.2024.10774282 · Cited by 5
SAP: Corrective Machine Unlearning with Scaled Activation Projection for Label Noise Robustness
Kodge, S., Ravikumar, D., Saha, G., & Roy, K. (2025) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v39i17.33972 · Cited by 5
Maddisetti, L., & Ravindra, J. V. R. (2019) · IEEE Nordic Circuits and Systems Conference (NorCAS) · doi:10.1109/norchip.2019.8906934 · Cited by 5
Predicting and Preventing Malware in Machine Learning Model
Nisha, D., Sivaraman, E., & Honnavalli, P. B. (2019) · International Conference on Computing, Communication and Networking Technologies (ICCCNT) · doi:10.1109/icccnt45670.2019.8944462 · Cited by 5
Overview of PDF Malware Classifiers
Reddy, G. S., Kaur, H., Kaur, P., Kaur, G., & Madhuri (2021) · International Conference on Intelligent Engineering and Management (ICIEM) · doi:10.1109/iciem51511.2021.9445341 · Cited by 5
Liu, I., Li, J.-S., Peng, Y.-C., & Liu, C.-G. (2022) · Applied Sciences · doi:10.3390/app12157753 · Cited by 6
Self-citationCareful What You Wish For: on the Extraction of Adversarially Trained Models
Khaled, K., Nicolescu, G., & de Magalhães, F. G. (2022) · Conference on Privacy, Security and Trust · doi:10.1109/pst55820.2022.9851981 · Cited by 6
VerifyTL: Secure and Verifiable Collaborative Transfer Learning
Ma, Z., Ma, J., Miao, Y., Liu, X., Zheng, W., Choo, K. R., & Deng, R. H. (2023) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2023.3241181 · Cited by 5
Triggerability of Backdoor Attacks in Multi-Source Transfer Learning-based Intrusion Detection
Alhussien, N., AlEroud, A. F., Rahaeimehr, R., & Schwarzmann, A. A. (2022) · IEEE/ACM International Conference on Big Data Computing, Applications and Technologies (BDCAT) · doi:10.1109/bdcat56447.2022.00013 · Cited by 5
Leveraging Model Poisoning Attacks on License Plate Recognition Systems
Chen, J., Gao, Y., Liu, Y., Wang, C., & Peng, K. (2022) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom56396.2022.00115 · Cited by 5
Akram, S., Bazai, S. U., Ghafoor, M. I., Marjan, S., Hamza, M., & Shah, S. A. A. (2023) · International Conference on Energy, Power, Environment, Control, and Computing (ICEPECC) · doi:10.1109/icepecc57281.2023.10209461 · Cited by 5
Black-Box Data Poisoning Attacks on Crowdsourcing
Chen, P., Yang, Y., Yang, D., Sun, H., Chen, Z., & Lin, P. (2023) · International Joint Conference on Artificial Intelligence · doi:10.24963/ijcai.2023/332 · Cited by 6
Metadata
- Authors
- Jagielski, M., Oprea, A., Biggio, B., Liu, C., Nita-Rotaru, C., & Li, B.
- Affiliations
- Northeastern University (US)
- University of Cagliari (IT)
- University of California, Berkeley (US)
- Venue
- 2018 IEEE Symposium on Security and Privacy (SP)
- Publisher
- IEEE
- Published
- 2018-05
- Pages
- 19-35
- ISSN
- 1081-6011 (ISSN-L)
- OpenAlex
- W2962763344
- Cited by
- 861
- References
- 52
- Citations by year
- 2026: 50 · 2025: 114 · 2024: 133 · 2023: 146 · 2022: 120 · 2021: 132 · 2020: 98 · 2019: 54 · 2018: 14
- FWCI
- 30.43
- Type
- conference paper
- Language
- en
- Open access
- bronze
- doi.org
- Locations
- IEEE Symposium on Security and Privacy (S&P) (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- UNICA IRIS Institutional Research Information System (University of Cagliari) (submittedVersion, public-domain)
- arXiv (Cornell University)
- Funders
- National Science Foundation (1238962, 1238959, 1239054, 1239166)
- European Commission (780788, EU-H2020, HORIZON2020, H2020)
- Defense Advanced Research Projects Agency (FA8750-17-2-0091, FA8750)
- Horizon 2020 Framework Programme (EU‐H2020, 780788)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Keywords
- poisoning attacks, linear regression, adversarial learning, statistical attacks, optimization framework, convergence guarantees, health care, loan assessment, real estate
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
